Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144668.roa
File:                     AS144668.roa (raw, json)
Hash identifier:          bAvY7zGrPlnEb1DGKRzFUF9f2LGZq8pru3wzVwmOaqU=
Subject key identifier:   08:B3:D6:91:21:DC:7D:90:20:DE:88:54:F9:F8:6B:5A:82:C3:88:44
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5DA8C5AF0147B4015696BDC4C93BB0F7C16E834B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144668.roa
Signing time:             Mon 25 May 2026 01:19:55 +0000
ROA not before:           Mon 25 May 2026 01:14:55 +0000
ROA not after:            Mon 24 May 2027 01:19:55 +0000
asID:                     144668
IP address blocks:        240a:a7e2::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a8:c5:af:01:47:b4:01:56:96:bd:c4:c9:3b:b0:f7:c1:6e:83:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:14:55 2026 GMT
            Not After : May 24 01:19:55 2027 GMT
        Subject: CN=08B3D69121DC7D9020DE8854F9F86B5A82C38844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a5:59:0d:8c:a8:a9:01:a1:cb:27:f9:58:14:
                    c7:34:10:a4:aa:6d:57:8a:0e:c1:51:97:47:0d:7e:
                    75:31:7e:d7:82:5a:8f:62:e5:29:df:60:66:5c:86:
                    b5:5f:26:1e:6b:02:35:06:d4:2e:ac:fc:5c:0e:1b:
                    f9:7a:86:86:8f:55:05:94:b4:c7:8c:f8:42:70:a8:
                    f8:7f:7f:a2:34:6a:03:8a:3a:8e:2a:09:4d:f5:0e:
                    26:06:fd:54:4b:29:7f:cb:82:d2:e0:7d:98:7f:4e:
                    09:24:e4:aa:7a:6e:93:82:49:fe:53:ce:66:4c:87:
                    f3:63:f5:90:09:a4:22:2b:76:0e:8f:ab:5a:4d:c3:
                    20:49:d9:fb:f6:8b:bf:d1:25:4d:08:e3:01:1b:91:
                    8e:49:b3:ae:f6:5e:1d:1f:b6:bb:95:34:e7:b9:01:
                    01:c2:4c:5d:89:92:3e:d6:eb:c9:a9:1c:59:e6:62:
                    37:02:03:de:e0:e9:d4:dd:f9:8c:97:35:8c:00:a1:
                    99:68:16:f3:43:68:d6:c1:23:5b:b5:9b:92:ed:1b:
                    b3:fd:d3:ac:9b:7d:79:ed:1f:13:34:75:2e:d9:6a:
                    05:86:cf:d7:50:96:07:c9:10:5f:33:f7:15:04:2a:
                    59:c0:85:d7:34:6f:72:1a:73:7c:83:3f:ec:73:21:
                    fe:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B3:D6:91:21:DC:7D:90:20:DE:88:54:F9:F8:6B:5A:82:C3:88:44
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144668.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a7e2::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:fe:66:ca:1e:3c:c1:54:e9:c6:f2:9e:dd:2c:52:d3:82:80:
         5b:eb:71:32:f7:c9:e0:31:af:41:50:d3:9c:db:ae:29:2a:c7:
         f8:27:2a:63:1a:00:8b:b9:66:21:54:01:2e:23:96:0c:27:88:
         d5:e9:4d:ea:b6:67:2d:46:d5:99:4a:34:89:01:d2:5f:22:77:
         40:33:cc:d6:e5:f6:54:35:02:05:1e:ce:a4:2c:01:c5:24:93:
         69:a6:89:27:38:8a:3b:87:4e:98:dd:ce:a4:2b:6d:b2:9b:2f:
         2f:32:ff:72:44:e3:dc:ce:3b:7b:19:10:36:3c:91:92:55:70:
         c0:e2:a0:ec:e3:ca:3b:50:77:2f:12:4c:13:97:ab:6e:e0:7d:
         ff:9e:17:0b:d6:a0:4a:88:61:33:bb:f5:2e:d0:b4:39:7d:d1:
         32:2f:ae:65:ee:bf:68:4e:dd:dd:53:ee:c1:59:2b:50:0a:85:
         28:6c:3d:df:b7:20:51:32:f8:ed:d6:88:db:78:2b:16:60:5b:
         33:c0:77:9a:0c:d7:6e:98:ee:0a:02:ee:5c:e0:ab:fe:e1:b9:
         e5:5c:d0:61:a8:7f:be:34:ea:eb:b7:36:fc:5a:3f:5f:32:a4:
         df:c2:32:62:d4:bc:21:a9:c5:6e:6c:47:75:54:42:ca:1a:9b:
         bf:b8:23:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:58 2026 by rpki-client