Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144679.roa
File:                     AS144679.roa (raw, json)
Hash identifier:          RXS9dLoRTDtG9Bi5ATmqXb74+V1JBMSDEgue6QBkNpg=
Subject key identifier:   2A:6D:89:47:27:9D:F1:97:97:0D:A5:90:D4:EA:32:80:58:48:A3:8B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1E4765FE14DB0984D510C06273044EBD3223B74B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144679.roa
Signing time:             Mon 25 May 2026 02:22:30 +0000
ROA not before:           Mon 25 May 2026 02:17:30 +0000
ROA not after:            Mon 24 May 2027 02:22:30 +0000
asID:                     144679
IP address blocks:        240a:a7ed::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:47:65:fe:14:db:09:84:d5:10:c0:62:73:04:4e:bd:32:23:b7:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 02:17:30 2026 GMT
            Not After : May 24 02:22:30 2027 GMT
        Subject: CN=2A6D8947279DF197970DA590D4EA32805848A38B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1f:2d:a2:20:dc:c0:40:c4:b4:81:6e:5d:04:
                    84:10:84:41:75:ef:7a:6e:17:a9:9e:ec:e0:ec:83:
                    d1:d0:94:6e:5e:cd:07:f1:a8:6f:76:a7:1b:41:66:
                    56:22:ef:e6:64:c3:eb:58:9d:95:5e:1c:81:d8:1e:
                    70:fc:1f:7d:7e:f2:5d:b7:d0:8a:4e:82:8b:7a:41:
                    cc:8b:81:f4:bf:10:7e:7f:ac:20:78:3f:ef:ed:8a:
                    c0:b3:6b:8f:df:a2:f8:9f:be:c2:2a:c8:04:d5:a9:
                    00:48:80:70:bf:eb:45:f8:e0:91:4d:20:70:14:68:
                    1e:0d:65:76:c4:ea:e7:43:6c:88:d7:41:ed:d1:c0:
                    2d:a0:8f:a6:32:9a:6f:24:7c:7d:c2:36:02:c2:01:
                    cc:87:67:8c:34:f9:d7:7d:36:90:78:6c:8c:3e:41:
                    ab:81:c9:3a:d6:74:59:a4:47:00:e4:79:da:ec:1e:
                    a2:13:7f:e5:5b:4e:0f:1e:9e:6e:b0:15:f8:83:63:
                    44:97:c8:8c:02:2d:18:f8:7c:5f:f4:d9:21:30:f8:
                    29:06:ad:2b:62:66:bd:52:ac:01:2f:41:3a:01:23:
                    3f:db:4e:74:23:2b:9f:d2:ef:fd:7c:26:30:74:ee:
                    e6:7c:71:c0:36:69:4f:81:a2:45:07:53:5c:80:01:
                    95:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:6D:89:47:27:9D:F1:97:97:0D:A5:90:D4:EA:32:80:58:48:A3:8B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144679.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a7ed::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:77:cb:68:bc:29:84:3a:90:8e:eb:64:61:e8:60:5e:75:bd:
         60:c2:2f:13:76:f6:b6:77:c2:70:38:37:0f:15:cc:11:44:76:
         2e:5c:12:4f:fd:4f:58:ef:46:1a:c2:72:60:c5:73:e9:26:a2:
         45:8d:92:e7:ac:09:d4:13:1a:2e:29:ba:66:d3:cc:9c:da:bf:
         b0:98:e1:f2:bd:08:4d:12:46:da:d3:b6:1b:5d:ce:69:4f:b3:
         5a:96:a6:ea:81:f5:ea:0c:ad:b2:69:b2:63:6d:02:39:63:5f:
         1c:3f:8f:dd:9b:2c:87:54:75:86:ad:d0:3f:a2:72:c7:18:53:
         0a:06:7d:0f:20:55:dd:d2:4f:16:83:07:52:01:bc:fc:91:8e:
         3b:d3:f6:4a:78:9d:79:90:12:da:7e:7d:7b:30:47:23:43:98:
         88:11:f3:93:9e:f7:bf:98:88:18:3e:84:6b:78:fc:a6:94:76:
         4c:6a:06:31:9c:f1:b7:4b:0f:b2:6c:36:54:c5:69:37:de:21:
         33:4e:61:27:01:14:0b:93:85:db:96:b6:7e:52:a5:87:42:b8:
         25:ce:60:79:9c:f5:54:06:36:dd:ee:63:f9:58:6a:bb:d2:d9:
         a6:5a:73:c3:01:4e:d7:37:bc:48:f8:85:ad:fa:82:7d:1d:c7:
         db:da:0e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:16 2026 by rpki-client