Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144541.roa
File:                     AS144541.roa (raw, json)
Hash identifier:          WqYIm8kqJJQ5ovogBn1BNMe1L+2v2AyqYUosCnVeqVA=
Subject key identifier:   06:0E:72:F5:86:A4:4D:BA:3C:FB:76:B5:D4:F4:D3:25:3B:B1:DA:DE
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5ED0CBCA7665CE0AE7DCAE5C9F205BFAE9FF5428
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144541.roa
Signing time:             Mon 25 May 2026 01:38:08 +0000
ROA not before:           Mon 25 May 2026 01:33:08 +0000
ROA not after:            Mon 24 May 2027 01:38:08 +0000
asID:                     144541
IP address blocks:        240a:a763::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d0:cb:ca:76:65:ce:0a:e7:dc:ae:5c:9f:20:5b:fa:e9:ff:54:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:08 2026 GMT
            Not After : May 24 01:38:08 2027 GMT
        Subject: CN=060E72F586A44DBA3CFB76B5D4F4D3253BB1DADE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8d:a0:28:9b:6e:6d:d6:84:26:63:a8:14:4e:
                    9f:db:ac:b2:1e:01:e0:45:ac:09:15:5c:c6:f4:84:
                    a1:0c:7d:ad:72:a5:a8:17:cc:52:24:c0:33:5d:3e:
                    7f:43:55:b4:03:ec:10:f5:7b:39:f6:84:47:82:55:
                    cb:f5:99:db:4b:2c:43:a7:d3:eb:d4:fd:5b:a2:5e:
                    59:46:40:49:53:62:7a:bc:96:84:7a:0e:7b:3d:6d:
                    34:c2:c7:18:bf:23:f9:2c:fe:0e:50:12:f8:3d:9a:
                    a8:3c:bb:eb:46:5d:fa:6b:f7:65:c7:82:d5:8f:5f:
                    a6:c2:99:a3:80:2b:58:5f:5c:49:07:35:68:46:a4:
                    28:62:88:e6:4f:f6:0a:15:ee:bc:3c:b0:52:c1:ec:
                    6f:c4:40:c3:d8:72:c3:16:c2:ad:46:ac:a3:c0:0a:
                    e1:65:7d:2a:fe:50:4c:9f:2a:1f:05:d1:59:20:93:
                    23:ff:c9:37:a1:d1:dc:6c:96:9d:3d:2c:af:96:4a:
                    83:c5:f6:33:5b:90:6d:27:0e:f4:38:93:05:09:9b:
                    2a:24:05:e0:52:cd:85:d2:00:c6:cb:2c:36:e1:49:
                    a7:66:c8:0f:ac:63:34:01:6b:fc:a4:ea:e0:1d:3c:
                    ba:f1:f1:b7:a4:5b:bc:3b:fc:07:24:9a:0f:85:40:
                    61:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0E:72:F5:86:A4:4D:BA:3C:FB:76:B5:D4:F4:D3:25:3B:B1:DA:DE
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144541.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a763::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:32:f6:50:82:30:e4:e4:28:94:b0:74:7f:14:41:5d:78:a9:
         99:0a:ac:40:6d:a0:75:06:af:18:11:d1:d0:ac:e5:d5:4f:e3:
         d0:59:3d:ca:0d:08:90:31:f7:95:f0:5f:34:56:85:94:7d:09:
         4b:a5:f4:23:46:5b:97:cf:a3:e4:92:64:a2:73:21:5e:e9:01:
         05:e9:76:63:d7:f2:6b:c8:cc:99:38:37:2c:d0:ca:51:fa:21:
         88:68:2d:cc:96:b7:bc:d7:12:90:1c:6d:4e:5c:8e:9e:e6:3d:
         aa:f4:58:f5:2b:3f:57:fe:97:59:16:04:c7:ce:49:b6:c2:66:
         b8:c0:b7:ec:21:31:29:c4:b2:f5:69:47:1b:ef:e1:d4:d4:67:
         57:24:32:12:c6:bb:33:b8:26:2d:5c:f4:88:25:db:0b:de:a8:
         e2:d2:c9:b9:05:25:b0:07:69:ef:17:d8:46:7e:af:8c:aa:87:
         2e:3a:cb:e2:ce:11:47:de:5f:8c:4a:f7:c8:4a:91:08:74:e0:
         68:83:4e:0f:99:44:7e:1e:70:46:05:e8:cf:7f:4d:5c:96:5a:
         1f:30:c6:38:e7:00:40:e2:df:f0:47:70:4a:91:0d:16:bf:f7:
         15:01:8e:82:33:4a:e8:5a:1a:da:8d:41:57:e5:ba:32:db:08:
         e3:6b:8e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:37 2026 by rpki-client