Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144647.roa
File:                     AS144647.roa (raw, json)
Hash identifier:          +b6PnAiHK2u+WqiKenujdr3nWZ4jhSY2VVtDDJ/pXtM=
Subject key identifier:   9C:CD:5C:5E:89:DE:5C:57:5E:21:6E:E8:34:61:17:6A:04:BE:B7:28
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6AD4964FC2683AAA2C7D628DC3719ABB8D82D68B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144647.roa
Signing time:             Fri 22 May 2026 07:41:12 +0000
ROA not before:           Fri 22 May 2026 07:36:12 +0000
ROA not after:            Fri 21 May 2027 07:41:12 +0000
asID:                     144647
IP address blocks:        240a:a7cd::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d4:96:4f:c2:68:3a:aa:2c:7d:62:8d:c3:71:9a:bb:8d:82:d6:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:36:12 2026 GMT
            Not After : May 21 07:41:12 2027 GMT
        Subject: CN=9CCD5C5E89DE5C575E216EE83461176A04BEB728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:74:81:b6:f8:f4:e4:12:32:fd:b7:fa:7e:0a:
                    e0:56:12:de:0d:4c:1c:bb:5f:b7:73:18:f7:1b:d7:
                    44:46:12:61:e0:4a:11:1a:45:41:6b:36:8f:82:9b:
                    03:2c:34:47:00:e2:03:29:07:1f:cc:e5:07:6e:d9:
                    09:f5:aa:9a:fa:bd:01:d9:15:03:2b:0f:fc:f8:0d:
                    ab:c1:59:a2:6a:b4:49:3a:5e:9e:c9:b1:53:8a:26:
                    a7:51:9c:8b:84:8e:04:e4:27:2e:c1:17:a6:46:bb:
                    1b:e4:eb:17:51:25:f8:d1:21:5a:34:db:5b:62:e5:
                    ff:fd:23:39:64:95:6a:68:67:9e:ca:d7:a7:9b:d3:
                    7a:cf:fd:ba:93:13:a7:25:bc:26:93:6e:78:f2:50:
                    e2:44:d8:ea:6b:d5:7c:a1:31:0d:a7:d1:4b:89:53:
                    ef:2c:8b:86:bc:7d:f1:1b:02:32:79:20:c7:a2:e1:
                    d2:7a:0d:02:41:4a:3a:1a:c1:ab:26:85:32:c7:ae:
                    16:65:54:ac:5e:e2:3b:0a:ac:2e:57:be:13:35:44:
                    b5:42:e1:63:60:bb:f3:ad:9d:9f:6d:58:be:ec:5f:
                    1a:c3:f6:99:ef:b8:50:78:0e:48:39:e6:d1:23:88:
                    ef:ce:81:f1:7f:1e:a9:f1:97:41:65:66:01:97:07:
                    dc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:CD:5C:5E:89:DE:5C:57:5E:21:6E:E8:34:61:17:6A:04:BE:B7:28
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144647.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a7cd::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:e8:93:7c:71:30:b2:77:8c:01:a9:20:96:89:7e:58:50:32:
         da:70:6f:24:c3:03:ef:59:f4:65:20:a8:7a:4e:b9:77:e8:a3:
         30:ab:7c:59:92:33:84:dc:0b:23:10:ab:ea:df:61:08:37:b5:
         bc:80:b9:f0:21:cc:95:02:4e:09:6c:4c:33:7a:c6:1b:e9:d4:
         da:f2:e3:f8:fb:1a:1a:ca:f7:5f:4d:55:75:07:75:6b:32:c6:
         fc:5e:e1:78:63:9f:e5:6a:33:9d:6c:75:30:ba:8a:9d:81:f7:
         90:b8:b2:ea:8d:57:96:84:f3:94:7b:ab:0b:df:68:ee:29:1f:
         6f:67:77:2b:ea:61:05:a9:f3:28:0f:e7:e5:98:ce:84:3c:6e:
         89:39:dd:05:58:1b:d5:fd:6d:d9:00:40:d1:ee:ad:f9:86:17:
         f5:97:98:87:95:fb:7f:a4:d5:ad:0c:22:2f:39:17:6c:fa:67:
         b6:f3:4b:df:e2:e5:51:74:a5:b4:3b:60:14:57:69:3b:82:72:
         ff:f4:cb:1a:d9:21:d5:32:78:66:36:01:d7:91:2b:8c:9a:e1:
         82:a0:8b:84:58:66:9f:56:c1:db:3f:9a:bf:6b:60:ab:e2:f5:
         3f:3f:5c:aa:05:d7:e7:2c:8a:74:48:fb:29:b9:92:cd:e4:82:
         fc:0c:b7:3c
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUatSWT8JoOqosfWKNw3Gau42C1oswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzM2MTJaFw0yNzA1MjEwNzQxMTJaMDMxMTAvBgNV
BAMTKDlDQ0Q1QzVFODlERTVDNTc1RTIxNkVFODM0NjExNzZBMDRCRUI3MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUdIG2+PTkEjL9t/p+CuBWEt4N
TBy7X7dzGPcb10RGEmHgShEaRUFrNo+CmwMsNEcA4gMpBx/M5Qdu2Qn1qpr6vQHZ
FQMrD/z4DavBWaJqtEk6Xp7JsVOKJqdRnIuEjgTkJy7BF6ZGuxvk6xdRJfjRIVo0
21ti5f/9IzlklWpoZ57K16eb03rP/bqTE6clvCaTbnjyUOJE2Opr1XyhMQ2n0UuJ
U+8si4a8ffEbAjJ5IMei4dJ6DQJBSjoawasmhTLHrhZlVKxe4jsKrC5XvhM1RLVC
4WNgu/OtnZ9tWL7sXxrD9pnvuFB4Dkg55tEjiO/OgfF/Hqnxl0FlZgGXB9wRAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUnM1cXoneXFdeIW7oNGEXagS+tygwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NjQ3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqnzTANBgkqhkiG9w0BAQsFAAOCAQEAI+iT
fHEwsneMAakglol+WFAy2nBvJMMD71n0ZSCoek65d+ijMKt8WZIzhNwLIxCr6t9h
CDe1vIC58CHMlQJOCWxMM3rGG+nU2vLj+PsaGsr3X01VdQd1azLG/F7heGOf5Woz
nWx1MLqKnYH3kLiy6o1XloTzlHurC99o7ikfb2d3K+phBanzKA/n5ZjOhDxuiTnd
BVgb1f1t2QBA0e6t+YYX9ZeYh5X7f6TVrQwiLzkXbPpntvNL3+LlUXSltDtgFFdp
O4Jy//TLGtkh1TJ4ZjYB15ErjJrhgqCLhFhmn1bB2z+av2tgq+L1Pz9cqgXX5yyK
dEj7KbmSzeSC/Ay3PA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:50 2026 by rpki-client