Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144762.roa
File:                     AS144762.roa (raw, json)
Hash identifier:          05/6J4jIfAwDLhSUCg80a109q5cNOTvqZTGrPfm7lX8=
Subject key identifier:   F6:64:F0:6D:78:65:1B:AD:C5:F5:4E:41:73:21:74:48:71:DC:2F:DE
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6E850F1ADE577127E692EE47148EB12D3C572D4E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144762.roa
Signing time:             Fri 22 May 2026 02:47:47 +0000
ROA not before:           Fri 22 May 2026 02:42:47 +0000
ROA not after:            Fri 21 May 2027 02:47:47 +0000
asID:                     144762
IP address blocks:        240a:a840::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:85:0f:1a:de:57:71:27:e6:92:ee:47:14:8e:b1:2d:3c:57:2d:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:42:47 2026 GMT
            Not After : May 21 02:47:47 2027 GMT
        Subject: CN=F664F06D78651BADC5F54E417321744871DC2FDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ac:7c:f9:04:ed:aa:06:7e:46:ad:fc:ca:b0:
                    e0:ef:82:ad:cc:4b:e5:09:1d:9a:d0:6b:c2:dc:ad:
                    72:85:d6:a8:44:34:f6:23:34:3e:6f:43:ee:44:c1:
                    91:6b:cc:12:68:3c:62:85:d5:79:4d:1e:c6:c0:ef:
                    52:26:ee:eb:06:44:c6:ac:03:0f:1d:1f:39:9b:3c:
                    14:c9:ca:f8:1b:ad:bd:c6:ce:ec:7b:1a:74:a6:45:
                    8a:0d:b7:58:8a:f8:b6:f5:aa:b8:d8:9c:8b:1b:2e:
                    ab:64:8b:3e:13:05:5b:84:67:81:b5:e6:8b:cb:f9:
                    6b:d5:59:7a:d2:57:1d:dc:0b:1e:3a:74:98:55:05:
                    32:61:7e:cb:8a:7f:df:60:75:e2:8e:16:47:c2:d3:
                    2f:1d:7b:d9:b0:35:38:8c:6d:76:8e:28:f6:51:7e:
                    23:f5:94:6a:58:c4:20:21:64:d2:a2:64:09:02:3a:
                    66:cc:d8:a4:6c:ee:cb:49:b8:02:27:5c:14:79:ec:
                    37:54:84:4d:76:e3:1a:09:39:e8:71:5d:d1:41:84:
                    65:1a:fb:d8:af:10:59:bd:16:17:79:f3:4c:b3:da:
                    45:63:2e:fd:38:be:5f:34:2b:4f:40:94:0b:54:4d:
                    42:63:bd:25:1b:1d:5f:57:ec:d3:27:62:0b:d9:fe:
                    cc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:64:F0:6D:78:65:1B:AD:C5:F5:4E:41:73:21:74:48:71:DC:2F:DE
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144762.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a840::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:06:6c:d2:ae:4c:49:e9:08:aa:b4:03:05:91:4a:52:9a:60:
         fa:4e:b3:31:02:37:10:96:57:8f:7a:39:66:34:01:1c:21:8a:
         ac:e2:ea:16:25:64:67:8e:75:5e:80:74:54:f0:07:49:9a:4a:
         80:21:fd:43:d4:07:c2:d8:f1:e7:b8:2b:94:8e:79:74:cd:24:
         0a:13:d1:92:af:35:ac:ed:4a:b6:2f:e8:cd:3e:59:31:35:e7:
         7b:ac:59:85:ba:9a:63:3f:09:63:84:9d:75:06:e3:f8:c2:8e:
         d1:01:87:bf:57:4e:d4:e1:57:d8:a7:50:20:6c:9b:1a:50:5a:
         fb:b0:e6:75:18:4d:95:d0:d2:dd:19:e2:cb:08:d6:e8:5d:50:
         d8:d9:9c:47:36:73:e5:5c:7d:d0:61:6d:c0:6d:d3:cc:be:68:
         94:a5:36:4a:18:77:1f:07:ce:81:c5:42:61:fd:2a:fe:79:f2:
         b6:ac:11:2a:5b:71:f7:73:0f:25:b4:f9:2a:28:d5:eb:32:cc:
         47:66:42:ce:50:8f:6f:80:cc:fe:f6:13:8b:cc:03:e4:ce:52:
         e6:20:72:b1:7e:30:22:0c:2e:44:ef:9b:ee:df:5a:8e:c1:30:
         8e:ca:5d:f6:8f:48:85:05:a9:c5:79:22:00:15:51:30:02:d5:
         2f:71:97:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:17 2026 by rpki-client