Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144814.roa
File:                     AS144814.roa (raw, json)
Hash identifier:          g1FULGL54j2YpdPTUNNVJ685d26jZmbVaaHAkVyiiuY=
Subject key identifier:   76:A9:98:A0:2F:5E:10:C3:C7:8E:76:54:05:D4:68:F6:24:6C:67:07
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4B51F821DC691E1B1687CF04FBD8E0A99D28443D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144814.roa
Signing time:             Fri 22 May 2026 06:27:55 +0000
ROA not before:           Fri 22 May 2026 06:22:55 +0000
ROA not after:            Fri 21 May 2027 06:27:55 +0000
asID:                     144814
IP address blocks:        240a:a874::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:51:f8:21:dc:69:1e:1b:16:87:cf:04:fb:d8:e0:a9:9d:28:44:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:22:55 2026 GMT
            Not After : May 21 06:27:55 2027 GMT
        Subject: CN=76A998A02F5E10C3C78E765405D468F6246C6707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5d:c7:02:bf:24:44:c5:2e:dc:0d:36:f6:0c:
                    06:dd:f9:da:10:77:3d:27:34:85:ae:1c:f5:ee:e7:
                    64:53:a4:f7:1f:60:3f:2b:c5:31:12:88:93:ff:1f:
                    ca:d2:65:0d:6a:63:cd:3d:99:b9:30:8c:3f:3c:1a:
                    7f:0e:0d:32:0c:da:ac:34:f4:49:6c:e4:be:ea:8a:
                    1c:49:02:d5:54:58:b3:8c:51:a2:ad:39:de:8b:3c:
                    0b:cd:6d:3f:a2:35:28:35:a1:fb:f4:72:e8:29:55:
                    d4:07:88:1b:8e:5c:a2:89:94:25:ff:5d:32:14:f0:
                    08:c2:27:0a:08:9c:3b:46:f1:33:a5:c2:87:e5:4c:
                    1c:4a:a6:41:d6:10:29:a2:6d:2d:27:ce:e2:4e:c2:
                    66:c5:28:ee:ee:9e:a4:57:59:b2:7e:b7:fc:2a:b6:
                    c2:6e:41:d7:a5:ea:a5:85:70:6d:62:47:5c:d5:b5:
                    7d:4e:64:e6:67:8c:76:54:7d:2e:21:c5:83:24:2b:
                    97:dc:71:83:75:a6:9d:70:1c:cf:5f:b5:1e:6d:60:
                    85:6e:3a:ba:ba:24:3d:ee:0b:60:44:cc:06:89:9b:
                    ce:a6:13:8d:0c:b6:e7:2a:79:49:00:8d:4f:27:05:
                    db:7d:86:38:e8:45:e7:c9:04:e6:75:6f:cb:cd:a0:
                    a5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A9:98:A0:2F:5E:10:C3:C7:8E:76:54:05:D4:68:F6:24:6C:67:07
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144814.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a874::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:dd:0e:29:32:de:56:53:53:70:7c:42:de:70:3c:04:02:47:
         c0:bd:42:a2:3c:db:a2:09:4f:a6:b3:91:1a:f1:44:55:32:c4:
         8b:6f:23:38:7d:65:f2:e8:a8:97:ff:d1:e1:05:06:00:25:ab:
         e6:39:18:60:9d:dd:d0:43:e0:46:2d:fa:c6:43:f8:01:14:86:
         9e:97:27:70:26:5a:ea:5e:fb:35:07:dc:1b:b4:1b:25:bf:24:
         86:5e:50:43:a5:8b:4e:5e:d7:29:fe:d2:3d:7f:af:20:f5:ca:
         0d:16:21:71:ac:1f:b9:c9:75:e5:39:44:80:d9:8b:1b:06:9b:
         10:ee:e9:b4:47:36:02:5d:d3:79:da:7f:a8:bd:f9:17:37:18:
         6a:7d:93:33:30:1b:30:45:59:51:4c:36:84:4f:1f:b4:89:e5:
         5b:b3:fa:c7:65:f2:c0:11:6e:68:cd:55:61:f6:50:6d:5e:5f:
         69:d4:f8:4d:db:cb:2c:c2:43:e2:65:60:d5:6d:76:ec:ae:71:
         c8:37:03:c0:74:27:5e:d2:06:09:61:c9:92:c1:44:ac:1b:74:
         80:0e:c2:3b:29:38:a0:7a:f5:74:74:73:5f:43:fe:2d:1d:5b:
         4a:ee:ce:97:df:27:1a:c7:cb:56:98:65:9f:68:0d:0f:e4:f3:
         9d:c3:29:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:46 2026 by rpki-client