Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144711.roa
File:                     AS144711.roa (raw, json)
Hash identifier:          ew8se46yL0Fjxo9ezgg+n+nMoTtWIqcFLIM4d6bZxZI=
Subject key identifier:   E4:F8:DE:8F:D5:D9:82:E5:28:C0:F4:6E:B3:33:A9:CA:75:BF:1D:E8
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0FE2177E56A252DE0EBE858CC4472BD9F9FBDAB9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144711.roa
Signing time:             Fri 22 May 2026 02:47:31 +0000
ROA not before:           Fri 22 May 2026 02:42:31 +0000
ROA not after:            Fri 21 May 2027 02:47:31 +0000
asID:                     144711
IP address blocks:        240a:a80d::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:e2:17:7e:56:a2:52:de:0e:be:85:8c:c4:47:2b:d9:f9:fb:da:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:42:31 2026 GMT
            Not After : May 21 02:47:31 2027 GMT
        Subject: CN=E4F8DE8FD5D982E528C0F46EB333A9CA75BF1DE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7c:0e:cb:2c:e6:06:6c:1b:d3:4f:b0:f9:a2:
                    29:31:a4:a1:f7:79:d9:67:04:bb:a5:e2:5a:63:18:
                    01:cb:28:23:ce:e9:ba:d0:e9:c6:91:8e:4e:e9:25:
                    c5:bf:fa:b8:3f:65:5c:53:53:2a:cb:f1:9a:6d:10:
                    48:53:6a:a3:a4:dd:e4:e9:7c:be:b3:b4:ee:d4:38:
                    35:96:33:0b:0d:03:e8:d8:1b:66:4f:ab:6b:b5:ff:
                    99:4d:b3:aa:74:16:de:d3:69:45:f7:13:74:c8:85:
                    8e:6f:4d:e4:89:98:7c:d2:86:31:d3:55:62:ae:03:
                    1a:0b:97:2e:9c:ad:a1:33:66:70:69:2f:99:fa:af:
                    d3:65:a5:8a:71:93:f4:54:e7:39:71:98:54:41:83:
                    99:44:85:12:53:36:67:27:93:a2:0f:1d:1f:16:4f:
                    88:03:37:4f:1d:46:7b:5c:00:06:a5:05:84:28:3d:
                    9f:2f:a9:c1:11:50:48:71:a3:c1:87:db:00:5c:39:
                    6e:81:4e:91:ba:91:7e:78:d6:05:78:a4:6d:ff:a4:
                    4c:be:89:ea:26:3f:78:a6:78:42:7c:65:33:3d:cd:
                    2b:43:8e:1e:2a:fe:5b:e1:45:19:05:a6:d3:c0:94:
                    58:22:44:47:4b:0d:8e:5d:14:5c:bf:a8:11:2d:76:
                    ff:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F8:DE:8F:D5:D9:82:E5:28:C0:F4:6E:B3:33:A9:CA:75:BF:1D:E8
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144711.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a80d::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:98:77:c8:16:63:2d:e4:ea:7a:23:a4:c7:4a:a8:c5:29:cf:
         c3:df:2a:df:64:3d:28:78:a4:52:4c:1d:15:36:97:da:46:82:
         87:29:9c:92:dd:1f:03:83:39:58:ae:fe:17:d0:59:c7:83:f6:
         37:16:0e:28:85:3e:a1:0c:c5:e2:8a:9c:6b:08:82:02:fa:a3:
         24:dd:b4:dd:98:96:9c:04:22:5a:1a:0c:c1:b6:2e:57:e1:5b:
         37:a3:99:1e:a3:d1:c9:46:43:f1:8a:11:e7:a9:44:f7:2f:90:
         6f:c4:2c:79:61:ea:8c:66:f3:f3:6b:7c:ba:58:af:61:02:58:
         97:38:47:84:bd:16:fd:79:9c:2c:9a:6c:10:b0:5e:dd:0e:e6:
         f7:53:67:65:95:ca:40:23:f0:7f:fe:9b:07:f7:c5:2b:52:e6:
         71:a8:ea:c3:2e:7d:7f:7f:c1:91:94:a0:28:0c:c2:20:f7:12:
         67:12:a7:bb:b3:c5:b6:03:5b:2d:72:7d:2c:18:76:d0:0b:b2:
         00:16:50:06:c2:9c:7b:b5:3b:3d:13:a0:1b:be:83:07:ed:28:
         68:c4:9c:e0:3e:6c:d8:e2:ec:18:d5:5b:4c:6d:11:80:5d:54:
         30:34:4f:27:b7:88:fd:f8:26:d5:4e:da:f4:61:a4:a7:e5:f3:
         4a:e5:67:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:53 2026 by rpki-client