Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144812.roa
File:                     AS144812.roa (raw, json)
Hash identifier:          nqakFymOIXQCLtqB3ijrHOf49TUZJ20Pyt/K4SY7jtA=
Subject key identifier:   0B:02:09:B8:25:2F:B6:80:35:72:DF:9D:B1:3F:1E:05:72:53:0B:CB
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       089F22BB51C571D7346306683D01BFE3EFFB1DF6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144812.roa
Signing time:             Mon 25 May 2026 03:19:45 +0000
ROA not before:           Mon 25 May 2026 03:14:45 +0000
ROA not after:            Mon 24 May 2027 03:19:45 +0000
asID:                     144812
IP address blocks:        240a:a872::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:9f:22:bb:51:c5:71:d7:34:63:06:68:3d:01:bf:e3:ef:fb:1d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:45 2026 GMT
            Not After : May 24 03:19:45 2027 GMT
        Subject: CN=0B0209B8252FB6803572DF9DB13F1E0572530BCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5b:73:95:f8:a2:b6:04:ef:93:56:42:cd:7d:
                    6d:92:c9:e5:70:bd:4d:e8:5b:03:a0:3b:2a:a6:c1:
                    73:e7:14:29:92:4f:18:c7:85:8d:09:1a:4c:cd:48:
                    a2:a3:01:77:da:0a:55:e5:5e:14:ac:ee:30:95:c5:
                    89:88:d9:61:f9:86:92:29:64:14:c2:f2:5f:c9:6d:
                    bf:e9:61:14:e1:00:e6:95:5d:5b:e7:1c:a2:e0:4b:
                    b1:75:5c:9c:07:c3:0d:b4:43:59:bd:3e:bd:64:a4:
                    32:ef:b4:1d:78:87:5c:30:82:6b:0a:f1:38:bc:c3:
                    c8:63:46:0d:06:cf:c1:10:7e:2b:c4:75:a1:1e:c3:
                    bc:1f:96:ba:08:d9:00:a4:24:ff:fc:76:6c:51:ca:
                    4a:82:f6:7e:b8:6b:f2:82:2c:00:6a:b9:c7:ad:22:
                    ab:0b:a8:1f:71:48:42:b9:93:c9:ef:11:ed:96:a3:
                    63:d5:a6:d1:60:60:2d:11:48:fb:ca:72:d6:ff:a6:
                    51:17:98:aa:12:f2:4c:54:64:64:d2:90:25:a7:5e:
                    7c:ed:e8:08:e5:54:69:3a:81:ea:55:c6:22:1b:a2:
                    f3:db:83:d8:0f:db:09:e4:1a:a4:24:72:d5:4f:34:
                    ef:ab:3e:56:db:87:f8:fe:68:b5:6a:24:ab:68:f3:
                    05:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:02:09:B8:25:2F:B6:80:35:72:DF:9D:B1:3F:1E:05:72:53:0B:CB
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144812.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a872::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:97:7e:43:33:18:a7:96:5f:a7:1d:ce:d7:ec:bb:21:00:17:
         c4:ba:cd:1b:29:c3:5e:4e:e9:c8:da:8f:40:95:6a:2a:f4:a7:
         d8:c8:16:1a:ac:b2:63:39:e1:71:b6:69:a4:59:6d:71:64:6d:
         06:35:de:a1:77:32:d3:47:68:e1:ee:ae:80:ce:db:6c:8d:7f:
         d1:84:80:50:91:e4:26:f7:6c:c2:d7:86:bd:8b:16:30:2e:f8:
         32:ba:50:80:b0:10:bd:fa:5c:43:2e:00:a7:82:35:11:57:c5:
         79:34:c5:40:ba:a2:87:74:03:97:0a:4c:4b:f4:a7:f0:aa:e1:
         73:04:65:12:92:ba:d6:cc:94:63:2f:43:1a:28:50:07:be:c3:
         4c:99:d7:91:02:09:9f:91:cb:89:cc:32:d4:81:ba:e8:5b:40:
         a9:90:c0:a8:57:9e:ca:c9:54:8e:0f:41:25:f8:20:58:bd:b4:
         58:c3:9c:32:33:b8:44:58:ee:1d:9c:df:ba:1e:99:12:e8:d6:
         86:57:46:23:a1:48:64:f2:83:2f:8c:13:2b:7f:a5:8e:2e:0a:
         ae:46:e4:0e:9e:ba:5b:07:6f:92:36:d1:03:eb:f1:6e:2a:19:
         93:87:7f:6c:4a:79:ed:60:59:c5:b5:74:16:c1:c6:41:21:68:
         c4:48:85:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:13 2026 by rpki-client