Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144593.roa
File:                     AS144593.roa (raw, json)
Hash identifier:          Fa4zJISCJpyYXL9bitUsi3ZPCGoRLFpEA3fSZI9a+ZI=
Subject key identifier:   0D:65:9B:BB:2F:B1:97:56:77:E9:55:BF:05:23:88:04:53:B1:E6:55
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       289F1DC018C4B3454E0D15877242A248A916451D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144593.roa
Signing time:             Fri 22 May 2026 06:05:47 +0000
ROA not before:           Fri 22 May 2026 06:00:47 +0000
ROA not after:            Fri 21 May 2027 06:05:47 +0000
asID:                     144593
IP address blocks:        240a:a797::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:9f:1d:c0:18:c4:b3:45:4e:0d:15:87:72:42:a2:48:a9:16:45:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:00:47 2026 GMT
            Not After : May 21 06:05:47 2027 GMT
        Subject: CN=0D659BBB2FB1975677E955BF0523880453B1E655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4f:5a:82:95:d0:3f:96:be:44:ff:bf:55:dc:
                    40:17:f2:e7:d4:63:56:57:59:24:6f:38:5c:b8:62:
                    18:93:18:ad:40:1c:3d:0d:4e:a7:e5:95:4c:e3:db:
                    9a:c4:a8:fb:0e:8c:b5:6b:c8:44:5d:a6:4f:00:e7:
                    22:9f:10:07:ca:59:68:cc:72:33:55:65:ae:20:c5:
                    15:71:5e:54:63:0e:57:62:90:48:c1:2b:cd:ff:21:
                    6c:8c:36:6e:1a:14:d1:41:8b:b7:e5:96:3d:b5:be:
                    37:39:e4:80:40:1c:13:09:a7:19:83:68:19:7a:55:
                    5f:c8:0b:b6:05:1d:68:7f:41:c5:ae:ba:ef:2d:8c:
                    a0:e2:3c:a0:6e:92:12:67:5b:96:12:d9:9b:12:36:
                    61:c3:2a:dd:85:5e:d5:c7:20:d0:a9:22:19:68:86:
                    cc:88:12:d6:57:57:7a:5b:1a:29:8e:de:23:48:96:
                    f5:1c:f4:b5:18:69:17:83:80:9e:44:10:7f:a1:71:
                    8e:07:29:6e:0b:ee:e8:0a:5d:a3:ad:c2:7d:dc:b7:
                    c7:a7:1c:8b:79:c6:b1:54:69:47:96:b3:66:87:32:
                    33:e7:73:30:54:16:e3:01:6e:81:da:f0:10:2a:2e:
                    0c:94:a2:4a:7c:0d:b8:34:b1:a1:2d:69:70:ec:d6:
                    15:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:65:9B:BB:2F:B1:97:56:77:E9:55:BF:05:23:88:04:53:B1:E6:55
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144593.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a797::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:bd:b0:72:ca:5e:9d:37:cc:2f:f6:82:22:36:0e:1d:c6:24:
         84:5c:0d:87:0f:39:9a:6c:b7:17:57:4f:eb:22:1a:00:45:d3:
         01:d6:1d:57:8b:97:dc:d3:1d:eb:af:b3:09:90:10:e3:e6:c6:
         2e:0d:f3:86:8c:73:b1:25:cd:40:d6:18:6e:c8:14:48:d8:7e:
         a7:f4:86:ae:f1:58:19:43:c0:d3:4e:c0:20:dc:4c:f2:63:95:
         9e:e8:5f:72:e1:57:da:7b:61:10:34:e9:ca:a0:c5:5d:dd:60:
         52:b3:e5:a3:65:49:c8:48:e2:f0:c4:62:ea:00:1b:6c:ec:19:
         ee:c4:30:a0:90:6a:b7:2f:cd:4e:7e:6e:8a:1a:d1:38:0a:e2:
         c3:55:9d:b4:dc:b7:ae:3f:aa:01:d5:fd:23:40:4a:6b:c9:00:
         de:7a:db:df:47:fc:71:14:aa:62:2b:af:c5:ee:ef:88:c0:8e:
         1b:d2:a3:bd:84:89:13:05:f1:68:31:77:06:8e:dc:da:45:3c:
         7c:cf:b7:2d:37:38:3c:97:6b:34:fc:54:b0:4d:12:fd:1a:f6:
         99:b7:2b:38:66:55:85:09:8a:81:b3:6f:39:ec:df:1f:0f:59:
         d6:1e:08:93:e1:ea:ae:b2:26:61:fc:80:e3:15:05:41:53:d8:
         4a:a6:29:63
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUKJ8dwBjEs0VODRWHckKiSKkWRR0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjAwNDdaFw0yNzA1MjEwNjA1NDdaMDMxMTAvBgNV
BAMTKDBENjU5QkJCMkZCMTk3NTY3N0U5NTVCRjA1MjM4ODA0NTNCMUU2NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDT1qCldA/lr5E/79V3EAX8ufU
Y1ZXWSRvOFy4YhiTGK1AHD0NTqfllUzj25rEqPsOjLVryERdpk8A5yKfEAfKWWjM
cjNVZa4gxRVxXlRjDldikEjBK83/IWyMNm4aFNFBi7fllj21vjc55IBAHBMJpxmD
aBl6VV/IC7YFHWh/QcWuuu8tjKDiPKBukhJnW5YS2ZsSNmHDKt2FXtXHINCpIhlo
hsyIEtZXV3pbGimO3iNIlvUc9LUYaReDgJ5EEH+hcY4HKW4L7ugKXaOtwn3ct8en
HIt5xrFUaUeWs2aHMjPnczBUFuMBboHa8BAqLgyUokp8Dbg0saEtaXDs1hWHAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUDWWbuy+xl1Z36VW/BSOIBFOx5lUwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NTkzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqnlzANBgkqhkiG9w0BAQsFAAOCAQEAub2w
cspenTfML/aCIjYOHcYkhFwNhw85mmy3F1dP6yIaAEXTAdYdV4uX3NMd66+zCZAQ
4+bGLg3zhoxzsSXNQNYYbsgUSNh+p/SGrvFYGUPA007AINxM8mOVnuhfcuFX2nth
EDTpyqDFXd1gUrPlo2VJyEji8MRi6gAbbOwZ7sQwoJBqty/NTn5uihrROAriw1Wd
tNy3rj+qAdX9I0BKa8kA3nrb30f8cRSqYiuvxe7viMCOG9KjvYSJEwXxaDF3Bo7c
2kU8fM+3LTc4PJdrNPxUsE0S/Rr2mbcrOGZVhQmKgbNvOezfHw9Z1h4Ik+HqrrIm
YfyA4xUFQVPYSqYpYw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:41 2026 by rpki-client