Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144563.roa
File:                     AS144563.roa (raw, json)
Hash identifier:          RVubSRdSpKhtDA4sczluUWT33j4WciPnBPMiVEFIcEQ=
Subject key identifier:   43:6E:D0:5F:E7:CC:53:E9:A4:34:8A:9F:74:62:D5:2E:30:FD:4C:1D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       41D8A9C8FCD8BB3070968769DDB220F57D3A7946
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144563.roa
Signing time:             Mon 25 May 2026 02:22:49 +0000
ROA not before:           Mon 25 May 2026 02:17:49 +0000
ROA not after:            Mon 24 May 2027 02:22:49 +0000
asID:                     144563
IP address blocks:        240a:a779::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d8:a9:c8:fc:d8:bb:30:70:96:87:69:dd:b2:20:f5:7d:3a:79:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 02:17:49 2026 GMT
            Not After : May 24 02:22:49 2027 GMT
        Subject: CN=436ED05FE7CC53E9A4348A9F7462D52E30FD4C1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ab:30:17:f3:20:8d:c9:13:53:96:cb:ec:30:
                    f8:09:52:eb:fc:11:fe:16:af:11:38:b9:8d:60:73:
                    4f:36:4f:cf:11:c5:01:01:dd:7d:ed:f3:2b:16:e1:
                    98:9f:cc:09:6b:8a:7e:37:fb:0f:70:26:37:b2:88:
                    b6:87:25:0f:e7:14:3e:6a:0d:02:c8:53:d3:7c:75:
                    3b:7a:bb:e4:9f:25:5a:44:32:ac:0e:43:1f:2b:bb:
                    03:02:8e:cb:23:69:da:bc:d7:a2:3d:02:e8:d8:3c:
                    1e:ea:b9:12:30:b1:0c:c5:a2:51:9c:2a:51:8f:3a:
                    63:67:16:8b:41:44:c3:47:1b:d8:6f:a0:e2:87:96:
                    c4:54:e1:ec:2f:b9:d3:70:cd:4c:cc:8a:c3:54:c7:
                    05:aa:ab:b2:89:ab:e5:c5:11:ea:67:8c:09:08:62:
                    92:ab:24:f3:f3:c2:b0:0a:36:d6:aa:f3:9f:77:de:
                    5c:3c:ed:59:fd:a4:0e:c3:f5:77:79:01:9a:d1:f2:
                    29:97:96:d1:9b:77:2e:74:01:18:72:bf:e0:8a:d7:
                    f0:2a:8e:d3:ec:4d:09:3d:84:27:12:f6:38:bf:00:
                    43:5a:29:e7:a1:05:9d:ac:99:eb:6e:1b:f0:40:85:
                    5c:7b:48:a4:9f:57:1c:b7:ff:39:a5:ad:4c:28:7e:
                    b1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6E:D0:5F:E7:CC:53:E9:A4:34:8A:9F:74:62:D5:2E:30:FD:4C:1D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144563.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a779::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:e6:f2:72:30:09:eb:f6:49:de:a1:6a:1c:a8:b5:c3:49:48:
         a4:2d:20:f6:1b:aa:b3:28:8e:0f:e5:f3:60:c1:d2:d5:60:7c:
         46:05:53:db:60:ba:8d:bb:63:36:3b:bb:a3:0b:55:c2:c4:84:
         03:35:d0:b7:bc:b7:f0:53:49:fc:2d:17:93:16:b4:38:a0:5d:
         16:d4:12:ed:46:57:02:f3:ec:9a:fd:91:ec:09:dc:2c:c2:39:
         39:73:4d:b8:6e:b0:b0:8e:b8:61:26:b9:fa:7d:15:03:c3:a4:
         29:15:0e:29:07:fc:ef:1b:03:b2:fb:a6:46:55:8a:b1:4e:9d:
         78:28:09:85:c2:df:e7:3d:bf:cf:83:24:fd:f1:d9:5d:23:f7:
         56:cf:94:ec:ab:4c:68:92:39:1b:37:8d:36:38:6c:ef:db:ed:
         f4:9c:47:26:bf:d7:e7:74:4f:ab:6a:9e:8f:88:eb:70:ba:27:
         2a:b5:70:af:d4:ce:c9:a3:4e:36:fb:0a:f2:12:81:7d:0c:54:
         5f:41:6b:56:b9:13:5e:5b:4d:f4:8c:91:9e:36:00:be:ba:10:
         de:9a:5b:3e:3a:a0:d2:4c:e7:14:fb:fc:29:7a:0f:dc:3c:f0:
         ae:97:8c:5d:e9:cb:68:9e:31:76:da:6f:75:b6:cd:4e:17:ab:
         32:3a:1c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:34 2026 by rpki-client