Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144740.roa
File:                     AS144740.roa (raw, json)
Hash identifier:          JwLVm660thbj/mJW3ZocixXzQACFD9sIhQL3QTPlr4E=
Subject key identifier:   71:07:5E:F4:10:4D:52:51:63:17:0E:6F:FA:92:EF:6A:99:EB:4E:F2
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       39566190A049D09EEAF4B5A5CCF9B554442A7C46
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144740.roa
Signing time:             Fri 22 May 2026 07:32:33 +0000
ROA not before:           Fri 22 May 2026 07:27:33 +0000
ROA not after:            Fri 21 May 2027 07:32:33 +0000
asID:                     144740
IP address blocks:        240a:a82a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:56:61:90:a0:49:d0:9e:ea:f4:b5:a5:cc:f9:b5:54:44:2a:7c:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:33 2026 GMT
            Not After : May 21 07:32:33 2027 GMT
        Subject: CN=71075EF4104D525163170E6FFA92EF6A99EB4EF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d0:5a:9e:bd:ad:ea:1b:28:4b:90:3d:79:3f:
                    ae:b2:49:0e:e5:d2:70:6b:99:0f:57:bd:c1:e9:c6:
                    3f:58:e3:9b:26:c0:a3:65:86:3d:9d:dd:5e:96:fb:
                    8d:18:ce:5e:19:52:b3:7f:fc:e5:66:da:88:48:57:
                    72:80:22:b4:8d:27:49:37:c6:60:6b:c3:bc:46:75:
                    80:c5:e8:b2:56:6b:70:35:f4:e0:02:84:70:4e:91:
                    d6:b7:57:fe:7a:ef:78:a9:4f:7e:6c:da:30:8f:74:
                    9d:85:4f:86:2e:27:48:08:d3:eb:4f:4d:57:36:df:
                    e9:21:77:5d:ea:b4:7d:f8:69:48:ca:b4:c5:8f:7b:
                    9f:be:cc:45:97:5b:8a:b9:a6:d5:02:84:bb:56:bc:
                    7c:f3:ab:0f:28:01:2b:10:3f:83:e0:12:c1:f4:76:
                    bd:e7:7e:40:d4:3e:b4:cd:9b:20:fd:c7:c5:3d:a6:
                    c6:41:b3:e0:b7:ef:ad:ab:b0:1b:56:a9:34:5e:0c:
                    ef:ed:45:fe:40:36:e7:3e:11:13:2a:98:31:b6:e1:
                    cd:79:12:df:0f:56:6c:1a:c7:57:4c:c7:98:40:27:
                    8f:97:2a:8f:7c:e5:f6:95:3b:e1:fc:41:f0:e3:0b:
                    62:8b:be:cc:d6:41:ce:db:fe:2d:70:bb:3d:d3:17:
                    33:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:07:5E:F4:10:4D:52:51:63:17:0E:6F:FA:92:EF:6A:99:EB:4E:F2
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144740.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a82a::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:e7:e4:3e:db:52:f4:a1:e5:bf:f7:6c:c1:99:d1:3e:5d:03:
         3f:d9:e0:e1:0d:6d:01:ff:01:90:79:7f:54:d5:5c:a6:fb:3e:
         29:75:4c:ca:95:62:60:dd:5a:09:88:d8:34:ed:16:4f:de:aa:
         f9:84:23:cc:ae:9b:9f:b6:11:a9:98:dd:e1:7e:67:49:c7:8c:
         2f:f0:a0:a9:a5:4f:3e:98:44:bc:08:c4:3d:0c:db:97:9b:64:
         0a:ee:fb:ba:84:f0:7c:4b:a2:f6:87:08:a8:22:92:95:2a:c4:
         21:79:c1:43:70:88:ba:db:30:62:6c:46:07:e9:75:12:0e:47:
         3b:e7:f6:cd:91:a4:b6:66:1b:0d:43:4d:51:39:28:33:e6:f9:
         68:40:75:32:c0:5f:10:ed:e7:ee:77:0f:3e:d0:b7:4e:55:9b:
         9d:fe:f9:09:a9:1c:2b:34:2e:8e:fa:3a:50:0e:3b:c5:e7:8f:
         b1:41:68:7c:92:19:34:1f:93:ac:8f:9f:47:2d:84:cb:90:98:
         8e:2e:b1:86:e5:38:b9:bf:0c:2b:ee:3e:99:92:5f:d8:cd:ac:
         e7:ab:9f:07:4f:37:7b:c6:19:e5:60:9e:9e:6b:3e:2b:a7:ec:
         29:ac:9a:0b:4a:6c:dc:f6:d0:ef:77:18:4b:19:18:ef:e9:a6:
         85:43:b8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:39 2026 by rpki-client