Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144742.roa
File:                     AS144742.roa (raw, json)
Hash identifier:          AP06pViqssfEbT/b/U3NoufDz1x94GO6icOvrCzDbNA=
Subject key identifier:   A7:1C:E3:C7:88:64:74:0D:5E:7B:A9:B6:3A:86:83:0A:E5:9C:EA:E5
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7B2644BB8F94159339BFF282BB24E2CA22467946
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144742.roa
Signing time:             Mon 25 May 2026 01:38:20 +0000
ROA not before:           Mon 25 May 2026 01:33:20 +0000
ROA not after:            Mon 24 May 2027 01:38:20 +0000
asID:                     144742
IP address blocks:        240a:a82c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:26:44:bb:8f:94:15:93:39:bf:f2:82:bb:24:e2:ca:22:46:79:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:20 2026 GMT
            Not After : May 24 01:38:20 2027 GMT
        Subject: CN=A71CE3C78864740D5E7BA9B63A86830AE59CEAE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b5:3e:21:f4:f0:45:70:4d:26:72:12:1b:80:
                    46:02:b2:76:27:79:44:44:29:47:0b:71:1b:61:cd:
                    8d:dc:71:d1:1e:ba:e9:1e:92:c0:17:a1:b7:9d:e9:
                    f2:56:4b:7a:76:8d:04:5a:18:02:e6:b8:7a:f2:83:
                    f5:77:51:d2:5c:d4:4f:c9:e5:0a:a7:f7:bf:81:35:
                    6e:40:92:a2:b5:3d:a3:24:db:67:59:b9:89:27:34:
                    d6:ea:2d:35:69:29:f5:f9:a4:49:51:06:5a:c4:f1:
                    91:7e:d2:25:cc:cf:15:6b:55:29:8c:6b:61:a2:dd:
                    ae:51:5d:c8:83:bf:be:88:22:2f:bf:a1:77:bb:39:
                    40:8b:cd:9d:bf:3a:2e:74:c5:7d:71:b5:e2:11:c2:
                    30:8c:38:3f:09:11:fd:87:6a:d2:c3:44:8c:ed:1f:
                    64:1d:ac:57:b9:c8:f6:e3:0c:19:4a:e1:3e:08:77:
                    ce:43:49:10:f5:8a:17:8d:f4:be:8e:02:4d:0e:4c:
                    a3:c0:81:42:34:95:94:d1:7b:69:48:d5:87:2d:3e:
                    03:97:0c:01:a9:84:9b:a5:02:f4:88:2a:c1:5f:8a:
                    12:97:25:d5:1f:87:51:72:8a:0e:16:f4:9b:bf:15:
                    25:82:70:36:6b:01:00:1b:35:6a:b5:a8:00:e3:60:
                    22:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:1C:E3:C7:88:64:74:0D:5E:7B:A9:B6:3A:86:83:0A:E5:9C:EA:E5
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144742.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a82c::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:a9:d5:4a:74:2d:8f:df:06:00:72:dd:ee:a3:db:4b:00:59:
         6e:ef:4d:2f:61:e7:e2:18:34:2e:e3:2b:98:dc:89:b2:7c:03:
         36:f4:75:de:24:a0:f5:e4:cf:0f:0b:33:61:7a:d4:5f:b2:e1:
         13:f6:45:43:3a:b3:19:27:d5:a6:c9:89:d4:54:5f:ad:73:20:
         b0:51:76:45:06:38:de:0a:84:2f:87:77:2c:b5:fe:ad:63:a4:
         a1:7c:91:c4:b3:90:d3:80:5a:fd:fe:3a:9d:59:90:17:f6:48:
         dc:f4:78:56:01:ca:39:e7:e2:f5:0f:04:18:9f:33:f7:cc:ef:
         6d:47:24:cd:84:eb:97:2f:f8:38:bb:5e:f0:c8:08:5a:1a:08:
         58:23:1d:d0:3a:52:31:b4:50:fc:44:59:1b:e9:ca:77:5a:de:
         da:a9:c7:ab:52:17:11:6b:1f:5d:09:7e:d8:39:a2:6c:c6:de:
         e5:82:36:31:43:24:c9:9d:2e:bf:d9:12:9a:34:4a:bd:c9:b7:
         9c:2d:31:8a:f5:71:1a:16:99:e4:fd:80:24:db:ef:05:a0:76:
         83:c8:16:95:68:97:9a:d0:ee:9d:bf:27:7e:16:8e:03:c5:32:
         e8:b0:74:61:aa:8e:68:c5:81:5b:38:69:ea:3b:6a:2d:6a:2d:
         05:f8:e0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:13 2026 by rpki-client