Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144801.roa
File:                     AS144801.roa (raw, json)
Hash identifier:          5mRwvLxE5FwE8J4jU7CgPcwT7CJSPQy7i8avrpqg0Gc=
Subject key identifier:   14:02:4C:0F:49:92:D8:3F:70:51:9D:C2:84:D4:EE:29:75:A6:11:1F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4D7F6F6A430779437E1156712F12964293525604
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144801.roa
Signing time:             Fri 22 May 2026 04:07:57 +0000
ROA not before:           Fri 22 May 2026 04:02:57 +0000
ROA not after:            Fri 21 May 2027 04:07:57 +0000
asID:                     144801
IP address blocks:        240a:a867::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:7f:6f:6a:43:07:79:43:7e:11:56:71:2f:12:96:42:93:52:56:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:02:57 2026 GMT
            Not After : May 21 04:07:57 2027 GMT
        Subject: CN=14024C0F4992D83F70519DC284D4EE2975A6111F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c8:05:cf:5e:74:35:35:d1:cc:a5:e4:7b:c8:
                    32:08:29:64:dd:9d:93:8d:df:c1:24:bf:93:b9:8d:
                    2d:db:7a:b4:be:99:32:28:a3:cb:74:c8:3f:00:c6:
                    aa:3d:b5:cc:cd:f7:10:35:a6:d8:bd:26:70:f6:66:
                    8a:df:8c:ad:40:52:de:b5:ac:24:07:9b:7e:fb:3f:
                    76:ca:1f:b7:ce:82:e9:8f:2a:26:36:4c:73:bd:32:
                    24:b6:5c:b6:64:5f:1c:b0:0c:8b:ca:a4:2d:06:d4:
                    93:45:32:9b:65:c0:49:9c:a7:ab:7b:c5:6f:08:17:
                    99:7f:74:45:c8:0f:2f:d5:58:05:ac:84:de:d7:52:
                    4b:29:fc:54:7f:af:2f:96:52:8c:34:4f:ea:16:4d:
                    a0:05:bf:e5:85:1e:50:c0:5f:7a:f5:84:2e:49:7e:
                    f9:1b:bd:16:c5:d9:13:1e:e9:e7:b5:4b:bb:79:cd:
                    3a:6c:33:d8:b4:e7:1e:58:9b:a3:0b:20:c3:0d:64:
                    73:2b:11:66:f6:fa:fe:50:92:a7:4e:6f:9f:9d:0a:
                    12:2f:26:70:b0:c3:3d:9b:6d:c0:71:cc:14:01:af:
                    2b:1b:22:ea:6e:97:ae:ba:12:f5:78:21:d9:37:43:
                    ce:55:8c:f8:da:49:fc:76:c8:ba:fb:99:4e:02:6e:
                    ac:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:02:4C:0F:49:92:D8:3F:70:51:9D:C2:84:D4:EE:29:75:A6:11:1F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144801.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a867::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:07:aa:20:83:98:37:ea:3a:02:3e:3f:de:29:01:52:ab:78:
         cc:bc:76:93:1e:d5:c1:b3:d7:d2:47:27:6f:44:ed:20:96:e0:
         dc:b1:34:00:a5:96:71:bc:c4:6a:99:ac:f6:4a:e7:c0:8b:7e:
         40:56:d9:67:3d:3e:0a:33:85:88:ae:94:e7:8b:27:a9:9a:2a:
         9e:62:6a:7a:61:e9:e0:08:f9:0a:3e:f1:94:00:e2:1a:26:9c:
         a3:79:80:97:9a:cb:9f:be:1e:93:e0:2e:95:7f:19:dc:0f:f9:
         60:2b:c8:92:ef:34:27:f1:98:a6:fb:71:2d:b9:53:fd:22:fb:
         58:9d:57:e4:66:5f:35:f9:f8:c4:20:52:76:a8:77:a8:d9:4c:
         c9:ae:19:54:10:fd:a6:bb:ce:15:8e:1f:bd:3e:4e:ef:37:16:
         03:f1:71:bc:e0:e2:80:de:16:d2:45:10:fc:f5:47:c2:cd:94:
         96:40:ad:3f:7b:9c:ef:56:79:f8:f8:8b:52:65:18:25:78:77:
         28:12:81:91:c9:3f:92:bb:fc:2c:41:8c:d1:17:4d:da:7d:b5:
         30:b4:9f:59:e7:e0:b1:a3:b7:6a:1d:ac:44:fb:9f:a9:e2:ea:
         7c:b9:c5:a0:10:a1:fa:7a:3a:c0:cc:79:84:cb:4f:bc:be:04:
         cc:70:df:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:51:01 2026 by rpki-client