Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144629.roa
File:                     AS144629.roa (raw, json)
Hash identifier:          koRqb14s7NjXI0d4b85Vwx/o0qqaKoIo/F/NHL71AQI=
Subject key identifier:   88:67:63:A0:32:A7:C1:D4:12:C3:1B:11:9D:3D:64:6F:70:E7:37:12
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6E1F810A093E8D9579160316E68B7D93CF8DEF69
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144629.roa
Signing time:             Tue 26 May 2026 06:31:00 +0000
ROA not before:           Tue 26 May 2026 06:26:00 +0000
ROA not after:            Tue 25 May 2027 06:31:00 +0000
asID:                     144629
IP address blocks:        240a:a7bb::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:1f:81:0a:09:3e:8d:95:79:16:03:16:e6:8b:7d:93:cf:8d:ef:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:26:00 2026 GMT
            Not After : May 25 06:31:00 2027 GMT
        Subject: CN=886763A032A7C1D412C31B119D3D646F70E73712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7c:dd:58:a6:f5:91:d5:79:68:c8:f9:66:f0:
                    42:fb:14:ac:e6:76:80:9a:b1:8e:8c:81:88:98:83:
                    9d:2e:d3:31:45:92:f2:93:77:56:63:3c:5f:80:d5:
                    c5:bd:88:c6:9d:0a:e5:df:40:3b:0b:99:c7:0c:a3:
                    48:2a:04:99:4e:c1:b9:99:b6:ad:52:8f:cb:f7:82:
                    a6:ab:f1:c3:c4:01:45:b7:e5:c3:74:f3:9c:c3:f9:
                    07:5b:06:27:5a:de:ee:cd:d0:26:dd:b6:f7:54:a8:
                    46:f5:be:de:63:d7:9b:0a:66:18:3a:43:13:19:d6:
                    53:dc:62:e6:71:07:be:0a:96:9f:2c:b1:ca:be:6a:
                    da:08:74:1e:0e:32:4e:af:57:81:ad:df:29:e8:86:
                    02:ed:13:8e:63:36:12:91:39:b7:3c:23:33:c7:da:
                    49:63:43:9a:ba:c5:6b:82:51:64:6f:9f:9f:8e:68:
                    e9:8a:10:ff:14:74:eb:66:84:ae:dc:f5:a6:ba:c7:
                    e0:3c:5e:47:31:0f:12:21:47:6a:07:53:f7:16:58:
                    b9:ea:bd:2a:3f:23:f2:b7:7e:cf:da:1a:71:37:5b:
                    59:0e:a9:99:77:23:1c:38:e1:19:e7:c8:b4:4d:8b:
                    1e:66:c5:19:5f:92:b3:89:51:8e:d3:d4:d1:af:82:
                    00:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:67:63:A0:32:A7:C1:D4:12:C3:1B:11:9D:3D:64:6F:70:E7:37:12
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144629.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a7bb::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:49:a2:f0:1d:fb:1d:07:62:7c:7e:72:98:a0:db:49:94:c4:
         07:29:fe:b9:04:57:9e:6e:f6:68:d2:ee:2c:b8:fd:ec:ad:74:
         41:15:9d:9d:e0:43:6b:f1:cb:51:47:9d:69:f1:bd:55:05:85:
         de:5e:ac:71:fc:92:7d:30:62:11:aa:1d:5a:bd:32:b2:9e:02:
         be:b2:76:2a:01:4a:77:87:19:40:72:e9:e6:9b:35:ab:51:9b:
         16:1b:10:f4:7e:03:c9:a4:6b:6c:4c:06:38:f2:d0:31:b1:18:
         ba:2a:8d:ea:80:ff:72:6c:a6:df:da:5f:5c:f8:e8:d0:d4:0a:
         d3:42:fa:f3:1c:6a:a5:10:5f:6b:f6:0a:d2:dc:56:de:d0:2a:
         a3:bb:ed:2b:e0:62:f1:aa:dc:ed:62:e7:7a:3b:46:ee:65:9a:
         55:a7:80:22:ed:16:54:bc:99:f6:64:ed:64:37:de:61:30:93:
         96:54:44:05:b9:c0:d1:25:c9:8c:86:73:78:d2:3f:21:c8:4d:
         04:d9:43:92:21:23:45:e3:04:f7:0b:c1:8c:51:f1:f5:1d:04:
         8f:d7:6c:72:bb:10:cf:e1:ab:f8:da:42:ea:70:5a:70:b5:6a:
         e8:06:39:fc:e9:2c:b8:e1:3d:d5:18:d9:23:b0:5a:06:96:c7:
         1a:66:e9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:39 2026 by rpki-client