Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144604.roa
File:                     AS144604.roa (raw, json)
Hash identifier:          DPteOSekP5CmwWl2KsNuGfOJNq1TrkM5vPyP8j1Tp0s=
Subject key identifier:   20:63:D3:76:7A:E0:79:8B:FD:06:27:63:6E:31:80:39:B8:36:92:AC
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       16ED7D81CA92DA5DDC30A1E2F636657CDAB96B6F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144604.roa
Signing time:             Tue 26 May 2026 02:35:19 +0000
ROA not before:           Tue 26 May 2026 02:30:19 +0000
ROA not after:            Tue 25 May 2027 02:35:19 +0000
asID:                     144604
IP address blocks:        240a:a7a2::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ed:7d:81:ca:92:da:5d:dc:30:a1:e2:f6:36:65:7c:da:b9:6b:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:30:19 2026 GMT
            Not After : May 25 02:35:19 2027 GMT
        Subject: CN=2063D3767AE0798BFD0627636E318039B83692AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5b:2e:5a:2a:00:e7:1a:cd:f3:9e:43:c5:fc:
                    25:a5:91:61:a4:b8:4a:8d:e2:25:ee:ec:3f:5f:5a:
                    b0:3f:82:e4:bc:98:aa:e9:6a:aa:c9:0c:90:f6:f6:
                    dc:1c:a4:eb:9f:6a:2f:0a:54:9e:97:7c:44:32:83:
                    0e:02:80:53:0c:3a:92:79:f6:85:af:26:7e:ed:99:
                    ce:ee:92:d6:44:59:72:94:bd:80:50:b3:c6:3e:ca:
                    c1:bf:a3:12:86:69:b2:df:19:ba:e8:e1:9e:fb:33:
                    a6:d6:f1:a1:4b:56:dc:11:73:22:8f:f1:32:9c:46:
                    22:ab:9a:5f:09:de:f1:f6:97:3c:e3:ae:6d:d7:ad:
                    7b:65:16:40:a1:cd:33:08:7b:c1:04:c7:ad:14:01:
                    ee:01:3f:28:a5:43:cb:9e:a1:eb:01:de:ec:0e:b1:
                    30:85:7e:cd:cc:d4:62:9e:7c:96:94:46:66:df:f0:
                    99:da:e5:c8:5e:b9:42:46:ef:73:ba:6b:84:47:6c:
                    e2:65:62:33:95:fa:ac:8b:da:ed:82:6e:3b:f1:9a:
                    19:b4:17:82:2e:05:b6:4b:14:c7:54:f1:e4:c2:ec:
                    de:bf:74:2a:19:f2:05:a1:91:10:59:34:88:19:b8:
                    b3:96:7e:73:b0:8b:2d:0b:1b:b1:f1:7c:0a:8e:40:
                    84:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:63:D3:76:7A:E0:79:8B:FD:06:27:63:6E:31:80:39:B8:36:92:AC
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144604.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a7a2::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:44:7c:f4:9e:d6:57:bd:9d:07:5b:5e:b0:21:3e:ca:3a:2f:
         0d:a3:0b:d8:04:be:04:47:cf:5d:d6:01:bf:77:b4:81:59:f1:
         a5:27:67:dc:3b:e8:d8:b0:fc:46:8a:33:ef:f3:df:26:6d:87:
         75:58:a3:f6:3d:8c:6a:19:df:f8:7e:17:ac:a7:53:6d:6a:14:
         65:8b:a9:81:d1:96:62:55:ad:2e:57:0d:2e:82:ef:f3:99:97:
         55:cf:6e:99:da:35:a1:80:a0:06:6c:92:04:3c:c8:60:9c:f1:
         01:8e:d3:bd:b6:3b:95:15:df:82:18:d9:67:3f:e4:ad:32:06:
         d7:85:95:44:0b:66:41:8b:0f:3c:ba:e3:fc:d1:07:5f:52:a2:
         00:52:cf:56:71:f7:51:d6:28:1e:48:85:b6:7b:6a:20:cc:f4:
         8c:be:0b:89:a3:8b:20:38:c0:f0:d6:05:65:81:c7:bd:a9:e9:
         37:05:80:c3:8e:55:75:3c:05:62:aa:b2:72:4d:f1:4d:d1:30:
         fa:0a:ef:a2:e3:e6:80:dc:b9:ba:25:5a:53:5f:a8:a2:7b:93:
         c7:cf:32:75:b8:e4:50:ba:46:0d:d7:82:ad:3d:23:4e:8e:30:
         6f:53:52:97:43:5a:14:ce:87:a3:b0:ce:3f:0b:fe:33:cb:8f:
         e0:06:78:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:13 2026 by rpki-client