Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144763.roa
File:                     AS144763.roa (raw, json)
Hash identifier:          KvJIa7Gb8jAfnRl9+8Nx2TYa0xwYyuMpWrv+6sNW+Vg=
Subject key identifier:   18:17:B5:BF:68:AB:CF:CB:EE:BE:DD:1C:51:49:83:D8:47:97:E5:4E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7A7C641C51EB1BC289037445560D40A983EA3F08
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144763.roa
Signing time:             Fri 22 May 2026 06:05:37 +0000
ROA not before:           Fri 22 May 2026 06:00:37 +0000
ROA not after:            Fri 21 May 2027 06:05:37 +0000
asID:                     144763
IP address blocks:        240a:a841::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:7c:64:1c:51:eb:1b:c2:89:03:74:45:56:0d:40:a9:83:ea:3f:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:00:37 2026 GMT
            Not After : May 21 06:05:37 2027 GMT
        Subject: CN=1817B5BF68ABCFCBEEBEDD1C514983D84797E54E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:90:84:5a:f0:f2:cf:c9:d5:9d:a7:cd:89:5c:
                    a6:a2:e5:21:7c:77:a3:c8:5f:0d:0b:e0:02:23:f4:
                    71:b5:c9:0f:03:07:d0:8c:9f:46:04:30:67:fd:ea:
                    29:2e:37:f9:b0:dd:e5:6a:fa:b0:7c:26:5b:cd:f8:
                    53:40:2b:12:bb:aa:e2:a3:19:fb:78:ae:dc:9a:f5:
                    c0:ac:3a:98:07:e0:47:bc:67:a8:bd:c6:a6:b8:82:
                    9f:de:bf:04:71:a3:3e:dc:e1:d0:a6:66:b9:24:2f:
                    7c:66:df:11:d2:c1:00:03:9e:b4:44:24:43:e3:be:
                    f4:1a:76:02:12:ce:b1:3d:7e:80:07:b1:e2:36:c1:
                    de:fc:0d:eb:5f:31:3d:3b:d6:f2:6a:dc:65:80:43:
                    c0:db:31:a1:3e:c1:77:4b:77:14:d0:d1:ea:d2:95:
                    3d:18:43:89:01:2f:bf:64:a2:9a:0e:22:d4:fa:23:
                    46:17:74:00:4e:4b:db:de:e4:41:a9:ba:11:0f:58:
                    38:45:47:88:06:d9:2a:3e:9e:49:cd:f1:04:c8:a7:
                    d3:f2:7e:9c:84:36:a7:19:1a:a0:4d:04:63:b3:b8:
                    57:dd:af:94:e2:2d:40:e8:3a:25:47:94:d6:38:98:
                    0c:41:65:f0:bf:ce:b9:c2:a4:f6:8d:cd:43:3a:2d:
                    f6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:17:B5:BF:68:AB:CF:CB:EE:BE:DD:1C:51:49:83:D8:47:97:E5:4E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144763.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a841::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:4e:46:72:0c:36:7b:ff:72:22:e9:d7:e4:fb:8c:37:5c:c1:
         4d:38:1a:18:c1:8e:1c:7a:e2:09:67:98:ce:ee:86:3d:2a:c5:
         bc:cd:13:52:e0:34:76:f1:34:c2:5d:f5:06:08:91:36:49:37:
         d1:5b:07:8a:fe:6f:e6:97:82:a7:bc:d3:10:e8:6d:b6:c7:45:
         ca:4f:7d:83:05:5a:04:08:d1:62:f1:30:f8:ba:cd:c5:0a:46:
         8f:e8:a8:ac:5e:38:a1:52:99:af:e5:43:b9:17:3a:43:1e:07:
         a8:78:dd:49:a4:ed:ae:e4:8a:a0:62:05:b6:c9:63:3a:77:c8:
         35:d1:d0:72:8c:55:66:8e:c3:f1:b0:c5:4a:35:77:85:43:cf:
         73:2b:a0:33:ee:39:3d:da:95:b5:f1:06:14:46:06:ac:02:64:
         d6:8a:6e:0b:db:74:36:43:84:1c:ae:c0:5f:aa:9d:89:ac:c4:
         82:fe:32:85:d7:2b:75:94:e2:4b:c7:2e:79:32:c7:38:d6:a2:
         ac:81:20:90:60:88:94:94:9a:0b:e9:36:36:79:6e:3f:b1:2a:
         a1:a0:22:72:62:ea:d4:a5:1d:49:27:da:b8:25:25:92:79:68:
         ad:23:e6:fa:80:9a:64:5e:3b:89:fd:6d:00:1a:46:2f:f5:af:
         8d:f6:8f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:07 2026 by rpki-client