Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144881.roa
File:                     AS144881.roa (raw, json)
Hash identifier:          LfZrbrcjPiKi5HcpstiwGOpWEBL0xJGbxOHUDuYhRmQ=
Subject key identifier:   69:0C:D0:DC:FC:E5:41:15:C4:20:46:08:0D:B6:FD:CB:F9:73:E7:92
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6A373247174DCA6B18B0A28D443E8612D60DDE4E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144881.roa
Signing time:             Mon 25 May 2026 02:22:10 +0000
ROA not before:           Mon 25 May 2026 02:17:10 +0000
ROA not after:            Mon 24 May 2027 02:22:10 +0000
asID:                     144881
IP address blocks:        240a:a8b7::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:37:32:47:17:4d:ca:6b:18:b0:a2:8d:44:3e:86:12:d6:0d:de:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 02:17:10 2026 GMT
            Not After : May 24 02:22:10 2027 GMT
        Subject: CN=690CD0DCFCE54115C42046080DB6FDCBF973E792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5f:f3:31:ca:90:60:30:ec:89:a3:b3:88:f6:
                    37:ec:ba:2c:78:af:37:9d:f4:1e:8a:43:3f:04:dc:
                    95:f6:30:4d:05:68:8f:d4:21:8b:43:1a:f2:4a:89:
                    e3:a4:3a:06:57:d7:ec:de:10:2a:b6:e8:55:2f:55:
                    9d:62:f4:80:6d:6f:80:41:33:95:92:e6:7b:39:29:
                    42:3f:68:8f:b0:5a:81:2f:19:a5:38:2f:6a:1a:24:
                    b4:4a:8a:37:c6:e6:60:0e:3f:13:c5:45:d8:f4:42:
                    b6:91:7d:9f:a3:4f:d8:ac:3d:b8:ee:07:17:2d:9a:
                    47:a9:0a:07:7d:a2:ea:0d:19:56:13:44:af:7c:43:
                    d7:46:1a:07:a5:d0:3d:0a:5c:5f:72:de:1b:01:c7:
                    a4:11:d6:ae:b8:c4:d8:46:45:08:08:ef:1c:96:ba:
                    fa:da:e6:68:7e:0c:02:19:bd:d1:64:2a:c5:f5:9e:
                    50:4e:c5:ac:d0:8b:a1:bc:83:d8:d3:ed:43:d0:0a:
                    5d:3b:0e:cb:0c:ff:30:07:7d:ca:b5:c4:16:19:bd:
                    0c:ad:35:81:39:e2:a4:85:67:5a:af:75:8e:f0:32:
                    b2:84:2b:e0:81:f1:c6:d1:4d:8b:96:93:4d:da:39:
                    df:9b:46:90:37:af:dd:b9:d6:4c:4f:f6:d9:5c:da:
                    ce:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0C:D0:DC:FC:E5:41:15:C4:20:46:08:0D:B6:FD:CB:F9:73:E7:92
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144881.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a8b7::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:18:3f:ce:43:53:a9:41:29:a7:fb:68:1b:45:3d:84:62:18:
         97:f4:28:2c:34:e0:4c:e4:fd:c3:65:4e:6e:52:6a:94:ad:48:
         d5:fe:cc:a8:17:10:62:62:3f:50:7c:d6:f5:79:de:64:ec:64:
         9b:a3:9a:44:56:ac:0f:2a:7e:e5:b8:31:93:ba:82:2c:2e:16:
         2b:48:4b:14:8e:3d:bc:30:7a:5e:a9:6f:89:f2:31:b9:4f:e9:
         b6:5e:0e:3e:ab:28:b2:49:fb:8e:2a:76:c0:8f:13:a8:d1:2f:
         69:76:a4:97:2d:cb:3c:b7:89:ba:70:2d:9d:87:5b:e2:59:3e:
         7f:97:cf:5b:ce:97:bd:c3:45:2e:6b:16:27:af:81:56:fc:70:
         17:e1:bb:6a:e9:e0:4f:23:c8:ca:41:47:c2:d4:49:c1:c0:98:
         4d:66:cd:d8:3c:78:9f:23:b8:13:67:82:17:2c:55:07:58:6a:
         86:b4:77:73:05:eb:f0:48:45:6f:63:26:1e:71:22:2f:5d:2b:
         6c:c7:24:7b:79:10:7a:30:47:8c:bb:98:cf:d5:57:07:20:57:
         02:14:b7:fb:97:dc:33:68:3e:89:82:8e:d0:65:64:d4:d6:f2:
         c9:ae:d0:0c:e5:2f:2b:11:39:e1:a5:10:14:fb:c5:17:7d:32:
         fa:87:d8:b2
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUajcyRxdNymsYsKKNRD6GEtYN3k4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMjE3MTBaFw0yNzA1MjQwMjIyMTBaMDMxMTAvBgNV
BAMTKDY5MENEMERDRkNFNTQxMTVDNDIwNDYwODBEQjZGRENCRjk3M0U3OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLX/MxypBgMOyJo7OI9jfsuix4
rzed9B6KQz8E3JX2ME0FaI/UIYtDGvJKieOkOgZX1+zeECq26FUvVZ1i9IBtb4BB
M5WS5ns5KUI/aI+wWoEvGaU4L2oaJLRKijfG5mAOPxPFRdj0QraRfZ+jT9isPbju
BxctmkepCgd9ouoNGVYTRK98Q9dGGgel0D0KXF9y3hsBx6QR1q64xNhGRQgI7xyW
uvra5mh+DAIZvdFkKsX1nlBOxazQi6G8g9jT7UPQCl07DssM/zAHfcq1xBYZvQyt
NYE54qSFZ1qvdY7wMrKEK+CB8cbRTYuWk03aOd+bRpA3r9251kxP9tlc2s7FAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUaQzQ3PzlQRXEIEYIDbb9y/lz55IwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0ODgxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqotzANBgkqhkiG9w0BAQsFAAOCAQEAfhg/
zkNTqUEpp/toG0U9hGIYl/QoLDTgTOT9w2VOblJqlK1I1f7MqBcQYmI/UHzW9Xne
ZOxkm6OaRFasDyp+5bgxk7qCLC4WK0hLFI49vDB6XqlvifIxuU/ptl4OPqsoskn7
jip2wI8TqNEvaXakly3LPLeJunAtnYdb4lk+f5fPW86XvcNFLmsWJ6+BVvxwF+G7
aungTyPIykFHwtRJwcCYTWbN2Dx4nyO4E2eCFyxVB1hqhrR3cwXr8EhFb2MmHnEi
L10rbMcke3kQejBHjLuYz9VXByBXAhS3+5fcM2g+iYKO0GVk1Nbyya7QDOUvKxE5
4aUQFPvFF30y+ofYsg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:56 2026 by rpki-client