Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144565.roa
File:                     AS144565.roa (raw, json)
Hash identifier:          UNpM3qRNgPqG+GliuDM/ecpPG9xiLhnsK+Igelb4Un0=
Subject key identifier:   E5:4D:EA:D5:CC:A8:BE:35:C9:5E:88:D7:1E:D4:6B:35:1F:12:4D:57
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       63E98E4C8F551520032970F4B29C68ABE8400B9D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144565.roa
Signing time:             Tue 26 May 2026 02:35:18 +0000
ROA not before:           Tue 26 May 2026 02:30:18 +0000
ROA not after:            Tue 25 May 2027 02:35:18 +0000
asID:                     144565
IP address blocks:        240a:a77b::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:e9:8e:4c:8f:55:15:20:03:29:70:f4:b2:9c:68:ab:e8:40:0b:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:30:18 2026 GMT
            Not After : May 25 02:35:18 2027 GMT
        Subject: CN=E54DEAD5CCA8BE35C95E88D71ED46B351F124D57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cf:0f:dd:77:5a:dd:ce:09:c2:45:d6:80:55:
                    87:ac:0d:0c:96:9d:36:fb:32:73:ca:16:84:0e:9c:
                    af:ea:15:c7:ce:e8:f7:19:9e:4b:55:d0:ca:79:97:
                    ca:20:e8:14:ee:29:49:e2:c7:b3:07:b5:41:5e:e0:
                    10:8c:0f:3b:34:80:f0:6d:03:e5:55:d9:c4:5c:16:
                    33:f0:f9:ac:93:95:df:67:af:a2:d5:b7:b2:01:9f:
                    87:e9:6f:51:2a:1a:45:10:72:cf:86:99:07:2f:85:
                    da:f7:85:ef:41:bd:6a:45:e8:9f:6d:45:20:7b:26:
                    ab:09:07:b7:3d:3c:10:ea:bf:a8:aa:70:89:7e:5f:
                    35:29:33:1d:c3:af:d0:98:48:f7:c7:63:a3:36:32:
                    ce:c8:ae:a3:73:23:42:6c:45:8b:bb:c4:f3:83:86:
                    da:56:06:a3:dc:29:da:9c:e1:45:69:3c:8d:f2:5a:
                    8c:f0:6d:26:ca:d8:ca:20:8b:fd:8b:45:89:64:4c:
                    b5:c6:1f:c9:f8:ee:51:79:0a:06:fe:5c:ab:ce:bd:
                    61:9e:18:88:ce:54:70:81:e6:93:34:3a:34:26:f4:
                    d4:65:0a:e3:4d:d5:44:07:36:02:dc:c6:10:12:f8:
                    91:b0:8b:4e:d1:a7:97:2b:ed:0f:9b:c4:cb:39:db:
                    30:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:4D:EA:D5:CC:A8:BE:35:C9:5E:88:D7:1E:D4:6B:35:1F:12:4D:57
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144565.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a77b::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:2a:8e:58:00:23:2c:df:8e:6f:76:8e:56:04:4c:3e:9c:fa:
         dc:ae:8b:bc:93:6e:93:01:f3:32:16:38:cd:d9:08:56:27:5c:
         64:53:04:9f:7e:7b:cc:3a:60:e9:b5:dc:a1:2c:7c:53:d5:77:
         fe:a0:74:7a:61:3a:87:a4:66:2b:01:1b:12:85:93:72:27:3f:
         6a:3f:e8:84:32:c1:6e:64:0e:e6:b9:b4:be:fd:fd:9c:ce:16:
         fb:54:61:23:93:72:81:ef:95:d7:95:ab:f8:41:98:28:9d:56:
         07:96:a4:3b:66:a3:c8:09:d7:50:08:48:d0:77:a0:c0:3c:21:
         92:9e:ac:1e:15:ef:6d:5d:d5:96:49:2a:c0:0c:7c:b2:6e:89:
         e4:00:2a:5e:3d:55:92:e4:c6:40:8a:02:a9:21:85:a4:6f:6f:
         b0:e4:6b:c1:1b:dc:a6:26:69:56:d4:57:89:21:0c:82:8b:b0:
         e1:fd:e5:5d:5d:f7:61:b8:8c:76:ca:1b:3d:dd:98:c5:62:ea:
         a4:d6:ca:e3:f4:aa:f1:48:e9:11:06:f1:04:34:5f:d8:54:92:
         eb:85:98:8e:ed:d7:62:8a:12:c7:16:ca:8a:6b:e5:6f:a6:0e:
         7a:14:44:5d:66:f4:fc:19:28:d6:55:65:6f:5d:b6:2d:c1:e5:
         1a:1f:1b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:44 2026 by rpki-client