Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144913.roa
File:                     AS144913.roa (raw, json)
Hash identifier:          FGbcIj7VU6aFRmEtVHRDIUfuedj5U9+j0ABihyIdaSA=
Subject key identifier:   DA:66:72:FC:18:48:F6:62:AC:EC:5C:D8:99:8E:C6:36:A4:70:A6:BD
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4ED872101B7830252BB37671C4C969ABD0E28374
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144913.roa
Signing time:             Mon 25 May 2026 06:28:43 +0000
ROA not before:           Mon 25 May 2026 06:23:43 +0000
ROA not after:            Mon 24 May 2027 06:28:43 +0000
asID:                     144913
IP address blocks:        240a:a8d7::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d8:72:10:1b:78:30:25:2b:b3:76:71:c4:c9:69:ab:d0:e2:83:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:43 2026 GMT
            Not After : May 24 06:28:43 2027 GMT
        Subject: CN=DA6672FC1848F662ACEC5CD8998EC636A470A6BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:34:72:07:e3:61:e1:a5:54:e4:ed:11:70:9e:
                    a5:3e:55:f7:1d:27:7a:fc:d4:3e:9f:d2:3b:d9:eb:
                    46:5e:75:1a:53:4b:ce:45:9d:20:03:8c:ca:0e:c5:
                    06:43:c2:e0:f0:f1:86:cf:cd:bf:5c:0a:ae:11:18:
                    f2:7c:12:aa:e3:58:ae:a8:14:d3:5f:c3:78:be:d0:
                    64:50:1a:5d:04:cf:d9:7a:f7:f7:b9:4c:44:d8:8c:
                    f2:0c:0c:3f:b0:24:ca:d6:d9:d3:db:51:56:00:6e:
                    f0:15:4e:cc:c9:58:c2:f3:51:d0:51:ff:8e:89:2c:
                    6f:6e:1c:70:a8:79:cd:cf:5f:fb:3a:57:15:c8:60:
                    08:36:2f:e7:78:0b:37:29:d4:ed:34:89:6e:6c:5a:
                    91:eb:4c:19:65:be:e9:9b:9f:aa:26:87:96:11:43:
                    c8:c6:c4:5b:07:c5:02:dd:a5:8a:7e:58:b4:ca:eb:
                    1a:0c:31:7c:cd:80:0a:de:8a:48:4f:10:eb:69:4d:
                    2c:42:92:40:e1:8f:d3:0b:69:46:fa:ed:82:28:aa:
                    40:da:b3:38:a2:dc:1b:d3:7f:c3:53:2f:3f:1f:19:
                    a9:e8:91:e8:1e:cd:31:c5:60:62:c7:58:75:3c:61:
                    d3:73:80:a7:db:70:b1:27:0f:b4:1e:fb:4d:8b:50:
                    3c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:66:72:FC:18:48:F6:62:AC:EC:5C:D8:99:8E:C6:36:A4:70:A6:BD
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144913.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a8d7::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:54:61:63:60:83:a6:da:5d:ad:be:4e:a1:8a:d5:0e:00:d9:
         cd:e5:e9:25:71:76:cd:86:74:75:e9:7c:35:d3:2f:75:c2:90:
         25:b8:ba:48:ef:b7:70:0c:4d:53:54:9b:a6:79:40:df:6f:1c:
         01:a0:34:ed:94:3f:64:3c:89:b6:3b:5b:d7:44:4a:62:d5:54:
         d8:ab:29:23:60:e8:69:85:d6:dd:f6:ac:cf:63:89:21:5b:8c:
         d8:d7:37:6b:fa:5e:af:64:36:63:84:3c:fd:bf:ec:f6:3c:02:
         d0:e2:ad:78:f7:7a:89:eb:9a:ad:67:23:1d:b1:a6:dd:c1:22:
         80:0c:47:ce:29:aa:17:a1:c9:12:ee:0a:f0:44:06:09:a0:6d:
         da:c9:b9:de:47:5b:20:f3:67:94:89:a5:5c:27:75:2c:bf:31:
         02:57:6b:fc:a2:1c:de:0f:d1:81:6e:91:1c:6b:48:d6:87:cf:
         fc:e5:47:82:d8:00:aa:3f:86:70:63:62:b9:49:0b:2f:40:4a:
         54:a3:4f:fb:76:b6:c0:96:5a:42:d8:f1:99:4e:d3:a0:a3:91:
         11:27:b7:fb:8c:a9:0c:11:c9:83:99:50:e0:60:52:75:60:1b:
         50:32:fd:75:dc:7d:10:02:32:23:7a:4a:a6:5e:6d:96:c3:b7:
         27:0f:79:db
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUTthyEBt4MCUrs3ZxxMlpq9Dig3QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjIzNDNaFw0yNzA1MjQwNjI4NDNaMDMxMTAvBgNV
BAMTKERBNjY3MkZDMTg0OEY2NjJBQ0VDNUNEODk5OEVDNjM2QTQ3MEE2QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRNHIH42HhpVTk7RFwnqU+Vfcd
J3r81D6f0jvZ60ZedRpTS85FnSADjMoOxQZDwuDw8YbPzb9cCq4RGPJ8EqrjWK6o
FNNfw3i+0GRQGl0Ez9l69/e5TETYjPIMDD+wJMrW2dPbUVYAbvAVTszJWMLzUdBR
/46JLG9uHHCoec3PX/s6VxXIYAg2L+d4Czcp1O00iW5sWpHrTBllvumbn6omh5YR
Q8jGxFsHxQLdpYp+WLTK6xoMMXzNgAreikhPEOtpTSxCkkDhj9MLaUb67YIoqkDa
szii3BvTf8NTLz8fGanokegezTHFYGLHWHU8YdNzgKfbcLEnD7Qe+02LUDyPAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU2mZy/BhI9mKs7FzYmY7GNqRwpr0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0OTEzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqo1zANBgkqhkiG9w0BAQsFAAOCAQEAsFRh
Y2CDptpdrb5OoYrVDgDZzeXpJXF2zYZ0del8NdMvdcKQJbi6SO+3cAxNU1SbpnlA
328cAaA07ZQ/ZDyJtjtb10RKYtVU2KspI2DoaYXW3fasz2OJIVuM2Nc3a/per2Q2
Y4Q8/b/s9jwC0OKtePd6ieuarWcjHbGm3cEigAxHzimqF6HJEu4K8EQGCaBt2sm5
3kdbIPNnlImlXCd1LL8xAldr/KIc3g/RgW6RHGtI1ofP/OVHgtgAqj+GcGNiuUkL
L0BKVKNP+3a2wJZaQtjxmU7ToKORESe3+4ypDBHJg5lQ4GBSdWAbUDL9ddx9EAIy
I3pKpl5tlsO3Jw952w==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:17 2026 by rpki-client