Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144636.roa
File:                     AS144636.roa (raw, json)
Hash identifier:          SF9q3zeCAwrEfDfBC9E9jjhi2SdD70PKM4JT227JCjM=
Subject key identifier:   2A:76:03:1A:3A:4A:5F:19:B4:29:B1:06:E1:B7:C0:4F:60:69:AE:2D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6322C993953872C1A3B94469FC9A042A375297EA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144636.roa
Signing time:             Fri 22 May 2026 02:48:06 +0000
ROA not before:           Fri 22 May 2026 02:43:06 +0000
ROA not after:            Fri 21 May 2027 02:48:06 +0000
asID:                     144636
IP address blocks:        240a:a7c2::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:22:c9:93:95:38:72:c1:a3:b9:44:69:fc:9a:04:2a:37:52:97:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:43:06 2026 GMT
            Not After : May 21 02:48:06 2027 GMT
        Subject: CN=2A76031A3A4A5F19B429B106E1B7C04F6069AE2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2c:6b:21:8e:e3:51:7b:e5:8e:1a:c1:92:98:
                    9f:0e:b2:c1:37:46:b1:0b:7b:05:90:13:f9:b3:9f:
                    62:88:01:3d:d0:d6:e5:f3:63:27:45:40:4b:a8:35:
                    8c:7e:28:83:63:fe:53:31:c8:04:3f:73:6f:11:83:
                    60:52:da:fe:d7:d1:26:04:d9:55:1e:d2:d3:19:ef:
                    c9:08:7d:af:fd:2b:ab:3c:8f:c8:94:20:30:a3:e9:
                    01:53:d3:0b:51:5d:56:a2:6b:31:90:f5:da:87:6a:
                    37:70:33:f3:c1:ef:98:eb:03:4c:32:46:30:8c:2d:
                    7a:d1:20:b3:78:48:7d:65:93:28:d4:2e:0d:9f:b0:
                    39:6b:a8:7a:5f:6e:aa:37:ab:3f:c5:22:8c:d3:d1:
                    36:77:3a:3e:87:cf:67:6e:6c:0c:ef:80:8e:2f:6d:
                    18:e1:9c:31:af:b0:66:2f:84:4a:31:76:22:9d:30:
                    25:bc:fa:cb:52:6e:2d:99:4c:82:c6:a2:06:27:28:
                    5b:c5:e8:fc:df:ce:c7:42:5e:f1:b2:20:fc:50:a0:
                    10:2d:ee:21:41:40:61:8e:3e:24:33:17:5d:79:74:
                    42:84:c5:a5:3b:a7:cf:18:ac:96:3f:21:68:72:9b:
                    ec:66:7e:94:ee:22:57:94:9c:59:84:04:15:ae:3a:
                    f9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:76:03:1A:3A:4A:5F:19:B4:29:B1:06:E1:B7:C0:4F:60:69:AE:2D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a7c2::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:67:3d:a3:44:6d:03:ea:ba:f6:e0:55:b3:98:2e:72:c6:ce:
         27:c3:14:4b:65:e1:be:85:11:94:ee:4d:ea:ef:00:79:e8:fa:
         c9:c3:ac:2d:85:7a:22:a7:8e:4e:72:40:78:e5:6d:6c:61:9b:
         c8:11:0c:09:72:a8:d2:da:cb:65:91:21:8b:79:96:08:75:17:
         d6:60:b2:2f:c8:23:cb:13:2d:bd:d7:d7:da:ac:43:97:a3:da:
         a7:ac:b8:82:a8:5d:bb:10:0b:a1:24:58:ac:a6:a3:2e:d9:32:
         b5:6b:f5:74:ab:5c:61:f9:9a:d0:18:93:75:74:eb:f7:cb:4f:
         3f:a1:02:e9:31:03:d8:34:88:8b:c3:51:2c:65:7b:89:fe:ba:
         8c:e0:5b:07:02:66:80:92:ba:96:0d:0b:11:01:64:a2:67:9f:
         56:3c:95:8c:86:5b:9c:fb:bc:92:eb:49:0a:e4:74:4e:f7:19:
         97:fd:f3:c8:28:3f:bc:23:db:90:59:f7:8a:3a:0c:d6:00:fa:
         63:cb:c3:8b:5b:e0:e8:a0:df:81:e6:06:f9:94:f0:ac:33:28:
         88:db:c1:15:37:88:59:41:16:83:b8:0f:60:5c:ea:77:05:1e:
         98:68:94:51:2e:a4:1c:ed:74:b9:63:e5:58:fa:f9:dd:a1:cc:
         b5:45:4a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:24 2026 by rpki-client