Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144595.roa
File:                     AS144595.roa (raw, json)
Hash identifier:          ulG1lGyf+BX+3qCr2LiUKyubzfOY/tWYI0T0m48/k9A=
Subject key identifier:   9C:55:AB:9A:FB:F2:3D:25:6A:04:DB:91:AC:1A:6A:6B:40:9D:4E:71
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5691CF23AEBA48E7509D4173BBDFA91D866C4CC3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144595.roa
Signing time:             Mon 25 May 2026 01:51:22 +0000
ROA not before:           Mon 25 May 2026 01:46:22 +0000
ROA not after:            Mon 24 May 2027 01:51:22 +0000
asID:                     144595
IP address blocks:        240a:a799::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:91:cf:23:ae:ba:48:e7:50:9d:41:73:bb:df:a9:1d:86:6c:4c:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:22 2026 GMT
            Not After : May 24 01:51:22 2027 GMT
        Subject: CN=9C55AB9AFBF23D256A04DB91AC1A6A6B409D4E71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2b:72:7a:61:0b:35:ee:6f:a1:27:1d:e9:fc:
                    83:a2:66:09:e1:b5:2d:62:ce:5b:4a:91:a1:68:7e:
                    6d:80:33:72:9e:ed:2b:02:d6:40:3b:72:1e:05:63:
                    bf:a2:76:1a:3d:23:c5:f5:76:5b:80:1d:57:9e:f9:
                    c2:ac:89:a1:24:67:48:a4:9f:25:d5:36:09:12:4e:
                    02:6e:07:2a:a0:44:79:cb:8d:8f:60:04:9d:5b:a7:
                    a8:37:53:10:c4:53:69:14:d0:0c:ea:64:84:9f:30:
                    52:56:f2:71:46:46:15:a6:24:e1:f3:1c:31:a3:86:
                    a2:aa:39:7d:2f:1b:7f:de:b0:2d:31:77:97:81:1a:
                    97:b5:08:50:6f:64:55:7a:87:0d:19:5f:ff:d2:9e:
                    11:1e:b1:7c:08:17:af:4f:01:66:51:f4:4a:64:79:
                    67:21:bc:74:93:0d:a4:be:9b:7f:4b:60:87:4c:3a:
                    b8:cd:0b:0e:9b:16:a2:21:58:ca:49:98:86:13:e6:
                    a9:dc:06:19:53:6b:d4:d5:4c:4d:d5:89:61:9c:c4:
                    13:b5:c7:5c:a1:94:49:b4:32:92:da:b1:b1:be:1a:
                    de:5e:82:24:03:ed:a0:8b:e0:73:b7:23:0e:f7:fe:
                    b1:0d:77:b6:ae:9e:73:9e:ca:5d:83:38:ca:0a:c8:
                    37:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:55:AB:9A:FB:F2:3D:25:6A:04:DB:91:AC:1A:6A:6B:40:9D:4E:71
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144595.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a799::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:5d:dc:fc:f1:99:20:9d:10:0f:a3:dc:06:a9:75:fc:61:a1:
         ed:dd:b8:85:db:d8:99:c7:e4:9e:ec:fb:07:cd:44:41:7c:da:
         95:a7:f3:3e:1c:49:29:c4:e3:9d:0b:72:a0:14:9b:07:95:4b:
         5a:67:57:8a:5c:49:a1:d6:e0:37:7b:16:3f:db:5f:76:47:ab:
         1b:a6:60:58:32:b1:8d:f8:a0:ae:e8:c4:e1:0e:7e:92:91:95:
         a4:0b:7d:c5:95:60:80:8d:83:a0:ca:9f:4e:0a:67:6d:73:8e:
         7f:21:9f:de:e4:d4:c0:46:2d:83:c0:5a:e2:b4:3c:17:87:76:
         b2:3f:bf:c8:3b:4e:06:9a:2b:36:4e:93:0b:50:4b:4d:99:71:
         f6:2e:04:e1:22:72:ea:77:ef:ba:af:38:38:7a:55:78:16:ad:
         20:d6:20:9d:82:9d:48:68:f1:7c:26:99:bf:a9:bb:60:14:e2:
         16:13:8c:ac:4b:b3:b2:24:96:4f:02:a2:63:a8:ea:7f:ea:4f:
         3c:7c:8c:46:b7:64:2c:59:7c:bd:f1:8a:67:0c:ec:03:f9:79:
         4e:b3:f2:2f:8a:9c:37:4e:22:6d:7c:3f:ca:98:19:dd:57:1f:
         27:82:f9:e1:af:67:af:16:2f:b4:9a:21:e9:f7:53:e4:21:ea:
         fa:29:6a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:29 2026 by rpki-client