Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144909.roa
File:                     AS144909.roa (raw, json)
Hash identifier:          iyJm3lui67V2W4lR2HbuT2JEdwssmOCAiupRdgqGQx0=
Subject key identifier:   C9:05:4C:BD:CD:FB:22:7D:C6:E0:14:26:F1:28:48:2E:A5:B3:8C:4D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3BC8E29C0DF5135C5B7E73307006F4718A8C76AB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144909.roa
Signing time:             Fri 22 May 2026 07:08:47 +0000
ROA not before:           Fri 22 May 2026 07:03:47 +0000
ROA not after:            Fri 21 May 2027 07:08:47 +0000
asID:                     144909
IP address blocks:        240a:a8d3::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c8:e2:9c:0d:f5:13:5c:5b:7e:73:30:70:06:f4:71:8a:8c:76:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:03:47 2026 GMT
            Not After : May 21 07:08:47 2027 GMT
        Subject: CN=C9054CBDCDFB227DC6E01426F128482EA5B38C4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:8d:a3:e3:c1:9f:26:a1:5d:d1:33:08:a8:f1:
                    a8:83:c0:fa:e0:c3:2a:c6:86:58:46:44:ba:79:87:
                    b7:b0:bd:27:43:9e:f6:58:ab:11:e6:54:6d:63:28:
                    98:f4:97:bc:71:4d:f3:0c:f9:fd:f4:c9:f4:55:e8:
                    cf:31:26:83:5f:67:eb:47:4a:b8:ed:e8:ff:71:32:
                    b0:5e:38:ef:22:5f:2e:42:2e:4e:f7:bc:73:e6:49:
                    a6:a8:a6:44:bd:fc:54:92:54:3c:3c:c8:3a:cd:8b:
                    87:b9:c0:06:9c:b6:ae:77:7d:ba:5d:e1:cf:da:5c:
                    fc:c5:f3:29:35:13:cd:d7:12:ef:f0:60:14:fb:d7:
                    cc:b3:55:63:f0:0d:7c:ff:15:5e:bb:59:3c:c8:67:
                    4c:29:f4:11:1f:47:1c:c9:cd:c4:aa:e3:ed:02:dc:
                    96:f7:1d:8d:a7:48:df:e6:26:1f:a1:a7:b2:6f:8f:
                    b5:b7:27:8a:09:72:3d:01:57:35:7e:51:0b:2a:66:
                    29:61:11:ce:47:ab:f4:bd:93:27:a6:57:f8:e8:f6:
                    6b:30:47:ec:82:e3:73:73:02:e0:c4:fb:69:05:0b:
                    75:ef:d5:5c:e0:57:79:85:a3:dd:0c:30:2e:4b:e4:
                    4f:68:31:1b:c4:cb:3e:6e:f8:e8:3c:ea:71:50:e6:
                    4d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:05:4C:BD:CD:FB:22:7D:C6:E0:14:26:F1:28:48:2E:A5:B3:8C:4D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144909.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a8d3::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:d0:49:6d:eb:ac:57:a8:d9:70:6f:87:80:0c:f7:b3:d8:a3:
         ac:3e:e7:2e:71:24:a2:3d:9b:7a:0a:e3:3c:d4:fe:65:90:b3:
         1c:93:f2:a1:e2:ab:9f:bd:0c:c8:d8:20:97:6a:1f:a3:d0:61:
         53:9c:a2:69:dc:f2:80:b2:a8:d8:a8:dd:13:a0:2b:0b:b1:cb:
         ed:c5:c4:d8:46:2c:99:e2:1e:2f:8f:29:10:6f:cf:46:1c:ef:
         c8:4f:e2:53:7b:bb:cf:72:57:f9:69:17:ac:6d:f1:7e:e0:2e:
         36:2b:c5:0d:c3:2f:85:75:45:db:a9:0c:8c:5b:54:51:73:0e:
         4e:5c:fd:32:ca:be:ad:1c:f6:19:7e:89:60:90:59:64:ee:ee:
         3a:24:5d:a1:61:6b:bd:f1:96:53:15:dc:be:16:2c:41:dc:ce:
         00:12:43:62:c9:ad:4f:ee:ae:8d:1b:2c:30:15:d2:be:39:61:
         99:32:1d:65:70:a9:a1:54:9e:21:03:00:04:63:60:6f:c3:7a:
         15:c3:e1:f6:e7:66:b2:c9:f7:41:32:ef:52:0d:52:63:80:5e:
         ac:ea:dd:fc:85:2b:fd:df:ad:5a:48:62:71:1e:7f:5b:4a:e1:
         5a:b6:aa:d6:38:6e:07:d9:78:9e:2a:34:a8:77:3a:57:bf:9f:
         28:a9:f6:ca
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUO8jinA31E1xbfnMwcAb0cYqMdqswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzAzNDdaFw0yNzA1MjEwNzA4NDdaMDMxMTAvBgNV
BAMTKEM5MDU0Q0JEQ0RGQjIyN0RDNkUwMTQyNkYxMjg0ODJFQTVCMzhDNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqjaPjwZ8moV3RMwio8aiDwPrg
wyrGhlhGRLp5h7ewvSdDnvZYqxHmVG1jKJj0l7xxTfMM+f30yfRV6M8xJoNfZ+tH
Srjt6P9xMrBeOO8iXy5CLk73vHPmSaaopkS9/FSSVDw8yDrNi4e5wAactq53fbpd
4c/aXPzF8yk1E83XEu/wYBT718yzVWPwDXz/FV67WTzIZ0wp9BEfRxzJzcSq4+0C
3Jb3HY2nSN/mJh+hp7Jvj7W3J4oJcj0BVzV+UQsqZilhEc5Hq/S9kyemV/jo9msw
R+yC43NzAuDE+2kFC3Xv1VzgV3mFo90MMC5L5E9oMRvEyz5u+Og86nFQ5k3PAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUyQVMvc37In3G4BQm8ShILqWzjE0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0OTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqo0zANBgkqhkiG9w0BAQsFAAOCAQEAkNBJ
beusV6jZcG+HgAz3s9ijrD7nLnEkoj2begrjPNT+ZZCzHJPyoeKrn70MyNggl2of
o9BhU5yiadzygLKo2KjdE6ArC7HL7cXE2EYsmeIeL48pEG/PRhzvyE/iU3u7z3JX
+WkXrG3xfuAuNivFDcMvhXVF26kMjFtUUXMOTlz9Msq+rRz2GX6JYJBZZO7uOiRd
oWFrvfGWUxXcvhYsQdzOABJDYsmtT+6ujRssMBXSvjlhmTIdZXCpoVSeIQMABGNg
b8N6FcPh9udmssn3QTLvUg1SY4BerOrd/IUr/d+tWkhicR5/W0rhWraq1jhuB9l4
nio0qHc6V7+fKKn2yg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:30 2026 by rpki-client