Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144748.roa
File:                     AS144748.roa (raw, json)
Hash identifier:          zoGXhlaxjozh6lg+r9Y0TG8t/IRjbp7voAP++UOvuKU=
Subject key identifier:   4B:47:A8:45:CE:C7:99:00:C0:61:80:93:9A:FA:5B:81:0E:8B:B2:05
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       51EA95BAB7D2FE15F4DD06683C79A1B2EE82F28B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144748.roa
Signing time:             Fri 22 May 2026 06:46:27 +0000
ROA not before:           Fri 22 May 2026 06:41:27 +0000
ROA not after:            Fri 21 May 2027 06:46:27 +0000
asID:                     144748
IP address blocks:        240a:a832::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ea:95:ba:b7:d2:fe:15:f4:dd:06:68:3c:79:a1:b2:ee:82:f2:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:27 2026 GMT
            Not After : May 21 06:46:27 2027 GMT
        Subject: CN=4B47A845CEC79900C06180939AFA5B810E8BB205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:de:fe:33:c6:d9:87:51:c4:10:3e:75:f4:55:
                    49:9e:ea:65:f5:dd:ed:19:63:b1:44:78:2d:3a:b6:
                    eb:58:a5:b2:11:03:84:86:25:8b:e4:7d:4f:c6:6c:
                    3c:b4:f9:51:c2:24:99:f1:e9:04:7e:85:fd:12:c6:
                    e1:b4:2f:7a:c5:4f:40:91:ae:ea:d6:2c:c3:e8:b7:
                    b8:62:5b:74:a7:0d:08:3a:c0:7d:04:05:af:63:3c:
                    11:99:92:4b:62:ad:0f:b3:8c:b5:67:6b:c0:dc:e8:
                    28:4e:70:a4:7e:46:62:d4:8b:71:d0:30:79:e0:66:
                    d1:8b:34:22:29:67:4f:93:b8:bb:f8:af:3b:20:34:
                    ab:69:e9:51:a5:44:7b:28:24:9d:48:01:90:13:54:
                    19:a8:74:3d:45:6b:a7:3f:82:e7:13:72:9c:3f:f3:
                    ea:fc:df:0e:51:6e:5a:55:3a:78:32:5a:25:52:4b:
                    eb:f2:73:99:56:76:dc:88:ae:34:1b:76:74:13:81:
                    4a:ab:45:a3:45:a1:b7:34:a9:f6:60:04:5d:c9:c1:
                    34:0f:04:a6:c6:27:65:b4:32:05:ed:5d:0e:f1:aa:
                    1a:35:43:a0:c5:d3:96:7f:aa:a1:07:16:bd:c4:d6:
                    75:42:0c:8d:56:56:f8:bd:1d:98:26:c3:fb:72:7a:
                    0a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:47:A8:45:CE:C7:99:00:C0:61:80:93:9A:FA:5B:81:0E:8B:B2:05
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144748.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a832::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:cd:ce:ae:79:cd:ea:96:14:de:86:ca:0d:d1:1f:26:52:71:
         f6:ed:16:92:6f:8e:8b:3e:ba:a7:60:48:ed:17:59:8a:6a:ba:
         90:19:a5:fe:5b:2c:a2:ab:07:6c:41:f5:b1:ed:fc:b0:05:4a:
         01:46:7d:c0:c7:56:5d:e7:a0:b3:f6:dd:ab:94:1e:5b:58:f9:
         96:6a:1d:c2:ee:4e:f4:5a:86:53:1e:f3:3e:ec:ce:67:ce:20:
         59:d5:96:7a:26:a0:f8:48:1a:92:00:d8:d3:64:34:e5:f9:85:
         a2:37:0b:52:7d:38:4e:c6:ad:97:6c:8a:83:10:c3:48:e7:de:
         74:f4:d5:24:25:4d:d9:d3:a7:6d:3b:1d:69:b7:2e:80:02:98:
         f7:b6:d3:d4:2a:3a:12:fe:ce:f4:27:1f:db:4b:63:97:56:1b:
         f2:1a:06:e2:49:44:8a:c6:63:4a:65:a0:e1:b5:ca:ee:23:21:
         b6:95:bf:ca:f8:88:22:c0:49:30:ed:45:19:24:26:48:3d:16:
         69:bf:f2:f7:bd:35:84:44:c6:4a:c6:60:3c:54:ac:3b:77:24:
         55:02:8c:3b:f3:f7:49:d0:10:91:c5:ef:8d:8f:87:1e:f6:ba:
         0c:d7:0c:af:49:98:fd:3e:5b:e7:4f:4a:44:65:a7:ea:44:92:
         2d:25:da:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:38 2026 by rpki-client