Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144808.roa
File:                     AS144808.roa (raw, json)
Hash identifier:          3uFigogvtf2w/it1Xvme18bhqe6O8ZWd615N90yQPUY=
Subject key identifier:   AB:62:80:FA:00:7C:69:5D:16:42:1B:2F:C5:07:C3:E9:DE:16:03:04
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7F3B4F0DD71441560558D496BC917501A0B86C08
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144808.roa
Signing time:             Mon 25 May 2026 03:19:40 +0000
ROA not before:           Mon 25 May 2026 03:14:40 +0000
ROA not after:            Mon 24 May 2027 03:19:40 +0000
asID:                     144808
IP address blocks:        240a:a86e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:3b:4f:0d:d7:14:41:56:05:58:d4:96:bc:91:75:01:a0:b8:6c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:40 2026 GMT
            Not After : May 24 03:19:40 2027 GMT
        Subject: CN=AB6280FA007C695D16421B2FC507C3E9DE160304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4c:74:64:5b:aa:55:9f:41:27:29:eb:47:9e:
                    0f:f5:bb:1f:b4:03:33:d8:f9:b9:0a:a4:18:b3:b7:
                    8d:bc:ee:1a:af:0e:ae:38:70:c9:b1:90:af:55:95:
                    7b:33:7c:a5:69:b8:13:58:2e:7e:4e:40:f5:db:00:
                    d5:14:a7:89:31:bb:42:bd:85:8a:4b:ff:59:e2:9f:
                    5e:21:e5:08:b8:b9:a7:a5:64:cf:7b:7f:3a:48:2b:
                    ff:1d:a3:70:ff:31:cc:d0:b0:4e:d9:a8:fc:37:d6:
                    61:54:23:2d:a1:0a:c4:ee:17:ba:94:1e:15:b1:e6:
                    99:26:9c:07:c4:a6:98:a4:4d:a5:c6:56:77:9b:8a:
                    19:19:45:80:6b:17:b9:35:25:06:bd:5b:4a:cd:d1:
                    7d:ac:54:5d:47:84:a7:1e:84:ac:21:66:2b:6d:ca:
                    53:2f:e6:92:d5:60:32:05:f7:3e:7a:20:c6:b7:4b:
                    72:fb:31:98:f1:e7:c5:3c:af:33:1d:9f:0b:9b:79:
                    aa:04:25:1b:27:4a:17:61:1e:cf:64:da:78:0d:49:
                    a8:15:61:6f:35:64:05:e9:b8:a6:02:e2:87:3e:39:
                    91:9e:f7:3d:b4:24:e4:e5:2a:d7:7e:6f:f4:28:e8:
                    dc:ff:dc:14:c8:16:c9:c9:fc:d7:f0:af:df:1a:ac:
                    c6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:62:80:FA:00:7C:69:5D:16:42:1B:2F:C5:07:C3:E9:DE:16:03:04
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144808.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a86e::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:7d:a4:52:f6:91:c8:e7:29:4f:89:41:01:ec:0a:98:bc:ed:
         94:b0:f4:c4:0a:30:9f:76:ce:f2:8b:00:c2:5d:15:01:6f:8f:
         02:f7:9c:70:3e:e9:97:10:a3:56:6a:71:80:59:56:4b:2c:f8:
         90:7c:b0:5d:fb:f0:22:26:24:4d:7d:2b:1a:1f:44:ea:9f:7e:
         8d:86:c5:a3:04:1e:13:97:5d:4a:cc:3f:f7:e9:4d:dd:2a:44:
         22:06:e0:37:9c:6f:86:15:ea:68:a2:28:73:1c:5c:79:f7:c2:
         3a:a1:e1:f2:ea:de:8c:5c:72:9a:59:5a:e7:47:f7:bf:9a:08:
         ce:fe:b7:9a:5e:77:39:53:ec:4c:6e:98:76:e9:1a:53:e9:18:
         94:95:8a:a2:16:ce:09:00:d4:bd:44:5f:d9:7a:5a:f2:e4:af:
         f2:aa:4a:d5:7f:d5:c9:c7:65:6c:83:13:d5:21:97:ca:00:98:
         4e:c4:73:f3:ef:08:c4:bd:79:85:c9:a9:40:78:34:fb:a2:56:
         b2:23:0b:04:4d:3f:d3:79:97:a4:cd:1f:47:51:ef:21:e0:a2:
         cf:5d:ea:95:28:66:c4:79:33:ff:fd:2a:c2:34:c3:6e:2a:36:
         12:1f:f3:9b:b1:cc:5c:4b:c0:36:9d:76:2b:e3:3f:db:3d:dd:
         09:09:0b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:06 2026 by rpki-client