Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144566.roa
File:                     AS144566.roa (raw, json)
Hash identifier:          vCzJ50KIZe7KvdwEwWgcSTJcG7Hd42bHOapU42rcWSo=
Subject key identifier:   BB:19:CC:84:A3:41:33:D3:A4:87:02:BB:1F:2B:0C:33:99:E7:CA:AA
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4F536228314969E716F7E976527F4C10748B2019
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144566.roa
Signing time:             Fri 22 May 2026 01:50:29 +0000
ROA not before:           Fri 22 May 2026 01:45:29 +0000
ROA not after:            Fri 21 May 2027 01:50:29 +0000
asID:                     144566
IP address blocks:        240a:a77c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:53:62:28:31:49:69:e7:16:f7:e9:76:52:7f:4c:10:74:8b:20:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:29 2026 GMT
            Not After : May 21 01:50:29 2027 GMT
        Subject: CN=BB19CC84A34133D3A48702BB1F2B0C3399E7CAAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7f:36:f0:5d:54:3f:9b:cc:70:18:7b:0e:ad:
                    01:af:cb:1e:e3:3f:82:f1:4a:ea:8f:8b:bb:ae:4d:
                    e0:21:66:95:7b:3b:45:94:7f:e5:b0:66:7c:b9:6f:
                    23:4b:f2:93:30:30:ba:b0:72:ac:0b:1e:87:fb:9c:
                    38:a3:ee:97:e4:e3:ae:4e:13:6a:b7:03:02:d9:9f:
                    4b:57:5a:d3:b5:2d:95:20:5a:fc:6e:c4:6e:dc:3e:
                    44:fb:9f:66:95:f1:29:92:2a:1c:dd:61:d3:70:d1:
                    4a:97:6b:d2:d9:a8:d3:38:9a:66:6e:b5:cd:db:44:
                    c5:92:84:63:7c:75:7c:9e:44:f7:75:67:58:b1:07:
                    3c:5c:eb:86:43:70:78:5c:3a:dd:8a:e8:da:eb:3c:
                    0e:d0:2c:25:28:4b:60:26:7b:a9:8c:c5:bc:a9:2e:
                    96:ed:3c:31:df:e0:2d:c2:9f:dd:9c:1d:65:45:9a:
                    46:b8:0b:03:a7:1f:9d:38:4f:6d:ae:d9:b8:09:0e:
                    ba:14:f3:f4:df:9d:80:b8:2d:00:57:e1:5c:5d:5f:
                    60:7e:93:2d:83:5f:5b:2d:59:dd:3d:ca:12:88:ce:
                    c3:63:88:ca:8c:05:c1:8d:7b:32:37:77:d5:28:2a:
                    70:a9:35:4a:6c:fc:f0:77:df:55:e4:43:8b:15:79:
                    bf:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:19:CC:84:A3:41:33:D3:A4:87:02:BB:1F:2B:0C:33:99:E7:CA:AA
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144566.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a77c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:5f:e1:d3:8a:80:70:9c:27:ce:7b:52:eb:c2:24:fa:60:b3:
         d9:0f:2e:b1:4d:cd:e7:2f:e5:f1:a7:53:10:17:8d:67:a5:a7:
         b1:3f:bc:87:5e:41:07:be:43:49:9c:80:48:90:af:21:51:1b:
         1b:f9:0a:15:5a:0c:86:ba:ff:0b:4f:61:8a:2f:90:b2:19:a8:
         a2:2d:0d:bb:45:c4:b1:a6:c2:a8:ff:5f:54:03:24:4d:59:59:
         44:a0:d6:2e:a7:a5:ec:e4:24:02:ce:19:c4:88:b0:b5:20:6a:
         b2:cf:4f:08:c8:2a:88:56:be:97:72:de:5b:98:89:2c:fc:9f:
         70:30:dc:22:93:5b:8e:0d:f9:3d:d8:bc:bf:eb:01:71:a1:b3:
         c6:80:cc:2d:59:68:08:01:ce:3f:10:c5:08:fa:9d:41:33:2b:
         38:53:55:1c:b5:26:55:ac:db:1c:f6:36:a3:4f:7c:f2:57:48:
         85:c0:47:94:b0:d1:44:a7:a9:e6:3f:64:83:8c:a9:98:8e:14:
         9d:3b:24:9e:c5:a9:71:0c:bb:cb:14:1c:98:ad:76:2b:ae:04:
         23:e4:cb:5f:fb:c5:d2:2c:08:32:a2:e9:92:3c:0d:ee:e9:58:
         80:1e:5b:40:75:1c:c0:ff:24:92:3c:c2:2a:53:7f:20:b2:7c:
         3d:7a:97:5a
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUT1NiKDFJaecW9+l2Un9MEHSLIBkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMTQ1MjlaFw0yNzA1MjEwMTUwMjlaMDMxMTAvBgNV
BAMTKEJCMTlDQzg0QTM0MTMzRDNBNDg3MDJCQjFGMkIwQzMzOTlFN0NBQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMfzbwXVQ/m8xwGHsOrQGvyx7j
P4LxSuqPi7uuTeAhZpV7O0WUf+WwZny5byNL8pMwMLqwcqwLHof7nDij7pfk465O
E2q3AwLZn0tXWtO1LZUgWvxuxG7cPkT7n2aV8SmSKhzdYdNw0UqXa9LZqNM4mmZu
tc3bRMWShGN8dXyeRPd1Z1ixBzxc64ZDcHhcOt2K6NrrPA7QLCUoS2Ame6mMxbyp
LpbtPDHf4C3Cn92cHWVFmka4CwOnH504T22u2bgJDroU8/TfnYC4LQBX4VxdX2B+
ky2DX1stWd09yhKIzsNjiMqMBcGNezI3d9UoKnCpNUps/PB331XkQ4sVeb+3AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUuxnMhKNBM9OkhwK7HysMM5nnyqowHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NTY2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqnfDANBgkqhkiG9w0BAQsFAAOCAQEAK1/h
04qAcJwnzntS68Ik+mCz2Q8usU3N5y/l8adTEBeNZ6WnsT+8h15BB75DSZyASJCv
IVEbG/kKFVoMhrr/C09hii+Qshmooi0Nu0XEsabCqP9fVAMkTVlZRKDWLqel7OQk
As4ZxIiwtSBqss9PCMgqiFa+l3LeW5iJLPyfcDDcIpNbjg35Pdi8v+sBcaGzxoDM
LVloCAHOPxDFCPqdQTMrOFNVHLUmVazbHPY2o0988ldIhcBHlLDRRKep5j9kg4yp
mI4UnTsknsWpcQy7yxQcmK12K64EI+TLX/vF0iwIMqLpkjwN7ulYgB5bQHUcwP8k
kjzCKlN/ILJ8PXqXWg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:55 2026 by rpki-client