Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144651.roa
File:                     AS144651.roa (raw, json)
Hash identifier:          lJ7KyfLhq9AWFuocr1poTXDf+37pgcNV2gXlk1AyFwQ=
Subject key identifier:   75:E7:B6:05:E0:B0:83:9B:CC:AB:0C:8C:6C:AD:93:18:72:43:49:46
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5784783FCF6514C225E41D0DCBFC16624F71CB11
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144651.roa
Signing time:             Fri 22 May 2026 04:27:05 +0000
ROA not before:           Fri 22 May 2026 04:22:05 +0000
ROA not after:            Fri 21 May 2027 04:27:05 +0000
asID:                     144651
IP address blocks:        240a:a7d1::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:84:78:3f:cf:65:14:c2:25:e4:1d:0d:cb:fc:16:62:4f:71:cb:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:22:05 2026 GMT
            Not After : May 21 04:27:05 2027 GMT
        Subject: CN=75E7B605E0B0839BCCAB0C8C6CAD931872434946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0e:6f:b6:d7:26:5f:c2:8c:b1:87:31:58:72:
                    17:13:8a:ec:80:50:53:ba:79:7b:16:26:9a:6b:fa:
                    67:2c:f2:b1:30:65:af:fb:05:c0:79:20:fb:b7:27:
                    0b:64:1c:9b:d4:a4:6b:10:91:a8:a7:22:d9:1b:f1:
                    b3:e9:76:80:54:33:8d:1d:9e:09:bf:28:81:f4:7e:
                    6f:60:90:f6:8e:3e:78:5d:1d:8b:ac:bf:57:a3:9c:
                    60:6f:bb:49:ae:4b:fe:10:fb:a2:02:c7:9d:8c:a2:
                    08:60:e4:dc:7c:b9:cc:e2:ef:56:92:ad:ba:d7:a5:
                    b8:f1:13:75:0b:15:5a:76:33:38:fc:9a:62:20:f9:
                    36:31:fc:95:c3:9b:b4:91:4b:84:80:74:35:c2:cf:
                    22:76:89:2f:64:72:27:5b:1f:06:97:fd:48:3a:d8:
                    72:49:e3:5d:79:05:9d:3f:6a:df:3d:9b:06:ed:fe:
                    7b:ce:b2:7c:d0:93:6d:5d:07:ef:db:e5:0e:22:d2:
                    e8:9a:ba:a6:8d:66:6a:cc:6b:ee:18:86:f5:da:d4:
                    ac:fc:a7:ee:bd:3d:1a:4b:73:91:2d:38:54:98:fd:
                    62:7d:b7:8d:75:5e:f8:76:a0:b9:9a:da:82:ed:1b:
                    01:90:ec:f3:46:c9:a4:db:6c:1b:4d:12:70:d7:e8:
                    f1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E7:B6:05:E0:B0:83:9B:CC:AB:0C:8C:6C:AD:93:18:72:43:49:46
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144651.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a7d1::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:c6:70:2b:0b:e6:b5:43:3c:24:05:0a:9a:7e:43:f4:50:f9:
         72:c5:e0:b0:c4:bf:48:fa:b6:85:8a:17:5c:e7:45:e0:1d:7d:
         57:a4:00:df:3b:5c:dc:61:8c:26:7b:52:37:cf:55:13:94:63:
         7e:01:32:a3:36:6e:af:c9:f1:26:c9:43:3c:a2:41:63:ec:23:
         81:35:25:52:f9:8e:24:7e:1d:55:e6:e3:e8:e1:80:51:0a:d1:
         18:c5:94:d9:04:74:e7:ef:3b:82:72:42:c0:98:d6:83:00:1b:
         be:0a:2b:96:9c:7d:3d:f9:c3:84:a0:2a:7a:0d:77:26:1d:59:
         3a:07:5e:c8:27:2f:23:86:74:e6:db:fe:9f:bd:b2:96:d2:6e:
         1a:b1:b9:54:45:de:3c:c3:48:35:3a:bb:e5:79:25:cb:a5:9c:
         37:fd:29:e9:75:b8:20:97:71:b5:b3:0e:85:94:c3:f2:e8:f6:
         8c:87:14:f3:95:ca:7d:ad:00:0a:17:1c:ba:62:c3:b3:57:93:
         4d:27:97:a8:71:d9:f0:3f:14:c2:c5:02:d3:89:05:6a:bb:c5:
         4a:1d:8f:34:a5:66:79:97:5e:56:47:22:4d:48:72:1b:1b:e3:
         e7:86:93:9a:a9:5f:8e:76:25:a9:d4:f7:eb:53:eb:bb:9f:e0:
         15:54:05:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:21 2026 by rpki-client