Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144778.roa
File:                     AS144778.roa (raw, json)
Hash identifier:          3pQaw4JuyyX4Q5iKa5Fh0Jpli7jiEeg1JjSuFZfR4IM=
Subject key identifier:   95:BE:F3:34:41:A3:A3:6E:67:20:A2:F0:4F:5E:8F:23:33:E8:8C:8B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       294261A4A20A937BE58B271F019876FC849149E8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144778.roa
Signing time:             Fri 22 May 2026 04:27:11 +0000
ROA not before:           Fri 22 May 2026 04:22:11 +0000
ROA not after:            Fri 21 May 2027 04:27:11 +0000
asID:                     144778
IP address blocks:        240a:a850::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:42:61:a4:a2:0a:93:7b:e5:8b:27:1f:01:98:76:fc:84:91:49:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:22:11 2026 GMT
            Not After : May 21 04:27:11 2027 GMT
        Subject: CN=95BEF33441A3A36E6720A2F04F5E8F2333E88C8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2d:73:e3:91:41:f2:d3:84:67:18:32:ce:51:
                    e6:c0:15:39:08:18:42:fe:3e:10:1e:e7:e5:fd:a1:
                    76:9e:3c:a4:4d:20:81:f5:8e:e1:2c:4c:d0:8f:f3:
                    ea:ce:87:6f:a0:ad:8c:e6:ab:ca:33:04:f8:f2:34:
                    62:e6:94:e7:ef:72:f2:0a:11:89:52:e7:d7:5b:91:
                    21:6e:3a:cf:83:28:49:eb:3d:29:92:2d:09:12:66:
                    13:3c:49:19:03:b2:da:6a:ce:ef:cc:e6:2a:b3:b7:
                    2a:86:87:32:93:67:ce:fe:11:44:80:ab:ad:cc:82:
                    a9:da:84:17:6a:63:32:c0:bf:65:55:d3:f3:de:f1:
                    a9:51:7d:b8:25:63:8c:df:37:45:a9:ce:c0:57:73:
                    c4:86:c3:dc:07:04:88:3b:91:eb:5f:c8:9d:cf:74:
                    91:2f:68:c0:6a:45:94:34:67:03:a1:5e:74:5f:00:
                    7c:22:4e:31:bf:cf:47:73:af:e0:ac:3b:91:8f:36:
                    41:3c:ea:6f:49:f3:0a:fd:af:e4:d1:bc:15:db:8c:
                    9d:01:57:0d:4d:9f:bb:47:f9:f6:30:58:2e:fd:c6:
                    4d:b3:48:a2:37:4f:95:b1:a7:93:a6:7a:05:fa:bd:
                    95:2c:d3:62:7b:38:2c:c0:a1:b5:a7:51:fb:54:c7:
                    ec:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:BE:F3:34:41:A3:A3:6E:67:20:A2:F0:4F:5E:8F:23:33:E8:8C:8B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144778.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a850::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:47:b4:f9:2e:23:25:ad:90:db:9b:76:7e:9a:f4:68:ac:33:
         b3:72:0b:e7:19:ea:d6:4f:f6:98:74:be:19:8d:e6:26:dd:93:
         6a:7d:0b:c4:26:05:35:41:fa:1f:0e:43:7f:fb:c4:1b:87:18:
         a9:9d:3d:98:6b:ad:bf:45:04:dd:9d:48:9e:86:e3:41:16:56:
         ee:ac:18:23:fa:9e:92:13:56:b4:cd:48:63:75:6b:64:81:68:
         39:38:f0:a8:1f:51:b7:39:57:3b:7c:c1:58:4e:f4:82:72:68:
         2e:6a:56:ca:2b:28:14:ed:b2:cb:89:67:e7:51:4b:c5:e1:83:
         ee:7e:3e:2f:f9:4b:0c:2b:df:1a:a2:b2:08:17:b9:44:82:cb:
         b6:08:ee:8d:42:30:ce:a8:5e:22:32:55:b2:8f:96:ac:48:93:
         96:da:ab:60:d0:ae:02:48:32:82:c2:fc:34:e7:7c:a6:8b:14:
         d6:1b:6a:27:f2:7a:73:34:f6:bd:99:2f:05:f9:95:fb:cf:2a:
         63:e2:29:7c:c6:8e:36:47:dc:02:34:da:66:d5:96:d3:0e:e4:
         77:72:50:23:62:07:8d:5f:aa:4b:b0:80:dd:94:9a:4b:7b:e2:
         c9:81:42:69:6c:8f:ee:34:6f:61:8f:6a:2d:d9:0d:19:bf:b6:
         6f:4e:7e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:19 2026 by rpki-client