Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144703.roa
File:                     AS144703.roa (raw, json)
Hash identifier:          eH1NK87ak2zLcjUd94QymtLqRK0vesMdIcEfy2/61nU=
Subject key identifier:   96:07:C4:59:B4:2C:DC:A3:C6:8D:98:22:92:BC:58:65:B3:86:4D:37
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5B4E045F26D16F74720BDD06F8A65582AD52AF85
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144703.roa
Signing time:             Tue 26 May 2026 06:12:27 +0000
ROA not before:           Tue 26 May 2026 06:07:27 +0000
ROA not after:            Tue 25 May 2027 06:12:27 +0000
asID:                     144703
IP address blocks:        240a:a805::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:4e:04:5f:26:d1:6f:74:72:0b:dd:06:f8:a6:55:82:ad:52:af:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:07:27 2026 GMT
            Not After : May 25 06:12:27 2027 GMT
        Subject: CN=9607C459B42CDCA3C68D982292BC5865B3864D37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:76:4b:59:44:d7:8b:10:5f:1a:65:74:50:d6:
                    d4:a0:69:30:ea:e7:d4:cb:9d:09:f9:86:14:f8:9e:
                    ef:07:f9:44:01:0a:58:c7:e2:be:a3:d9:85:dd:14:
                    de:bc:dd:e9:07:a8:bc:66:e9:30:f6:2a:c1:80:fc:
                    ba:3b:dc:b9:a2:8c:e0:6c:0a:3f:ad:d9:f6:7c:e7:
                    96:90:7c:76:2b:01:88:af:15:fa:06:55:35:53:51:
                    31:cb:ae:fb:69:c2:fa:da:ee:fa:10:d4:29:b5:7f:
                    44:cc:2e:e8:81:09:c4:7e:30:33:ac:2e:9d:2e:05:
                    47:3f:d2:b3:aa:97:9f:da:70:7e:59:8a:bb:8b:93:
                    f9:9a:90:cb:f3:4c:39:d8:6f:66:e1:f5:76:82:64:
                    95:12:6f:8c:26:0a:1a:67:35:5e:b2:a4:80:81:2b:
                    41:06:48:3e:5f:eb:d4:32:ee:fa:74:90:5e:42:3c:
                    2a:6c:10:03:e5:3d:45:a4:08:d8:61:9e:7a:88:2b:
                    73:4b:26:db:fa:69:e1:c3:fe:f1:42:1f:a8:f7:23:
                    1a:1f:20:ca:18:97:12:29:4d:ef:78:9e:d5:33:96:
                    46:77:8f:61:fc:3b:8b:25:ea:60:36:fa:45:84:e8:
                    02:29:b3:1e:21:5c:fe:f3:68:8e:0d:b3:ce:df:44:
                    02:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:07:C4:59:B4:2C:DC:A3:C6:8D:98:22:92:BC:58:65:B3:86:4D:37
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144703.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a805::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:db:f4:69:eb:38:50:74:da:5d:28:fa:e8:33:a4:7f:a8:10:
         ca:cc:d6:aa:31:d9:60:f2:b3:f7:8f:df:00:6a:04:3f:eb:84:
         c0:19:ed:7a:1e:34:f0:5f:31:49:51:fc:9f:a4:08:87:66:cb:
         c8:ed:08:19:57:ef:ec:61:17:b4:ec:b3:1d:9d:b4:e3:6b:46:
         07:bc:7e:ab:0d:65:62:5d:26:3b:a6:8e:6d:10:9c:f8:48:29:
         a0:5c:5a:b5:14:3f:c9:0d:28:43:39:2f:11:11:01:81:fd:2a:
         21:82:1a:05:0d:68:34:59:d5:9d:fe:cc:21:cf:1e:3f:13:37:
         a1:e9:da:6b:d0:65:38:75:71:29:2c:a3:d9:37:fc:42:d8:1d:
         d7:9d:18:30:7a:35:40:ff:fb:8a:e8:56:43:82:44:41:c4:9b:
         fe:64:cb:11:5d:5d:f7:3f:1b:c9:ce:6a:6f:99:f4:a4:55:a7:
         ce:d7:a0:b8:48:90:49:41:cf:90:8c:e5:fc:d7:14:e4:7d:6a:
         fb:35:c6:01:43:6e:96:70:ec:64:46:db:58:e4:66:f1:80:7c:
         60:07:da:bc:fc:31:bc:7e:d1:2d:19:4e:9b:8b:8b:7c:28:70:
         83:66:5f:72:e0:8d:77:11:32:72:72:2a:b3:31:47:be:a9:f4:
         a9:ec:78:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:10 2026 by rpki-client