Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144761.roa
File:                     AS144761.roa (raw, json)
Hash identifier:          6b6dwFNRVLY97DIaDniLC8uX1dg7XtoJHfO3jeTQRRA=
Subject key identifier:   1F:46:24:66:EF:00:74:8D:BE:03:D2:BD:8A:40:F9:EE:E5:FF:A7:EE
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       24A12B144489EA7ECF2CB4A7F68006E0D216C1A9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144761.roa
Signing time:             Mon 25 May 2026 06:28:29 +0000
ROA not before:           Mon 25 May 2026 06:23:29 +0000
ROA not after:            Mon 24 May 2027 06:28:29 +0000
asID:                     144761
IP address blocks:        240a:a83f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:a1:2b:14:44:89:ea:7e:cf:2c:b4:a7:f6:80:06:e0:d2:16:c1:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:29 2026 GMT
            Not After : May 24 06:28:29 2027 GMT
        Subject: CN=1F462466EF00748DBE03D2BD8A40F9EEE5FFA7EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:23:83:0f:aa:21:9e:a9:c1:32:ff:2d:03:61:
                    b9:21:0a:28:4d:a2:5d:37:87:7c:06:d7:c0:c7:35:
                    b5:28:0e:b2:db:8e:eb:97:03:f3:98:7c:ef:06:5a:
                    dc:ca:a1:eb:5a:46:5b:35:ed:e5:47:08:45:3c:72:
                    2d:62:6d:fc:1d:c0:bc:08:5c:3d:d4:0e:28:a6:19:
                    3d:fb:8d:10:a1:25:e3:56:36:8f:c6:e6:cd:b4:68:
                    93:31:7a:73:47:ed:5c:ee:1c:73:b1:54:fb:20:e8:
                    a8:05:33:08:e7:a6:23:f1:71:00:92:6f:13:f1:08:
                    14:da:cb:e8:5e:af:43:47:71:22:2f:82:aa:3a:46:
                    54:0c:bb:90:85:4e:50:99:83:db:c8:91:bd:e0:93:
                    0f:ba:4a:35:be:05:ee:85:89:05:fd:79:df:17:a0:
                    40:69:5d:3a:99:21:d6:84:a1:ba:bc:da:1b:45:d3:
                    9b:49:f8:b7:fd:67:67:09:69:4c:c8:60:72:66:66:
                    c7:2c:0c:7f:1f:a6:19:27:7a:b7:67:f3:ce:14:05:
                    b2:db:ad:a9:6c:04:72:11:79:3a:da:1b:a5:46:86:
                    22:f3:40:91:c5:ab:6d:cc:5f:24:58:62:85:a5:f1:
                    dd:a2:4e:dd:bc:40:12:55:af:ba:4e:11:e0:82:5c:
                    8f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:46:24:66:EF:00:74:8D:BE:03:D2:BD:8A:40:F9:EE:E5:FF:A7:EE
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144761.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a83f::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:53:46:3b:0e:83:7e:bd:be:12:3e:67:8c:ec:00:43:26:82:
         9e:3f:2e:aa:66:5f:66:10:b6:fd:a7:e2:a0:4b:b3:2f:7b:04:
         21:6d:d6:7d:26:fe:78:4d:5d:ad:34:5c:41:64:9b:34:2a:70:
         58:4e:fd:78:ff:da:26:47:c0:3b:bc:2d:cb:c5:c7:09:c8:9c:
         e5:56:0a:75:f4:d4:70:eb:1a:9f:ee:be:e6:ad:bf:04:be:d5:
         8d:5f:2f:aa:b7:92:48:7c:cd:fa:20:6f:a5:6e:86:e2:52:d0:
         10:dd:36:64:0a:e1:5a:96:d0:60:c9:13:a4:9d:3a:66:48:41:
         a9:ca:ec:e8:e1:20:25:e6:3f:f6:bc:f2:f4:06:1c:8e:4c:6a:
         4e:36:85:dd:69:b0:49:01:c5:82:b2:e9:aa:1a:a7:e7:9d:cb:
         8b:d4:97:09:b5:81:0d:c1:14:86:09:86:5f:5a:d7:f5:88:03:
         de:73:47:48:5c:8e:86:fb:08:1a:eb:ae:3a:3a:4e:56:99:23:
         d4:41:19:10:1b:f6:a7:52:3e:89:c7:15:21:6c:f2:00:82:75:
         6f:e5:a8:c1:fe:fc:9f:61:21:f3:53:c4:85:04:44:de:74:6b:
         26:c5:e8:cb:8f:36:71:e6:c4:c6:cb:df:2d:df:32:25:1f:6f:
         7a:32:94:56
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUJKErFESJ6n7PLLSn9oAG4NIWwakwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjIzMjlaFw0yNzA1MjQwNjI4MjlaMDMxMTAvBgNV
BAMTKDFGNDYyNDY2RUYwMDc0OERCRTAzRDJCRDhBNDBGOUVFRTVGRkE3RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3I4MPqiGeqcEy/y0DYbkhCihN
ol03h3wG18DHNbUoDrLbjuuXA/OYfO8GWtzKoetaRls17eVHCEU8ci1ibfwdwLwI
XD3UDiimGT37jRChJeNWNo/G5s20aJMxenNH7VzuHHOxVPsg6KgFMwjnpiPxcQCS
bxPxCBTay+her0NHcSIvgqo6RlQMu5CFTlCZg9vIkb3gkw+6SjW+Be6FiQX9ed8X
oEBpXTqZIdaEobq82htF05tJ+Lf9Z2cJaUzIYHJmZscsDH8fphknerdn884UBbLb
ralsBHIReTraG6VGhiLzQJHFq23MXyRYYoWl8d2iTt28QBJVr7pOEeCCXI97AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUH0YkZu8AdI2+A9K9ikD57uX/p+4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NzYxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqoPzANBgkqhkiG9w0BAQsFAAOCAQEARFNG
Ow6Dfr2+Ej5njOwAQyaCnj8uqmZfZhC2/afioEuzL3sEIW3WfSb+eE1drTRcQWSb
NCpwWE79eP/aJkfAO7wty8XHCcic5VYKdfTUcOsan+6+5q2/BL7VjV8vqreSSHzN
+iBvpW6G4lLQEN02ZArhWpbQYMkTpJ06ZkhBqcrs6OEgJeY/9rzy9AYcjkxqTjaF
3WmwSQHFgrLpqhqn553Li9SXCbWBDcEUhgmGX1rX9YgD3nNHSFyOhvsIGuuuOjpO
Vpkj1EEZEBv2p1I+iccVIWzyAIJ1b+Wowf78n2Eh81PEhQRE3nRrJsXoy482cebE
xsvfLd8yJR9vejKUVg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:08 2026 by rpki-client