Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144848.roa
File:                     AS144848.roa (raw, json)
Hash identifier:          2/7ctg2SuiPFJU2SHSW7chN44E5UU1yqZcvt1YbU6+k=
Subject key identifier:   F3:24:B6:EE:59:FF:28:7D:EF:A9:D9:1B:27:19:5E:6F:2D:80:13:17
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       56CF5589DCD366AEB925A15355326F1C8B765045
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144848.roa
Signing time:             Fri 22 May 2026 06:58:23 +0000
ROA not before:           Fri 22 May 2026 06:53:23 +0000
ROA not after:            Fri 21 May 2027 06:58:23 +0000
asID:                     144848
IP address blocks:        240a:a896::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:cf:55:89:dc:d3:66:ae:b9:25:a1:53:55:32:6f:1c:8b:76:50:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:23 2026 GMT
            Not After : May 21 06:58:23 2027 GMT
        Subject: CN=F324B6EE59FF287DEFA9D91B27195E6F2D801317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:25:ec:59:1b:cd:cc:13:58:ce:4e:0d:80:2f:
                    20:1f:bd:b4:ee:93:33:b0:64:49:17:d6:4b:2a:bd:
                    38:b8:fe:db:d1:2a:df:74:d8:b6:16:41:63:b6:d5:
                    a7:47:c3:bf:1e:9d:5d:c3:c6:8f:58:78:c5:b2:cf:
                    52:4f:58:76:83:c1:b5:2f:a7:04:f5:ff:6c:06:bf:
                    82:f0:28:81:56:49:6e:f1:c6:71:ea:44:f0:b7:43:
                    bb:cb:eb:ce:07:d1:c4:67:ab:8b:2d:d2:be:af:e1:
                    9f:48:dc:28:22:81:0e:8d:11:b9:2a:1d:4d:85:5a:
                    7b:e6:09:a1:6f:1b:de:f3:ee:15:00:59:93:0d:dd:
                    87:1e:29:36:a4:c5:10:96:2b:d7:97:69:ef:c6:f0:
                    2f:24:6d:5f:bc:29:49:a9:42:e3:ab:f0:6a:72:01:
                    3b:77:84:b7:7f:1d:12:e7:7b:5f:a9:17:f3:83:df:
                    23:a5:05:06:4e:f0:65:28:ab:b6:75:69:2c:b5:b0:
                    4b:2d:d1:96:1b:0c:7a:8a:8e:5a:b4:f1:db:3f:fe:
                    f7:91:7d:94:fb:a9:dc:c4:b6:05:91:d8:38:a3:10:
                    32:c0:60:5f:9a:2f:a5:fd:e5:8d:fb:b3:b0:20:17:
                    d6:85:4b:c5:19:12:78:31:11:4e:ca:2d:1c:51:87:
                    9c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:24:B6:EE:59:FF:28:7D:EF:A9:D9:1B:27:19:5E:6F:2D:80:13:17
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144848.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a896::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:a7:1d:1b:ba:6f:9a:b7:27:16:99:34:50:78:1f:32:2d:f4:
         75:90:87:0f:29:33:12:51:6d:d8:ac:05:e2:38:66:d8:9a:1f:
         de:60:ed:ea:98:fd:f8:e9:3d:0f:19:20:f4:1a:13:c0:57:a8:
         80:6d:73:3c:17:c4:d2:e1:b9:ef:0a:76:1f:de:65:a1:b2:ac:
         c6:96:52:30:88:ff:f8:af:09:3f:87:e4:df:a8:da:fd:d9:32:
         34:95:10:ff:bc:4a:7f:ed:a1:b1:75:7f:11:b8:8e:b8:b9:4c:
         27:af:18:28:19:1f:f6:f1:4d:a2:8c:56:61:a9:d7:69:48:64:
         8e:b8:7d:9c:2e:4e:2b:00:0f:ad:4a:f6:b5:36:33:61:78:3f:
         e1:39:4d:06:31:da:13:75:3d:5c:47:f3:48:ee:ca:e0:b3:2f:
         da:e1:1d:7a:83:b6:9c:f8:f1:83:d0:f2:ac:5c:59:35:d4:a8:
         54:f3:78:6a:29:a2:77:f7:69:c5:26:b7:09:43:e6:50:46:24:
         b0:3d:d3:e2:38:48:e0:e9:2f:90:e4:0c:73:30:28:22:4f:67:
         26:8c:24:68:61:ae:75:05:5d:17:ae:02:91:12:c4:ac:92:44:
         21:18:1e:2b:5a:14:ca:3c:33:90:1c:9f:a5:a1:c5:3d:db:2f:
         7d:d2:50:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:47 2026 by rpki-client