Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144837.roa
File:                     AS144837.roa (raw, json)
Hash identifier:          Y1Mp5KNENBn9SJOctwVRwrDdoDy52oOG3K9QHcY9xnM=
Subject key identifier:   5B:7D:0B:D1:46:DD:82:D5:E0:1C:38:E9:21:95:A1:08:BC:26:CC:56
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6A49C9DDF98D96B7281D303AA7DC8E92B0FA2BED
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144837.roa
Signing time:             Tue 26 May 2026 03:16:50 +0000
ROA not before:           Tue 26 May 2026 03:11:50 +0000
ROA not after:            Tue 25 May 2027 03:16:50 +0000
asID:                     144837
IP address blocks:        240a:a88b::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:49:c9:dd:f9:8d:96:b7:28:1d:30:3a:a7:dc:8e:92:b0:fa:2b:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:11:50 2026 GMT
            Not After : May 25 03:16:50 2027 GMT
        Subject: CN=5B7D0BD146DD82D5E01C38E92195A108BC26CC56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6c:ac:ce:d9:e1:40:c9:24:8f:d3:a1:12:a3:
                    5a:a9:ee:f0:04:1f:8e:48:aa:29:c7:1d:57:e5:35:
                    a8:1e:68:84:f7:c3:9d:10:6c:8e:99:66:e0:55:ef:
                    87:59:a2:ce:a9:f4:a9:7f:2f:b2:28:94:c2:d5:71:
                    ad:46:3f:45:0a:ce:06:7f:e2:c0:75:5a:b8:2d:da:
                    db:81:13:5c:a0:38:23:fd:e2:7b:c9:61:50:47:1e:
                    5c:eb:c7:e9:c8:3d:45:b0:e4:a9:02:1b:1f:2a:21:
                    70:0a:5a:db:90:22:41:c6:97:19:5b:47:40:d1:1e:
                    a8:0f:df:e9:97:cf:d6:69:58:19:61:cd:25:32:b8:
                    37:2c:89:0b:b9:48:4b:d9:d9:79:64:a6:64:2e:7a:
                    e1:ee:ae:9d:17:04:85:20:1b:be:fb:45:6b:ce:37:
                    74:17:d4:31:b9:80:4f:3c:d4:8e:a3:49:fb:7d:dc:
                    34:1b:af:e6:a6:9b:45:45:45:c9:93:0e:11:75:ae:
                    d3:40:d5:39:6e:1d:34:f7:0f:35:12:a3:91:e2:17:
                    cf:b1:72:ad:7b:5f:fc:ba:c6:d5:21:bb:e4:73:93:
                    d6:cc:58:82:c1:4a:4a:70:e3:5f:bf:f0:e9:67:57:
                    9d:8a:94:22:9e:d7:22:ce:f1:5f:54:7f:80:bc:52:
                    07:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:7D:0B:D1:46:DD:82:D5:E0:1C:38:E9:21:95:A1:08:BC:26:CC:56
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a88b::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:a1:01:87:9e:ad:57:5e:45:71:0d:db:a9:66:18:61:ba:3f:
         cd:38:3f:ba:e3:2b:2c:3c:99:f8:2f:c5:e4:19:0c:16:44:e3:
         c6:21:03:2e:5f:e0:be:99:f6:7b:60:0a:fe:f5:63:1a:8e:a4:
         75:da:b0:a0:54:de:ff:d2:b7:94:bf:2b:3a:23:b3:ae:2e:cf:
         31:3c:5c:da:b2:64:0f:12:25:8c:6c:61:03:80:4f:15:05:67:
         13:57:3b:7c:f8:f3:9b:24:82:ce:0a:dc:1e:cf:b5:40:2a:05:
         50:1d:c2:e1:4c:56:7d:4f:94:68:b8:cf:53:49:8b:67:0b:50:
         9e:25:67:f9:1f:81:ff:be:dc:35:6b:6f:04:8d:ee:21:0e:22:
         ce:0f:ed:72:9e:6b:97:36:3b:a8:2d:46:e7:91:6b:45:f4:89:
         38:23:31:a8:39:43:58:ae:c1:53:29:a4:8d:c8:3d:d1:ed:a8:
         6a:19:99:a6:b6:a6:51:9c:24:18:74:15:f8:4c:fb:2a:74:04:
         c5:0f:a1:ca:72:0c:05:61:9c:ac:f5:48:2e:bc:c3:0f:62:bc:
         d1:01:c9:5c:15:d9:20:f4:92:10:a0:03:d6:65:c3:15:b9:d9:
         9b:42:b1:60:6e:51:04:21:a2:1c:b7:3b:02:bb:16:cc:13:21:
         32:b5:1b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:39 2026 by rpki-client