Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144845.roa
File:                     AS144845.roa (raw, json)
Hash identifier:          SWJrblwmneRiMUALU5pGhfroGaeLpe+f8mRdJpZetz8=
Subject key identifier:   B5:B5:AF:C5:0C:EA:31:97:7A:62:BF:B4:BC:6E:E0:61:39:65:38:3F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       56B67D266C7CEA1E6EA52FC8766CEA734AB546A7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144845.roa
Signing time:             Fri 22 May 2026 07:24:51 +0000
ROA not before:           Fri 22 May 2026 07:19:51 +0000
ROA not after:            Fri 21 May 2027 07:24:51 +0000
asID:                     144845
IP address blocks:        240a:a893::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b6:7d:26:6c:7c:ea:1e:6e:a5:2f:c8:76:6c:ea:73:4a:b5:46:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:19:51 2026 GMT
            Not After : May 21 07:24:51 2027 GMT
        Subject: CN=B5B5AFC50CEA31977A62BFB4BC6EE0613965383F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:df:9b:86:be:73:e4:00:fd:ae:a5:50:79:31:
                    f3:0a:e7:76:17:54:45:93:af:32:66:6b:cf:c0:19:
                    52:2e:6d:09:17:12:fb:b0:2a:bc:fe:68:ec:4a:64:
                    3f:a0:bb:1b:89:de:87:90:94:89:e6:f1:eb:54:7c:
                    b4:a0:cb:fd:42:d1:a2:a0:98:c9:fb:3d:71:94:e2:
                    62:17:27:cb:4c:f8:d8:11:b6:1e:91:14:01:d7:f2:
                    8f:fc:64:93:ce:cd:dd:c6:26:3a:08:69:89:5a:af:
                    56:e1:58:29:1a:22:4b:1e:8e:bf:ce:eb:59:fe:2a:
                    89:ee:04:34:d3:61:4c:6a:51:a0:f5:9e:aa:86:79:
                    ad:32:eb:9a:d4:b9:de:97:bd:92:f4:fc:a9:d8:6e:
                    e8:f2:de:b3:a7:b5:91:93:f3:92:14:38:10:13:86:
                    59:0b:14:96:e6:c7:1c:21:99:cb:73:42:2b:59:95:
                    bc:55:88:51:2e:43:69:4f:33:e9:34:81:32:4d:38:
                    09:47:ba:56:86:fa:65:82:5e:2d:82:38:ba:1e:1c:
                    06:b9:6b:dc:a6:e5:ef:00:b0:e0:f5:a8:73:2b:7f:
                    9e:24:7b:d3:c1:b6:9f:af:71:0f:71:ef:2d:95:59:
                    33:52:8c:11:88:e0:9f:25:fc:03:b3:1a:0c:4a:ce:
                    ed:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B5:AF:C5:0C:EA:31:97:7A:62:BF:B4:BC:6E:E0:61:39:65:38:3F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144845.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a893::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:d9:ee:8e:d9:e4:58:3d:cc:1c:92:b2:89:80:1f:6f:72:9b:
         a2:86:4c:b8:d2:6a:37:c4:dd:49:ab:e0:a0:ea:01:05:6a:85:
         86:f9:ef:f2:36:41:b9:70:cb:81:9f:cc:ba:51:8e:20:62:73:
         e0:53:ad:54:46:d9:00:ca:bb:ef:9b:27:fc:22:75:f4:84:1f:
         10:6f:f8:7b:39:a1:ed:16:6c:8e:8a:a2:eb:41:f4:a1:d2:81:
         8f:18:a6:96:c5:eb:d9:5f:80:c3:ce:0e:1e:22:ee:91:52:f6:
         b0:03:af:c1:6f:a3:9c:4a:cc:15:54:88:f8:89:8d:20:c5:84:
         e8:03:26:ca:17:db:e9:e7:05:af:02:f7:b0:0d:dc:f6:8c:85:
         a8:fd:df:fe:d2:ce:19:35:99:9f:23:ee:98:20:f5:80:c9:db:
         ec:35:6b:86:d0:37:4d:d8:51:e9:c4:ee:25:b5:fb:00:c8:f8:
         05:d6:e1:b8:a5:12:d4:12:3e:1e:fd:44:4c:b2:3e:f4:a9:c9:
         57:f7:1a:f1:de:94:08:53:f3:6f:43:d6:e9:40:2e:05:b8:a7:
         07:05:37:b4:e9:db:cb:8d:42:e9:3b:77:f3:64:f7:d4:9d:c5:
         8a:b7:14:b7:16:d7:84:d3:0e:46:f7:25:f5:ac:bf:d8:7e:78:
         74:d4:e0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:35 2026 by rpki-client