Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144584.roa
File:                     AS144584.roa (raw, json)
Hash identifier:          f7u6HvoiNycjJ49lM5BZYstFe3WcOCmoX0NgV7b13dA=
Subject key identifier:   5B:67:D7:AA:39:D2:97:4A:DD:C1:61:31:30:88:88:3E:CB:07:78:E7
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       02106C67B8E0A624D955C75E226A95217B636E42
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144584.roa
Signing time:             Fri 22 May 2026 06:27:50 +0000
ROA not before:           Fri 22 May 2026 06:22:50 +0000
ROA not after:            Fri 21 May 2027 06:27:50 +0000
asID:                     144584
IP address blocks:        240a:a78e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:10:6c:67:b8:e0:a6:24:d9:55:c7:5e:22:6a:95:21:7b:63:6e:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:22:50 2026 GMT
            Not After : May 21 06:27:50 2027 GMT
        Subject: CN=5B67D7AA39D2974ADDC161313088883ECB0778E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6a:14:85:28:b1:f7:7f:8a:04:78:d1:8a:70:
                    d9:71:b9:97:53:28:ab:4b:3b:84:a8:64:6a:4e:76:
                    ac:d3:3d:f7:63:ce:90:2b:96:10:3e:ce:0c:d7:ff:
                    32:68:55:85:cb:05:d1:14:fc:3b:32:c3:1b:25:b9:
                    af:b8:37:42:31:1f:d2:6f:da:0e:d0:2f:3d:46:71:
                    b8:2a:1e:20:ef:bf:93:bf:66:39:8d:4e:fe:90:8e:
                    d4:7b:e9:40:d5:1b:c2:fe:23:a0:2b:10:ef:dd:30:
                    09:ff:3b:29:60:72:e2:c3:1a:7f:aa:59:50:7a:9e:
                    c3:b6:a3:59:f4:f8:0d:f0:38:87:d8:22:76:77:e2:
                    a1:4b:9b:95:d3:65:31:a3:4c:a2:33:50:ef:5e:ed:
                    27:04:ec:af:66:f4:a9:0c:2c:d9:bc:a8:df:5b:a6:
                    ee:9f:dc:93:f2:22:4e:fe:73:b4:e3:b7:06:c9:b7:
                    bf:db:52:5f:fa:84:90:87:dd:65:e6:86:f8:46:f5:
                    55:d8:e5:d1:a3:3c:70:87:f6:20:be:dc:64:dd:49:
                    56:be:ff:cc:ab:51:b1:e4:8e:4a:00:48:a4:fd:04:
                    25:d6:95:ca:ad:ec:b2:a5:ff:82:21:43:ae:18:78:
                    df:44:82:22:ed:f2:d7:54:28:44:87:19:bd:fb:7e:
                    06:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:67:D7:AA:39:D2:97:4A:DD:C1:61:31:30:88:88:3E:CB:07:78:E7
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144584.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a78e::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:98:f9:28:d0:18:60:26:00:80:bf:f7:91:72:fb:68:b3:b9:
         01:aa:53:34:fe:d2:d3:8d:55:a3:14:d3:76:d0:c1:21:e5:15:
         1d:14:0b:6f:30:e4:2f:00:24:5c:64:17:a1:be:c5:af:17:c6:
         51:0c:1f:41:62:2d:37:46:f9:e6:49:00:9b:d6:73:de:90:c5:
         c2:67:89:68:09:88:0b:b5:ae:01:45:ad:5c:46:99:ea:69:d6:
         15:73:ad:fa:13:09:b6:50:97:1b:51:28:6b:68:00:7f:6a:f9:
         8d:fd:fc:7e:7f:21:c6:0b:97:fb:62:3b:00:4f:2c:e2:4a:89:
         21:c9:c3:f7:68:dc:cb:cd:f3:1c:f2:3c:17:92:90:c7:fb:0e:
         7c:65:ac:cd:41:fd:8f:61:dc:01:e8:4b:f6:4e:a9:1a:b7:e7:
         83:b7:b7:52:e1:11:3b:15:d7:82:6b:a7:23:b8:6d:93:92:ae:
         12:13:85:da:3d:a7:cd:b0:ec:14:88:f0:49:d3:31:7f:84:7b:
         e4:18:19:12:26:63:02:30:a1:35:d9:ef:7f:4b:23:a4:f4:8f:
         26:51:7d:a3:d9:4b:2c:42:8a:45:60:25:d0:84:4e:ae:f1:c7:
         ea:1f:6e:45:b4:bd:40:0a:ca:7a:e2:ae:65:d4:39:d7:e5:de:
         4a:2e:30:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:51 2026 by rpki-client