Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144746.roa
File:                     AS144746.roa (raw, json)
Hash identifier:          auAZMwk254gegUcGuSC893bI9rnpjmczBM96q8nGsQQ=
Subject key identifier:   97:17:EE:2E:D2:9A:AC:1B:F8:2B:A4:74:0C:E2:25:5E:1D:D5:97:EF
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7C6B926399212F4097B125BB6833479E83E62652
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144746.roa
Signing time:             Mon 25 May 2026 02:22:35 +0000
ROA not before:           Mon 25 May 2026 02:17:35 +0000
ROA not after:            Mon 24 May 2027 02:22:35 +0000
asID:                     144746
IP address blocks:        240a:a830::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:6b:92:63:99:21:2f:40:97:b1:25:bb:68:33:47:9e:83:e6:26:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 02:17:35 2026 GMT
            Not After : May 24 02:22:35 2027 GMT
        Subject: CN=9717EE2ED29AAC1BF82BA4740CE2255E1DD597EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:76:68:7f:88:36:fc:0c:c5:48:79:79:d7:5a:
                    2a:59:ff:fd:6c:2e:d6:59:88:76:14:38:8a:2f:d8:
                    9c:f5:bf:97:6f:56:50:c5:2d:91:80:8b:92:9a:81:
                    7a:5a:89:8b:5b:7f:e1:fa:ff:3c:91:9d:46:05:71:
                    8b:1d:d2:26:ac:af:1c:4f:2f:c4:8b:63:b5:4b:2f:
                    ef:06:54:a8:89:a7:37:45:ed:c8:f9:c0:b2:e9:1c:
                    8b:a2:04:0e:43:62:1d:df:f5:1a:e4:29:3d:d6:ed:
                    60:40:b6:c3:4d:66:fe:77:1f:52:8b:46:b6:cd:24:
                    23:d6:64:f1:ea:a7:f9:06:6a:5d:bf:dc:91:d0:38:
                    58:a6:e0:27:9f:87:0f:1d:61:da:b9:dd:5f:6e:a4:
                    02:2a:8f:5b:fe:f0:29:8e:9a:bb:2f:8b:af:13:42:
                    49:f6:86:0c:8e:f5:60:b2:b2:22:98:63:6a:f6:81:
                    9c:ef:ab:84:9d:24:83:d1:d4:9c:36:a8:78:b7:4c:
                    bb:d7:7d:e1:59:6d:e6:96:97:0b:f9:e3:90:32:0e:
                    2b:2c:cc:2e:e4:36:cd:b6:12:95:c1:87:40:a1:fd:
                    d2:53:3c:4d:d4:e7:74:02:e6:d1:4d:13:e3:35:be:
                    5a:74:ec:58:76:5a:4a:41:4f:b6:4b:e4:9e:45:26:
                    03:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:17:EE:2E:D2:9A:AC:1B:F8:2B:A4:74:0C:E2:25:5E:1D:D5:97:EF
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144746.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a830::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:0f:c2:65:92:8e:bf:05:24:22:b8:5b:a6:ef:24:cd:ac:71:
         b4:75:b4:a5:1f:f9:e6:49:58:b0:d7:aa:68:43:80:32:c1:74:
         ba:17:1c:59:a6:66:b0:2b:d9:0e:02:2c:9e:67:f7:89:02:19:
         82:c9:de:3e:44:93:21:c8:91:ba:72:20:94:25:5d:1b:5f:7f:
         7f:cc:a3:2e:52:75:24:ff:99:96:b8:58:64:1e:04:85:3d:10:
         a1:d4:6c:39:75:42:b3:3b:50:b3:98:c9:0b:7f:33:8f:c3:a6:
         02:f4:5c:e0:b3:b4:5d:9a:7c:9e:6c:eb:8a:b1:92:18:97:05:
         aa:15:1d:ff:7e:53:cc:8b:c5:69:8e:85:40:db:be:76:8c:ce:
         50:83:03:ff:48:cd:85:ab:f0:cd:c2:ce:c6:9c:1e:5b:fa:53:
         8e:79:0c:3f:11:d1:1a:00:ef:b7:ea:6a:bf:1a:dc:13:cf:29:
         26:1e:46:8f:30:bc:7d:69:99:4b:16:fa:72:9c:38:1d:64:ef:
         70:a1:3e:55:c1:fe:02:d2:a2:be:34:b3:94:ca:01:26:00:ab:
         1c:21:dc:13:a5:33:4a:a3:b1:c3:7e:43:27:e6:c4:44:dc:06:
         a1:cf:50:fb:d5:5a:d7:fd:67:fd:9a:af:16:cc:64:ce:d2:f1:
         a2:46:c6:50
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUfGuSY5khL0CXsSW7aDNHnoPmJlIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMjE3MzVaFw0yNzA1MjQwMjIyMzVaMDMxMTAvBgNV
BAMTKDk3MTdFRTJFRDI5QUFDMUJGODJCQTQ3NDBDRTIyNTVFMURENTk3RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJdmh/iDb8DMVIeXnXWipZ//1s
LtZZiHYUOIov2Jz1v5dvVlDFLZGAi5KagXpaiYtbf+H6/zyRnUYFcYsd0iasrxxP
L8SLY7VLL+8GVKiJpzdF7cj5wLLpHIuiBA5DYh3f9RrkKT3W7WBAtsNNZv53H1KL
RrbNJCPWZPHqp/kGal2/3JHQOFim4Cefhw8dYdq53V9upAIqj1v+8CmOmrsvi68T
Qkn2hgyO9WCysiKYY2r2gZzvq4SdJIPR1Jw2qHi3TLvXfeFZbeaWlwv545AyDiss
zC7kNs22EpXBh0Ch/dJTPE3U53QC5tFNE+M1vlp07Fh2WkpBT7ZL5J5FJgPxAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUlxfuLtKarBv4K6R0DOIlXh3Vl+8wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NzQ2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqoMDANBgkqhkiG9w0BAQsFAAOCAQEASw/C
ZZKOvwUkIrhbpu8kzaxxtHW0pR/55klYsNeqaEOAMsF0uhccWaZmsCvZDgIsnmf3
iQIZgsnePkSTIciRunIglCVdG19/f8yjLlJ1JP+ZlrhYZB4EhT0QodRsOXVCsztQ
s5jJC38zj8OmAvRc4LO0XZp8nmzrirGSGJcFqhUd/35TzIvFaY6FQNu+dozOUIMD
/0jNhavwzcLOxpweW/pTjnkMPxHRGgDvt+pqvxrcE88pJh5GjzC8fWmZSxb6cpw4
HWTvcKE+VcH+AtKivjSzlMoBJgCrHCHcE6UzSqOxw35DJ+bERNwGoc9Q+9Va1/1n
/ZqvFsxkztLxokbGUA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:50 2026 by rpki-client