Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144591.roa
File:                     AS144591.roa (raw, json)
Hash identifier:          MDogrgRsWxdrQwslm2pjPPw0NsrX6tX9KfFzyMUvea4=
Subject key identifier:   C8:0F:6A:13:21:59:B4:E5:2C:53:9C:D4:EA:AE:E0:4D:CC:BD:7D:8D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       146F46DD039E04C4E723A902FB5D742F9B27D20D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144591.roa
Signing time:             Fri 22 May 2026 06:46:00 +0000
ROA not before:           Fri 22 May 2026 06:41:00 +0000
ROA not after:            Fri 21 May 2027 06:46:00 +0000
asID:                     144591
IP address blocks:        240a:a795::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:6f:46:dd:03:9e:04:c4:e7:23:a9:02:fb:5d:74:2f:9b:27:d2:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:00 2026 GMT
            Not After : May 21 06:46:00 2027 GMT
        Subject: CN=C80F6A132159B4E52C539CD4EAAEE04DCCBD7D8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d0:ac:e6:87:4e:4a:5d:ca:a0:13:f8:e2:d8:
                    2b:7c:7b:c9:c0:68:85:d1:39:20:7c:9b:09:26:35:
                    06:50:31:e9:2b:87:da:bf:0e:35:d1:b4:f5:9a:a0:
                    1e:ae:83:8a:c5:75:4b:12:31:87:88:18:e5:5d:7f:
                    4f:f7:21:69:10:2d:66:3e:90:cf:da:c0:4a:a2:83:
                    c1:5e:79:e4:80:d9:e2:8c:a5:36:e8:a1:c5:27:bb:
                    ce:2b:d6:ba:33:5c:18:12:d8:1c:b0:eb:92:a1:af:
                    4c:be:d9:d9:1a:a6:64:90:8b:86:46:8b:8b:fe:b3:
                    3c:d2:a3:77:f1:d8:1c:a0:ed:fe:79:66:6f:7d:17:
                    1e:96:fd:94:5f:2a:1a:eb:d5:9e:fa:c5:97:38:1a:
                    a0:f9:8c:ed:aa:28:22:5e:77:1e:3f:57:bf:37:d4:
                    6f:0d:ba:2d:2c:0e:cd:37:a4:bc:39:df:17:33:21:
                    86:37:2f:14:45:8f:5a:bd:59:81:b1:bb:39:de:c7:
                    95:47:64:eb:ae:fb:52:65:73:bc:0e:ee:d2:00:a3:
                    77:3b:7e:5a:94:b8:c8:4c:eb:85:02:4e:fa:fa:65:
                    dd:40:1a:13:08:c0:4d:31:73:49:57:35:d3:97:8d:
                    49:ed:ee:6d:3f:18:2e:03:4f:d4:b2:98:3b:2e:5b:
                    95:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:0F:6A:13:21:59:B4:E5:2C:53:9C:D4:EA:AE:E0:4D:CC:BD:7D:8D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144591.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a795::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:35:6f:72:3a:c3:cb:6c:75:39:25:17:0b:5a:78:6a:78:1a:
         fc:73:e2:f5:2c:e6:90:d9:c5:6a:ef:2c:77:e8:24:4d:40:98:
         db:75:f3:7c:74:c4:fe:ad:55:ce:68:48:4e:30:1c:65:6c:ff:
         ad:4e:67:24:cb:99:2e:70:e3:87:a3:b0:5f:2e:4a:f7:31:25:
         5e:d6:22:15:be:f6:c0:48:f1:8f:6d:33:a5:60:8b:11:39:f1:
         ab:e8:04:51:4f:3c:df:30:d4:16:b2:bd:be:95:d1:4f:cb:ba:
         c0:b4:2b:83:b7:a9:73:15:e4:e0:e4:99:b9:54:55:1f:49:8f:
         26:b6:18:16:60:86:29:84:6d:fa:e7:61:e3:16:1a:60:36:e0:
         9b:9d:54:fd:96:39:6c:ce:b9:65:17:9d:49:df:65:18:54:b9:
         e9:b7:24:e8:f9:dc:37:f1:31:1d:07:d2:c5:93:14:8a:48:3a:
         ca:9d:7e:b9:3d:5d:8e:45:a2:98:a9:3b:58:8f:17:68:85:d9:
         26:61:c3:a3:06:c8:49:b3:3c:f4:2e:37:78:a1:74:85:f7:b9:
         4f:ec:9a:c5:0f:4d:ad:09:e6:1d:b4:39:2d:ba:c8:44:2b:52:
         3f:c9:42:b2:3c:38:ef:e1:20:98:b4:d6:fb:b0:b2:53:db:db:
         e0:7a:2d:f8
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUFG9G3QOeBMTnI6kC+110L5sn0g0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjQxMDBaFw0yNzA1MjEwNjQ2MDBaMDMxMTAvBgNV
BAMTKEM4MEY2QTEzMjE1OUI0RTUyQzUzOUNENEVBQUVFMDREQ0NCRDdEOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd0Kzmh05KXcqgE/ji2Ct8e8nA
aIXROSB8mwkmNQZQMekrh9q/DjXRtPWaoB6ug4rFdUsSMYeIGOVdf0/3IWkQLWY+
kM/awEqig8FeeeSA2eKMpTboocUnu84r1rozXBgS2Byw65Khr0y+2dkapmSQi4ZG
i4v+szzSo3fx2Byg7f55Zm99Fx6W/ZRfKhrr1Z76xZc4GqD5jO2qKCJedx4/V783
1G8Nui0sDs03pLw53xczIYY3LxRFj1q9WYGxuznex5VHZOuu+1Jlc7wO7tIAo3c7
flqUuMhM64UCTvr6Zd1AGhMIwE0xc0lXNdOXjUnt7m0/GC4DT9SymDsuW5WZAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUyA9qEyFZtOUsU5zU6q7gTcy9fY0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NTkxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqnlTANBgkqhkiG9w0BAQsFAAOCAQEAYjVv
cjrDy2x1OSUXC1p4anga/HPi9SzmkNnFau8sd+gkTUCY23XzfHTE/q1VzmhITjAc
ZWz/rU5nJMuZLnDjh6OwXy5K9zElXtYiFb72wEjxj20zpWCLETnxq+gEUU883zDU
FrK9vpXRT8u6wLQrg7epcxXk4OSZuVRVH0mPJrYYFmCGKYRt+udh4xYaYDbgm51U
/ZY5bM65ZRedSd9lGFS56bck6PncN/ExHQfSxZMUikg6yp1+uT1djkWimKk7WI8X
aIXZJmHDowbISbM89C43eKF0hfe5T+yaxQ9NrQnmHbQ5LbrIRCtSP8lCsjw47+Eg
mLTW+7CyU9vb4Hot+A==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:01 2026 by rpki-client