Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144665.roa
File:                     AS144665.roa (raw, json)
Hash identifier:          BZG22IYn82CmHCDLGUL+XvyNugiAFkHFzc9FiD5TmLE=
Subject key identifier:   C3:2C:07:04:37:6C:67:F8:5B:54:BE:50:D0:CF:88:08:7D:D1:E9:A1
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5082EEF72F2506AB6EC61C6A102EDDE39CEEB1C8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144665.roa
Signing time:             Fri 22 May 2026 06:46:15 +0000
ROA not before:           Fri 22 May 2026 06:41:15 +0000
ROA not after:            Fri 21 May 2027 06:46:15 +0000
asID:                     144665
IP address blocks:        240a:a7df::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:82:ee:f7:2f:25:06:ab:6e:c6:1c:6a:10:2e:dd:e3:9c:ee:b1:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:15 2026 GMT
            Not After : May 21 06:46:15 2027 GMT
        Subject: CN=C32C0704376C67F85B54BE50D0CF88087DD1E9A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:22:85:5c:3e:08:2e:7b:39:8d:eb:79:a8:ac:
                    66:89:58:bf:11:61:62:11:fc:8d:1e:bb:c2:12:c7:
                    fd:15:36:42:14:f0:84:84:0c:fb:b7:8a:d6:66:75:
                    23:3f:32:fb:78:85:f8:48:4a:ad:28:6a:99:d0:89:
                    1f:7b:1a:56:52:e0:08:e8:35:c4:96:8f:38:35:ed:
                    e4:74:77:be:1f:d9:a6:b2:ff:19:98:54:cc:1f:f5:
                    3d:f3:2d:91:1a:45:82:a7:22:ae:d0:f6:20:7b:1e:
                    4b:58:48:84:0d:a9:45:bd:11:19:5f:cd:0e:50:df:
                    c2:da:f6:81:3b:22:1e:b6:52:07:97:35:a1:4a:14:
                    ef:da:66:bf:1e:c2:53:e5:b7:a3:a8:90:f2:8b:25:
                    89:e7:0b:a2:11:ac:b0:06:7a:a1:59:42:7d:44:71:
                    da:fa:28:c3:ad:76:65:8f:91:64:c7:6a:58:b9:57:
                    96:17:ed:5e:84:e8:9a:38:37:2e:42:2b:ce:fd:ff:
                    85:f2:93:7d:75:85:b7:3a:f3:cd:e9:f9:a5:39:08:
                    54:a9:ca:74:a1:72:61:8c:82:65:a8:85:bc:62:8a:
                    c4:3c:d5:e4:57:0a:e7:be:56:cb:c2:1c:71:45:5e:
                    6f:68:e8:48:66:be:2e:02:29:14:ed:70:00:a2:29:
                    7e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:2C:07:04:37:6C:67:F8:5B:54:BE:50:D0:CF:88:08:7D:D1:E9:A1
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144665.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a7df::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:85:0d:5e:66:df:a3:ee:10:0b:2e:c6:e5:3b:be:f5:87:7f:
         d7:5f:b2:92:c0:96:a6:6a:71:50:32:b4:06:a2:31:2c:bc:ac:
         bf:67:ec:1d:2f:44:76:6c:10:1e:65:52:9f:a8:fc:aa:aa:0d:
         a9:09:06:3f:f7:28:51:c6:70:6c:8c:08:49:1a:bb:19:62:70:
         93:75:1d:6d:43:0e:f7:d0:e3:ec:2e:85:fc:1b:76:2b:f4:92:
         80:fe:6c:f9:7c:f6:11:6c:62:7d:c8:23:4c:7e:50:58:02:47:
         cf:4e:49:2e:bd:af:03:fe:4d:a1:90:0b:cb:b7:15:0b:65:e0:
         9f:69:f5:f3:c3:9b:08:0c:cc:8c:e1:81:11:e1:07:ab:61:1d:
         fb:bc:80:b4:32:ba:6c:3c:d2:15:40:6a:21:dc:e4:a2:30:af:
         c4:25:f9:6f:ca:64:ea:90:03:75:de:4c:e8:11:6c:4c:d6:44:
         d9:8b:ec:22:4f:77:69:a2:a9:39:83:b0:f5:5e:26:77:2e:26:
         73:0c:90:08:39:2a:f5:77:ab:f4:dd:42:67:1d:f5:ec:02:64:
         c5:15:46:85:d6:c4:b4:c4:2a:a6:a8:8c:92:1e:5b:11:5e:e0:
         f3:4c:16:7b:19:0c:9c:ae:81:ff:3b:4b:ae:20:92:a3:53:ac:
         01:ad:4d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:57 2026 by rpki-client