Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144702.roa
File:                     AS144702.roa (raw, json)
Hash identifier:          IaYhHcCUbcqN7Z087Kse5eJn4aqtbgO2E7N9g0meM7U=
Subject key identifier:   A6:D4:4E:96:A0:49:9D:6B:42:82:52:EF:40:9D:3B:DA:E9:E3:0C:CF
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       48D9C915006E6716F4F0E0B3C17E3FFA267575BC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144702.roa
Signing time:             Fri 22 May 2026 02:47:34 +0000
ROA not before:           Fri 22 May 2026 02:42:34 +0000
ROA not after:            Fri 21 May 2027 02:47:34 +0000
asID:                     144702
IP address blocks:        240a:a804::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d9:c9:15:00:6e:67:16:f4:f0:e0:b3:c1:7e:3f:fa:26:75:75:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:42:34 2026 GMT
            Not After : May 21 02:47:34 2027 GMT
        Subject: CN=A6D44E96A0499D6B428252EF409D3BDAE9E30CCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f4:b5:4e:b2:5b:a9:35:31:dd:81:eb:9d:a2:
                    4c:af:45:1e:ab:a0:e3:65:62:cd:22:33:3e:c6:48:
                    b0:ad:7e:7b:e1:3f:ed:80:3a:89:9f:2a:cf:8e:18:
                    16:68:a0:ba:f2:60:3e:b7:a0:77:8e:b8:dd:e5:3c:
                    6c:b4:01:a3:a0:13:c4:96:97:84:06:66:2b:9b:e9:
                    23:29:d2:2d:78:0f:05:02:e3:6c:27:72:46:f0:5e:
                    91:80:df:c4:9f:21:a6:e7:0c:81:b6:83:39:da:eb:
                    f7:eb:3e:40:15:2a:86:6b:02:27:07:e7:cf:5e:89:
                    c4:1e:28:eb:e6:4c:2a:6e:3c:9b:17:88:9a:e2:fb:
                    ab:9c:72:b7:18:c5:51:ed:a3:52:f3:c1:41:19:1a:
                    e9:20:d3:a4:15:aa:3b:4d:32:5e:5b:a1:08:fe:dd:
                    22:1c:8f:e0:47:31:e7:07:e9:68:a9:a1:5d:9c:c7:
                    3d:cf:99:6b:e9:fa:41:44:20:f5:aa:36:1a:d4:bb:
                    6c:66:d8:12:d4:18:7e:42:ef:c7:ee:97:6d:50:8f:
                    80:e5:aa:b7:77:95:72:0e:2d:9f:7b:0b:c3:54:9a:
                    6f:9b:0b:02:4a:76:94:49:15:70:30:d1:1b:9f:61:
                    ac:2e:c9:1b:6f:40:19:4c:99:1d:0b:68:ae:58:61:
                    96:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D4:4E:96:A0:49:9D:6B:42:82:52:EF:40:9D:3B:DA:E9:E3:0C:CF
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144702.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a804::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:20:c9:95:25:c3:9b:ee:a0:ef:cc:e5:ea:e8:87:c0:79:ec:
         e3:14:cc:51:dc:1b:59:2d:b2:af:35:56:89:77:be:29:6b:53:
         59:d8:09:c0:50:5f:81:d7:e2:b4:7a:4b:1a:d1:41:cf:5b:94:
         d7:8b:5e:22:36:b2:a7:5f:45:9c:b5:cb:27:13:6c:c2:b4:ce:
         32:9d:49:35:f4:74:e7:27:35:0d:83:73:de:36:bb:ca:4c:df:
         2d:15:37:5e:49:f9:4a:5e:53:fd:4c:49:1a:6d:92:fa:9d:f7:
         1c:e2:97:a5:ef:eb:7a:05:ed:1b:fb:c3:80:da:01:cd:20:4d:
         02:46:56:33:83:4d:7d:f8:19:4a:24:b0:b4:fd:a1:86:d4:67:
         18:e9:91:19:9b:8f:24:65:31:15:e8:ad:c8:10:da:26:16:f1:
         f9:bb:14:e7:ae:dd:c2:ba:21:99:0a:d7:8d:8b:b6:85:9e:18:
         47:eb:fb:7d:f5:02:25:a5:ca:06:f0:49:0c:53:f8:99:5e:e0:
         93:1c:80:6c:45:6f:13:55:23:5f:d8:62:cf:71:47:16:7d:92:
         06:3e:4b:17:1c:fb:a2:8d:1c:e4:04:93:a6:f4:07:4a:02:fc:
         17:31:86:16:d4:4a:51:18:c8:5c:3c:9c:8e:55:7a:f3:c8:a9:
         b0:f3:69:3c
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUSNnJFQBuZxb08OCzwX4/+iZ1dbwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMjQyMzRaFw0yNzA1MjEwMjQ3MzRaMDMxMTAvBgNV
BAMTKEE2RDQ0RTk2QTA0OTlENkI0MjgyNTJFRjQwOUQzQkRBRTlFMzBDQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC9LVOslupNTHdgeudokyvRR6r
oONlYs0iMz7GSLCtfnvhP+2AOomfKs+OGBZooLryYD63oHeOuN3lPGy0AaOgE8SW
l4QGZiub6SMp0i14DwUC42wnckbwXpGA38SfIabnDIG2gzna6/frPkAVKoZrAicH
589eicQeKOvmTCpuPJsXiJri+6uccrcYxVHto1LzwUEZGukg06QVqjtNMl5boQj+
3SIcj+BHMecH6WipoV2cxz3PmWvp+kFEIPWqNhrUu2xm2BLUGH5C78ful21Qj4Dl
qrd3lXIOLZ97C8NUmm+bCwJKdpRJFXAw0RufYawuyRtvQBlMmR0LaK5YYZZlAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUptROlqBJnWtCglLvQJ072unjDM8wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NzAyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqoBDANBgkqhkiG9w0BAQsFAAOCAQEADiDJ
lSXDm+6g78zl6uiHwHns4xTMUdwbWS2yrzVWiXe+KWtTWdgJwFBfgdfitHpLGtFB
z1uU14teIjayp19FnLXLJxNswrTOMp1JNfR05yc1DYNz3ja7ykzfLRU3Xkn5Sl5T
/UxJGm2S+p33HOKXpe/regXtG/vDgNoBzSBNAkZWM4NNffgZSiSwtP2hhtRnGOmR
GZuPJGUxFeityBDaJhbx+bsU567dwrohmQrXjYu2hZ4YR+v7ffUCJaXKBvBJDFP4
mV7gkxyAbEVvE1UjX9hiz3FHFn2SBj5LFxz7oo0c5ASTpvQHSgL8FzGGFtRKURjI
XDycjlV688ipsPNpPA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:51 2026 by rpki-client