Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144544.roa
File:                     AS144544.roa (raw, json)
Hash identifier:          MLGSCdC0ZUvE0lGNS0eWjV6upFuLLEdmRyKlwNXd4TM=
Subject key identifier:   05:B7:A5:F9:E4:C5:E6:52:33:5B:9E:F0:43:E0:E7:6D:36:DF:12:11
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0F31A1F21A0C26D4179E40AD0FF935BA090C2046
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144544.roa
Signing time:             Mon 25 May 2026 06:28:10 +0000
ROA not before:           Mon 25 May 2026 06:23:10 +0000
ROA not after:            Mon 24 May 2027 06:28:10 +0000
asID:                     144544
IP address blocks:        240a:a766::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:31:a1:f2:1a:0c:26:d4:17:9e:40:ad:0f:f9:35:ba:09:0c:20:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:10 2026 GMT
            Not After : May 24 06:28:10 2027 GMT
        Subject: CN=05B7A5F9E4C5E652335B9EF043E0E76D36DF1211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fc:f8:d2:04:03:29:46:9a:b2:3e:2f:49:ac:
                    7b:19:10:ef:52:cc:ae:11:e5:a3:d2:93:ca:4f:2e:
                    33:18:fe:72:90:3f:e4:73:e2:f6:1f:1f:4a:a3:f2:
                    c3:d0:55:76:e8:0f:54:f3:40:ce:be:5e:af:2f:ef:
                    f7:c3:72:56:f3:46:04:19:47:75:1a:9d:58:1e:03:
                    b8:57:d7:7e:29:5f:ad:03:b4:30:5b:54:89:67:2a:
                    c7:80:63:27:03:50:d3:41:0e:df:d6:f1:38:95:22:
                    fd:99:17:db:92:8b:48:64:1b:da:8c:82:9d:be:9d:
                    f7:c6:d2:b3:dc:1d:ce:9d:ed:dc:1a:69:e2:f3:00:
                    5d:86:22:d2:22:01:e3:03:46:b4:4b:23:a3:10:cd:
                    09:3d:52:97:49:59:56:aa:47:b1:b4:4e:ef:6a:3c:
                    4d:30:63:29:9a:2c:65:79:95:12:6c:ba:36:c7:66:
                    1c:d0:5b:24:08:d8:48:05:19:c7:4c:cd:37:64:06:
                    09:07:cb:0c:96:35:0c:ae:ac:2a:72:f1:ac:c4:95:
                    47:de:7b:a3:e6:5f:f6:a9:21:2c:a2:b1:66:30:b7:
                    7f:60:52:ae:a5:81:b3:be:a8:cc:7e:35:77:80:9d:
                    10:92:7e:73:d2:31:3f:12:10:09:59:d0:ca:40:a2:
                    ee:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B7:A5:F9:E4:C5:E6:52:33:5B:9E:F0:43:E0:E7:6D:36:DF:12:11
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144544.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a766::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:a1:25:9a:c8:ca:d1:cd:17:36:a8:8d:74:2a:71:9a:4c:21:
         b0:a7:c1:c7:95:33:2f:52:0f:06:2a:a7:fe:70:31:8d:4c:bf:
         17:de:48:2a:50:d1:d7:40:98:96:ba:fa:59:fe:f8:63:73:df:
         ab:3a:ea:06:d6:77:04:8c:3e:7c:48:37:6b:2b:e2:5f:44:3c:
         1a:a9:f2:06:2e:65:0e:3e:b5:06:11:7b:b1:da:34:96:aa:46:
         40:5d:f0:c0:13:46:bf:45:ed:72:27:8d:90:77:05:b0:b6:9e:
         c0:65:54:88:b6:ef:f1:92:7f:f6:c4:b0:90:29:09:2e:8e:6d:
         fd:8e:d4:51:35:06:bd:9b:a4:8b:38:62:5b:ed:1a:45:d2:4a:
         7e:21:36:cc:3f:76:42:e3:e2:87:9c:dd:18:86:b3:42:51:08:
         c4:ed:59:8c:a4:af:5c:51:41:1f:4a:0b:a9:d7:e4:2c:7b:d6:
         16:2f:68:e0:a6:98:c4:80:88:2f:03:f0:03:5d:ed:f5:e9:53:
         e3:3e:40:4b:43:24:5d:4a:90:99:2d:e9:cf:b8:7c:32:c7:0c:
         36:f5:50:25:46:fc:03:3f:46:50:3f:d2:ff:f1:7a:34:54:ca:
         1b:33:ae:ef:82:cc:d4:6b:c4:ef:78:87:9b:03:f1:eb:6c:22:
         2f:39:d0:eb
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUDzGh8hoMJtQXnkCtD/k1ugkMIEYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjIzMTBaFw0yNzA1MjQwNjI4MTBaMDMxMTAvBgNV
BAMTKDA1QjdBNUY5RTRDNUU2NTIzMzVCOUVGMDQzRTBFNzZEMzZERjEyMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw/PjSBAMpRpqyPi9JrHsZEO9S
zK4R5aPSk8pPLjMY/nKQP+Rz4vYfH0qj8sPQVXboD1TzQM6+Xq8v7/fDclbzRgQZ
R3UanVgeA7hX134pX60DtDBbVIlnKseAYycDUNNBDt/W8TiVIv2ZF9uSi0hkG9qM
gp2+nffG0rPcHc6d7dwaaeLzAF2GItIiAeMDRrRLI6MQzQk9UpdJWVaqR7G0Tu9q
PE0wYymaLGV5lRJsujbHZhzQWyQI2EgFGcdMzTdkBgkHywyWNQyurCpy8azElUfe
e6PmX/apISyisWYwt39gUq6lgbO+qMx+NXeAnRCSfnPSMT8SEAlZ0MpAou7lAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUBbel+eTF5lIzW57wQ+DnbTbfEhEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NTQ0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqnZjANBgkqhkiG9w0BAQsFAAOCAQEAb6El
msjK0c0XNqiNdCpxmkwhsKfBx5UzL1IPBiqn/nAxjUy/F95IKlDR10CYlrr6Wf74
Y3PfqzrqBtZ3BIw+fEg3ayviX0Q8GqnyBi5lDj61BhF7sdo0lqpGQF3wwBNGv0Xt
cieNkHcFsLaewGVUiLbv8ZJ/9sSwkCkJLo5t/Y7UUTUGvZukizhiW+0aRdJKfiE2
zD92QuPih5zdGIazQlEIxO1ZjKSvXFFBH0oLqdfkLHvWFi9o4KaYxICILwPwA13t
9elT4z5AS0MkXUqQmS3pz7h8MscMNvVQJUb8Az9GUD/S//F6NFTKGzOu74LM1GvE
73iHmwPx62wiLznQ6w==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:31 2026 by rpki-client