Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144581.roa
File:                     AS144581.roa (raw, json)
Hash identifier:          OQQ2R1n5n6fi9N9TvI2208EEOx4dhtHe+ZbIuXelUuc=
Subject key identifier:   0B:3C:42:2D:7C:40:0C:FB:29:A7:95:B4:DB:41:93:DB:C1:37:35:A8
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2309EBDE5E445998A88A77BB64CB9814FE164D4F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144581.roa
Signing time:             Mon 25 May 2026 06:28:20 +0000
ROA not before:           Mon 25 May 2026 06:23:20 +0000
ROA not after:            Mon 24 May 2027 06:28:20 +0000
asID:                     144581
IP address blocks:        240a:a78b::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:09:eb:de:5e:44:59:98:a8:8a:77:bb:64:cb:98:14:fe:16:4d:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:20 2026 GMT
            Not After : May 24 06:28:20 2027 GMT
        Subject: CN=0B3C422D7C400CFB29A795B4DB4193DBC13735A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c7:d4:f2:84:69:7a:01:79:df:c3:a5:3e:c0:
                    a1:97:12:69:5f:93:ea:89:c7:be:fa:7d:25:c0:88:
                    73:9b:ec:26:e5:66:63:ec:ba:6d:7f:f5:7f:77:f8:
                    c7:e9:05:b9:c8:9d:2c:0a:b5:cf:fe:33:01:1a:c7:
                    20:10:ee:39:e5:3a:27:cc:3e:60:b5:31:a0:18:7c:
                    a8:a6:70:73:7e:02:41:f2:6e:a5:b3:d4:00:52:79:
                    5d:1d:7e:9f:23:b0:50:35:54:a7:15:6e:eb:cb:52:
                    a9:b2:3b:99:8d:74:1d:cb:22:31:9a:92:f1:36:68:
                    db:cf:80:8b:87:b7:fb:05:d8:9c:3b:6a:94:62:f6:
                    22:c8:92:59:a4:a1:23:3b:26:3e:22:b0:44:bc:a3:
                    54:35:d8:0a:05:86:37:f9:25:10:e5:85:66:a7:b5:
                    5d:76:b0:34:2e:9d:21:40:98:dd:ae:fd:c5:ed:d7:
                    cc:ce:b0:78:a0:6b:4c:a3:1c:01:4f:4b:d4:17:c9:
                    c6:5e:b5:69:6b:76:a7:0e:6c:a8:79:7c:e8:52:59:
                    7e:18:55:47:ba:28:c2:ae:59:9e:90:6f:fa:a5:5a:
                    72:0d:08:54:0b:ef:1e:d9:3a:7b:86:98:9d:fd:ad:
                    61:8c:95:01:24:4d:39:52:db:dd:d4:aa:e6:17:68:
                    c6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:3C:42:2D:7C:40:0C:FB:29:A7:95:B4:DB:41:93:DB:C1:37:35:A8
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144581.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a78b::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:4f:7f:c9:6d:bd:b1:9d:2b:02:ea:bc:c1:d7:5a:03:77:e0:
         f9:58:0b:81:90:98:16:f3:ff:28:88:bc:a1:cd:81:a9:9e:26:
         40:fe:36:f6:51:3b:ab:87:08:6d:fb:6d:de:9a:83:ca:76:d4:
         fe:db:c7:3c:35:7d:3f:81:52:23:44:0f:d5:d6:cf:de:c4:eb:
         5c:1b:2c:29:a8:fc:36:bb:8e:41:26:e5:96:76:8d:c7:35:c6:
         bd:07:36:18:9a:71:e8:d2:a1:95:2b:7f:25:59:f5:15:36:bb:
         31:c8:0b:b9:1f:f3:51:92:5c:97:75:8c:b7:6b:f8:10:ad:51:
         14:85:6e:dc:54:75:49:f1:20:23:5d:bf:62:bd:97:d9:90:7f:
         b5:7e:5e:2e:d1:da:cf:c0:db:67:cc:22:b9:0d:0b:48:a6:7e:
         26:fc:6e:9a:ef:06:5d:1f:ee:15:eb:e3:46:e1:aa:8a:ba:c6:
         7a:c6:60:7f:95:55:73:7b:b5:36:fe:ac:e6:cc:c5:36:b2:bc:
         37:63:7c:10:fa:3c:11:a0:f9:31:73:61:e9:23:7f:d8:91:61:
         1d:eb:50:93:1f:f0:43:f6:ff:c9:e0:be:ab:03:a7:99:ca:40:
         a8:4f:cf:f8:14:7f:e9:79:ac:ab:f2:79:00:c5:90:4f:1a:54:
         a1:4f:0b:ad
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUIwnr3l5EWZioine7ZMuYFP4WTU8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjIzMjBaFw0yNzA1MjQwNjI4MjBaMDMxMTAvBgNV
BAMTKDBCM0M0MjJEN0M0MDBDRkIyOUE3OTVCNERCNDE5M0RCQzEzNzM1QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpx9TyhGl6AXnfw6U+wKGXEmlf
k+qJx776fSXAiHOb7CblZmPsum1/9X93+MfpBbnInSwKtc/+MwEaxyAQ7jnlOifM
PmC1MaAYfKimcHN+AkHybqWz1ABSeV0dfp8jsFA1VKcVbuvLUqmyO5mNdB3LIjGa
kvE2aNvPgIuHt/sF2Jw7apRi9iLIklmkoSM7Jj4isES8o1Q12AoFhjf5JRDlhWan
tV12sDQunSFAmN2u/cXt18zOsHiga0yjHAFPS9QXycZetWlrdqcObKh5fOhSWX4Y
VUe6KMKuWZ6Qb/qlWnINCFQL7x7ZOnuGmJ39rWGMlQEkTTlS293UquYXaMbTAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUCzxCLXxADPspp5W020GT28E3NagwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NTgxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqnizANBgkqhkiG9w0BAQsFAAOCAQEAB09/
yW29sZ0rAuq8wddaA3fg+VgLgZCYFvP/KIi8oc2BqZ4mQP429lE7q4cIbftt3pqD
ynbU/tvHPDV9P4FSI0QP1dbP3sTrXBssKaj8NruOQSbllnaNxzXGvQc2GJpx6NKh
lSt/JVn1FTa7McgLuR/zUZJcl3WMt2v4EK1RFIVu3FR1SfEgI12/Yr2X2ZB/tX5e
LtHaz8DbZ8wiuQ0LSKZ+Jvxumu8GXR/uFevjRuGqirrGesZgf5VVc3u1Nv6s5szF
NrK8N2N8EPo8EaD5MXNh6SN/2JFhHetQkx/wQ/b/yeC+qwOnmcpAqE/P+BR/6Xms
q/J5AMWQTxpUoU8LrQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:21 2026 by rpki-client