Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144724.roa
File:                     AS144724.roa (raw, json)
Hash identifier:          yWBiOIvrj1oztGHtj2YMq46tOCBbBtD16U+z2FP2DIk=
Subject key identifier:   8F:16:F7:C9:FC:D8:13:78:13:42:BE:DA:B2:9C:48:AD:4D:94:C9:CD
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4C1F62BD0DCC9AC62EF4763B89F9C6A489C02184
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144724.roa
Signing time:             Tue 26 May 2026 03:16:40 +0000
ROA not before:           Tue 26 May 2026 03:11:40 +0000
ROA not after:            Tue 25 May 2027 03:16:40 +0000
asID:                     144724
IP address blocks:        240a:a81a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:1f:62:bd:0d:cc:9a:c6:2e:f4:76:3b:89:f9:c6:a4:89:c0:21:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:11:40 2026 GMT
            Not After : May 25 03:16:40 2027 GMT
        Subject: CN=8F16F7C9FCD813781342BEDAB29C48AD4D94C9CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:12:fd:01:3a:bf:48:74:ca:96:40:63:ab:e5:
                    79:1f:2d:ea:b5:82:0c:c0:92:ab:18:48:5c:c5:ae:
                    4e:9b:be:b3:31:ca:5d:e9:27:91:67:53:55:6d:77:
                    fb:bf:8e:65:44:62:23:70:25:f3:6e:73:33:12:87:
                    57:42:35:ea:5c:f8:19:ef:6e:23:ab:55:4e:88:50:
                    5d:f2:18:c7:c2:ef:f9:16:9a:5e:25:be:c0:07:cf:
                    19:d1:1e:01:10:81:7b:42:37:e6:a9:f2:b0:82:01:
                    c6:ac:42:1f:96:3a:f4:d8:1f:91:49:d8:26:15:aa:
                    89:ce:5d:cd:dc:b4:1b:d4:e4:a6:6e:fd:9f:1f:23:
                    0a:37:81:90:dd:e8:46:e2:6f:8f:f0:33:8a:61:f8:
                    40:47:71:67:c5:aa:34:93:3c:0a:36:5d:95:8b:84:
                    98:c8:c8:4f:a2:94:dc:9b:7f:07:a1:0e:44:cb:7d:
                    a3:7a:80:41:ff:29:b4:01:f6:0d:6d:f7:f8:0c:e9:
                    64:69:ea:d4:20:dc:85:32:18:f6:48:51:12:f4:76:
                    fc:8b:38:1a:40:82:a5:42:ab:9d:29:d1:21:12:2a:
                    45:1e:73:72:8a:c9:85:cb:a0:0a:28:23:5b:ee:21:
                    53:88:82:bf:81:cc:50:b1:89:b5:8f:78:aa:b3:ca:
                    ef:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:16:F7:C9:FC:D8:13:78:13:42:BE:DA:B2:9C:48:AD:4D:94:C9:CD
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144724.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a81a::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:9a:33:90:d8:61:a4:5b:68:28:b8:ce:1f:e1:ef:cc:6a:a3:
         40:df:cb:f3:20:ef:92:dc:b9:5d:60:02:a1:c6:0d:c3:ad:fb:
         53:64:84:76:9d:a4:b4:84:71:1e:ed:2a:02:e9:04:d2:17:c9:
         5c:ac:3f:44:79:c1:24:be:15:a7:b0:fa:e4:80:ac:87:f7:fe:
         60:e7:52:0a:a4:6d:0b:87:68:46:fc:57:c9:3b:1b:ef:2a:6e:
         1a:ce:8f:97:dc:20:ef:d4:33:f7:60:bc:6a:ed:be:c3:6e:5a:
         a8:38:bc:08:c1:27:41:7d:8d:06:6d:b9:8a:20:04:0b:fe:7b:
         e7:81:42:85:62:18:2e:5d:30:0c:cc:32:07:ca:8b:32:12:43:
         16:60:17:60:4a:d9:ca:3b:16:ac:d6:6e:d1:d3:66:69:89:47:
         2d:57:75:1e:ed:d0:44:31:87:be:9c:60:2c:a4:e5:24:3c:aa:
         46:f0:05:f8:da:2f:f0:c6:d2:94:91:74:b2:3e:93:0d:bf:7f:
         a6:d1:68:dd:ed:f8:f5:5e:46:55:0a:53:55:11:72:bc:a1:c5:
         9b:f4:8b:f0:f8:e6:45:a2:0e:61:00:2e:30:13:3f:17:0c:ae:
         e3:28:f9:4b:63:3b:39:8c:50:fe:41:37:ec:6e:67:59:60:1b:
         75:97:9d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:49 2026 by rpki-client