Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144785.roa
File:                     AS144785.roa (raw, json)
Hash identifier:          XL+4D4f+2bOyRkx6PQjSwLBMazlH1tXEFYGHuv3rcG0=
Subject key identifier:   0B:5E:82:4F:4C:D4:82:31:28:E1:20:11:97:F9:8A:A7:66:D0:0A:98
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5A4F66EDCD95261798303940FE82AACE7BAA480E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144785.roa
Signing time:             Fri 22 May 2026 07:08:44 +0000
ROA not before:           Fri 22 May 2026 07:03:44 +0000
ROA not after:            Fri 21 May 2027 07:08:44 +0000
asID:                     144785
IP address blocks:        240a:a857::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:4f:66:ed:cd:95:26:17:98:30:39:40:fe:82:aa:ce:7b:aa:48:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:03:44 2026 GMT
            Not After : May 21 07:08:44 2027 GMT
        Subject: CN=0B5E824F4CD4823128E1201197F98AA766D00A98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:59:91:89:92:e3:3d:ed:0e:5a:1c:5a:5d:b4:
                    3d:72:b4:dc:46:d0:de:0e:cd:14:6c:8d:1e:06:4a:
                    5c:4c:9a:e7:de:55:d5:30:a5:2a:5f:44:10:d7:39:
                    0f:18:e5:8d:5e:6d:c0:80:bb:02:dc:14:8b:ac:5f:
                    9e:5f:ba:15:2e:29:a5:5b:4b:0c:66:92:2d:c9:80:
                    46:31:97:ad:5a:a3:c4:a4:46:11:42:39:ea:b3:2c:
                    de:68:a9:c3:36:7d:16:af:7f:ac:ab:13:22:f9:c9:
                    97:02:cb:cc:02:86:3f:e6:1f:35:d7:c4:db:bd:53:
                    88:05:f6:41:3b:6e:bf:b9:c7:f4:f3:3f:9a:ea:71:
                    44:45:f9:8e:5a:c3:3d:07:9d:7f:fc:d9:f6:e1:4b:
                    0c:26:9c:19:85:db:de:2d:fe:bc:90:5e:b7:42:d7:
                    4c:25:8f:03:6c:f2:59:3f:b0:e2:1a:98:ac:cd:8d:
                    6c:54:d5:32:8a:b5:f7:21:a6:c6:ef:95:69:b7:43:
                    e4:b9:6d:49:cf:7e:55:1b:86:15:43:a7:2c:f6:0b:
                    53:0c:a0:04:91:7b:11:bd:e0:f8:cf:1c:d4:3f:1a:
                    c7:93:4f:1c:a0:e2:b3:1b:09:26:e1:cc:c5:02:3c:
                    c7:12:24:df:54:0f:bf:79:c3:17:cc:13:c7:5b:3b:
                    d8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:5E:82:4F:4C:D4:82:31:28:E1:20:11:97:F9:8A:A7:66:D0:0A:98
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144785.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a857::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:32:21:7d:70:60:6d:69:45:cd:a5:37:24:82:57:a6:d3:00:
         22:39:d7:48:7c:41:28:5c:1b:2e:35:9a:87:bc:e0:90:a3:79:
         4c:74:be:1c:6a:3d:e7:d8:a2:dc:0c:f6:a3:64:2a:ac:2c:87:
         fe:25:8b:ed:c7:9d:26:5d:d9:2d:9d:e9:d7:03:eb:0d:70:fc:
         05:2c:37:00:fe:b9:46:ad:c6:d2:8f:b3:49:f8:d7:0d:7c:82:
         42:26:f6:96:fa:6d:dc:7c:1b:69:cd:74:c4:4f:f0:db:6d:c4:
         5e:2e:00:f2:be:98:ea:4a:79:44:8c:f5:84:5d:4b:ab:b2:b9:
         db:b1:e8:d5:c3:58:e0:26:fc:3c:6f:e0:8e:a3:bf:f9:e7:0d:
         97:da:82:b6:45:63:1e:48:ba:5c:02:ac:60:75:ab:02:6a:97:
         4a:c2:16:e3:07:5f:f0:69:18:dd:98:94:e7:49:f0:7d:b1:54:
         c5:2f:ca:68:64:14:0c:0f:51:66:a1:1d:d0:ae:c1:89:20:a2:
         ab:b0:0d:3b:a4:5c:98:64:98:81:03:b0:e6:a1:32:15:03:fb:
         b1:84:f8:61:7a:fc:6e:c6:5b:07:92:11:3b:2f:dd:97:55:3a:
         eb:d2:37:c3:70:08:66:cc:04:14:0b:0a:21:52:5a:5f:60:07:
         4c:c9:ba:16
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUWk9m7c2VJheYMDlA/oKqznuqSA4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzAzNDRaFw0yNzA1MjEwNzA4NDRaMDMxMTAvBgNV
BAMTKDBCNUU4MjRGNENENDgyMzEyOEUxMjAxMTk3Rjk4QUE3NjZEMDBBOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4WZGJkuM97Q5aHFpdtD1ytNxG
0N4OzRRsjR4GSlxMmufeVdUwpSpfRBDXOQ8Y5Y1ebcCAuwLcFIusX55fuhUuKaVb
Swxmki3JgEYxl61ao8SkRhFCOeqzLN5oqcM2fRavf6yrEyL5yZcCy8wChj/mHzXX
xNu9U4gF9kE7br+5x/TzP5rqcURF+Y5awz0HnX/82fbhSwwmnBmF294t/ryQXrdC
10wljwNs8lk/sOIamKzNjWxU1TKKtfchpsbvlWm3Q+S5bUnPflUbhhVDpyz2C1MM
oASRexG94PjPHNQ/GseTTxyg4rMbCSbhzMUCPMcSJN9UD795wxfME8dbO9gTAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUC16CT0zUgjEo4SARl/mKp2bQCpgwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0Nzg1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqoVzANBgkqhkiG9w0BAQsFAAOCAQEARTIh
fXBgbWlFzaU3JIJXptMAIjnXSHxBKFwbLjWah7zgkKN5THS+HGo959ii3Az2o2Qq
rCyH/iWL7cedJl3ZLZ3p1wPrDXD8BSw3AP65Rq3G0o+zSfjXDXyCQib2lvpt3Hwb
ac10xE/w223EXi4A8r6Y6kp5RIz1hF1Lq7K527Ho1cNY4Cb8PG/gjqO/+ecNl9qC
tkVjHki6XAKsYHWrAmqXSsIW4wdf8GkY3ZiU50nwfbFUxS/KaGQUDA9RZqEd0K7B
iSCiq7ANO6RcmGSYgQOw5qEyFQP7sYT4YXr8bsZbB5IROy/dl1U669I3w3AIZswE
FAsKIVJaX2AHTMm6Fg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:04 2026 by rpki-client