Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144876.roa
File:                     AS144876.roa (raw, json)
Hash identifier:          IqSJH5A4YjCdhYhl+Zgd5yeHcPrqLVqFiDLFoJE6ATQ=
Subject key identifier:   F1:E7:DE:F4:64:24:CB:34:38:0D:25:11:8E:3E:79:7E:17:52:9E:A3
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       49E1A6A31F67E6C2F6DB5F1F478C4EBA9301B6BB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144876.roa
Signing time:             Tue 26 May 2026 03:17:09 +0000
ROA not before:           Tue 26 May 2026 03:12:09 +0000
ROA not after:            Tue 25 May 2027 03:17:09 +0000
asID:                     144876
IP address blocks:        240a:a8b2::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e1:a6:a3:1f:67:e6:c2:f6:db:5f:1f:47:8c:4e:ba:93:01:b6:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:12:09 2026 GMT
            Not After : May 25 03:17:09 2027 GMT
        Subject: CN=F1E7DEF46424CB34380D25118E3E797E17529EA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4a:67:70:7e:02:66:88:3b:7a:ad:e0:b1:6c:
                    2e:1e:c4:ea:b9:78:ed:7a:ce:8f:a4:6e:b9:c1:f1:
                    23:8c:37:f2:6c:ad:18:e9:af:b3:39:fc:84:de:cc:
                    e7:a8:e7:be:62:3e:59:c2:f0:47:84:44:58:a3:7c:
                    73:5b:76:b9:8a:9c:32:20:4b:12:3c:02:bb:3a:5f:
                    75:31:71:04:59:cb:f3:59:b8:0d:19:95:65:2c:9a:
                    9d:fc:7d:bd:62:0a:82:2e:3b:40:5a:d7:e0:77:b0:
                    36:a1:60:4b:76:d5:f0:dc:ab:51:dd:d2:89:77:81:
                    25:30:fc:59:b7:0d:74:a2:5b:74:58:ce:12:82:9e:
                    54:7f:fc:51:22:5f:e5:0c:3e:6b:25:f2:15:e2:a3:
                    45:fd:92:e0:29:00:5b:8d:ce:c7:e3:46:dd:0b:72:
                    c7:d8:71:b9:fc:fd:df:84:cb:e4:65:ab:98:90:e7:
                    77:48:3f:dd:23:15:28:4c:c0:38:0f:73:47:1f:fd:
                    28:02:b1:9e:12:b8:d5:25:ae:9b:bd:56:86:d2:6c:
                    a1:0b:35:ad:a3:32:bf:cd:c0:33:c2:94:4b:14:6a:
                    6e:0d:8c:94:cc:59:bd:46:96:f2:83:67:f1:36:fe:
                    b9:9c:e0:c4:fb:53:e9:2c:17:2f:4c:c3:93:10:a6:
                    b7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E7:DE:F4:64:24:CB:34:38:0D:25:11:8E:3E:79:7E:17:52:9E:A3
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144876.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a8b2::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:c4:ac:bc:de:1e:4e:37:67:ce:fd:ed:c3:c6:b7:d0:3e:c0:
         a1:ed:4a:c7:b1:3a:80:9d:01:11:8d:a1:ab:f7:fc:c0:e4:9b:
         f9:6c:33:e8:77:1c:3d:b2:c5:a4:0d:8e:cc:6a:0f:9a:b8:24:
         75:15:7f:1f:0f:5e:87:f1:be:03:47:43:9a:a0:92:21:e5:b5:
         30:f7:68:21:ae:7b:19:55:d3:be:14:84:99:e8:3d:df:b2:48:
         05:2b:45:e7:96:c2:20:11:f0:25:26:0b:8a:33:15:98:1c:2f:
         da:41:3e:ae:ec:9c:34:19:2f:92:82:0b:2d:0a:de:21:f9:59:
         b1:04:b9:d2:5d:48:c7:87:b6:8a:3a:2d:b6:fe:01:6c:2d:3c:
         73:84:3d:28:0c:9a:13:62:79:48:39:77:ca:ad:57:db:3c:6b:
         f4:3d:fb:d0:3d:2c:f0:47:94:1d:ef:0c:74:a0:6b:c7:3f:d3:
         54:ef:3d:2f:33:2e:dc:fe:eb:ae:61:cf:be:ae:e5:28:c6:6d:
         51:d9:fe:5e:04:f2:53:61:cd:3d:9e:c6:45:b2:5e:77:83:34:
         28:c7:4a:41:60:68:0b:d6:94:a9:53:2c:ab:b9:c2:55:16:be:
         5e:a7:6a:08:52:12:dd:e0:27:f9:6a:0f:a6:25:2e:5e:cb:bc:
         71:a1:0e:61
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUSeGmox9n5sL2218fR4xOupMBtrswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMzEyMDlaFw0yNzA1MjUwMzE3MDlaMDMxMTAvBgNV
BAMTKEYxRTdERUY0NjQyNENCMzQzODBEMjUxMThFM0U3OTdFMTc1MjlFQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5SmdwfgJmiDt6reCxbC4exOq5
eO16zo+kbrnB8SOMN/JsrRjpr7M5/ITezOeo575iPlnC8EeERFijfHNbdrmKnDIg
SxI8Ars6X3UxcQRZy/NZuA0ZlWUsmp38fb1iCoIuO0Ba1+B3sDahYEt21fDcq1Hd
0ol3gSUw/Fm3DXSiW3RYzhKCnlR//FEiX+UMPmsl8hXio0X9kuApAFuNzsfjRt0L
csfYcbn8/d+Ey+Rlq5iQ53dIP90jFShMwDgPc0cf/SgCsZ4SuNUlrpu9VobSbKEL
Na2jMr/NwDPClEsUam4NjJTMWb1GlvKDZ/E2/rmc4MT7U+ksFy9Mw5MQprf5AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU8efe9GQkyzQ4DSURjj55fhdSnqMwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0ODc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqosjANBgkqhkiG9w0BAQsFAAOCAQEAnMSs
vN4eTjdnzv3tw8a30D7Aoe1Kx7E6gJ0BEY2hq/f8wOSb+Wwz6HccPbLFpA2OzGoP
mrgkdRV/Hw9eh/G+A0dDmqCSIeW1MPdoIa57GVXTvhSEmeg937JIBStF55bCIBHw
JSYLijMVmBwv2kE+ruycNBkvkoILLQreIflZsQS50l1Ix4e2ijottv4BbC08c4Q9
KAyaE2J5SDl3yq1X2zxr9D370D0s8EeUHe8MdKBrxz/TVO89LzMu3P7rrmHPvq7l
KMZtUdn+XgTyU2HNPZ7GRbJed4M0KMdKQWBoC9aUqVMsq7nCVRa+XqdqCFIS3eAn
+WoPpiUuXsu8caEOYQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:27 2026 by rpki-client