Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144619.roa
File:                     AS144619.roa (raw, json)
Hash identifier:          MIOTXTt0mUfBPdxfAyMoSZ8fhJCvHKboizeShig4f/A=
Subject key identifier:   7D:69:79:14:21:AD:E7:CE:53:84:39:27:57:42:67:43:07:12:DA:C4
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       25D279FA747C57BA7268ACE1D39044BBB09B2935
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144619.roa
Signing time:             Fri 22 May 2026 06:05:32 +0000
ROA not before:           Fri 22 May 2026 06:00:32 +0000
ROA not after:            Fri 21 May 2027 06:05:32 +0000
asID:                     144619
IP address blocks:        240a:a7b1::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:d2:79:fa:74:7c:57:ba:72:68:ac:e1:d3:90:44:bb:b0:9b:29:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:00:32 2026 GMT
            Not After : May 21 06:05:32 2027 GMT
        Subject: CN=7D69791421ADE7CE53843927574267430712DAC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:73:df:35:55:54:01:46:69:8e:d8:91:54:ff:
                    07:0f:df:ac:cb:1e:af:dd:f5:75:5e:75:61:ef:ed:
                    3c:2e:8b:48:b4:28:67:7a:d9:f3:33:7c:2b:b5:06:
                    af:39:e8:0b:5f:43:9b:8b:70:58:46:42:24:c2:34:
                    45:6b:26:d5:25:cc:44:e6:aa:c5:a8:53:94:2b:8b:
                    04:36:4e:0c:89:06:1c:4b:be:24:0c:61:37:8a:4a:
                    27:54:6a:f2:9e:2d:2f:d7:13:1f:48:e6:54:d0:ce:
                    ce:23:e9:d1:56:15:29:d6:b0:52:6c:f9:19:3c:39:
                    be:3b:49:cd:f7:d5:a4:b3:55:35:1f:4a:30:31:3e:
                    c9:0d:ce:89:c3:4a:71:3c:22:81:3c:69:2f:ea:06:
                    a9:b9:c3:c5:5c:67:4b:22:a4:53:0d:5d:24:79:d4:
                    1f:cd:fe:6b:9f:f0:0d:05:70:d9:44:4d:c6:84:12:
                    37:c8:0a:e8:e9:ae:cf:e9:65:08:cb:25:b2:f1:68:
                    3d:0e:aa:a1:23:b9:dd:cb:35:ae:19:11:83:ba:c2:
                    08:14:8d:ac:54:7b:73:71:62:bb:03:e3:7a:af:aa:
                    f7:45:28:e6:15:ee:13:2f:9f:50:8a:ba:6f:b4:0c:
                    aa:1f:c7:49:c4:4d:1b:08:6c:a8:d7:0f:5c:01:60:
                    a6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:69:79:14:21:AD:E7:CE:53:84:39:27:57:42:67:43:07:12:DA:C4
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144619.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a7b1::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:e7:48:74:19:bc:0f:69:a2:ab:21:91:20:be:17:14:f4:1e:
         82:06:31:01:ac:18:a1:f5:26:bc:a6:7e:4b:6b:42:ab:cd:37:
         6b:d2:27:6f:33:fd:f0:c7:a6:ba:8b:65:b2:0b:35:24:5a:c8:
         f8:ce:b0:f3:64:7f:8d:03:b5:8d:6b:df:aa:cd:62:d6:a4:72:
         95:9d:f8:90:6b:c1:e1:3e:41:0b:8d:63:a1:3c:1c:1c:10:ca:
         e0:0c:c5:61:ea:40:05:ca:cb:32:87:71:2e:39:07:3e:cd:da:
         a0:5c:23:30:67:21:92:95:4b:eb:c5:f6:d6:2c:20:b7:72:7c:
         90:e4:9f:63:71:23:e3:48:f8:7a:dc:c2:6d:14:07:5d:35:c5:
         cc:21:1d:a9:98:cb:17:e4:da:8c:f3:9e:94:2a:64:10:92:08:
         b3:1d:6c:7d:fc:e6:5e:21:e3:d7:ea:db:5f:ee:b2:42:5b:fa:
         7b:e4:20:c0:9c:74:19:a4:bd:77:f0:13:22:32:78:81:37:8b:
         4a:fb:77:c6:1d:d5:f7:dc:4c:60:5f:8d:7b:d0:bf:3b:f2:58:
         3e:ef:57:b6:6f:53:ba:1d:21:58:76:bb:9a:b4:15:80:8a:45:
         e1:e9:35:98:7b:c1:19:4a:63:9f:78:b1:1d:a0:a8:7b:15:63:
         f1:b9:74:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:09 2026 by rpki-client