Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144916.roa
File:                     AS144916.roa (raw, json)
Hash identifier:          tUi73ho3ilIws5BhlW1uhw7T8Nv+zy14OhhtK3Oi7lU=
Subject key identifier:   C7:2D:DF:7C:4C:EF:8E:F1:89:8F:4E:FD:8B:80:F4:87:89:2A:3D:62
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2E95C37465F979F810D043E7739791832F402A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144916.roa
Signing time:             Fri 22 May 2026 01:50:25 +0000
ROA not before:           Fri 22 May 2026 01:45:25 +0000
ROA not after:            Fri 21 May 2027 01:50:25 +0000
asID:                     144916
IP address blocks:        240a:a8da::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:95:c3:74:65:f9:79:f8:10:d0:43:e7:73:97:91:83:2f:40:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:25 2026 GMT
            Not After : May 21 01:50:25 2027 GMT
        Subject: CN=C72DDF7C4CEF8EF1898F4EFD8B80F487892A3D62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:aa:39:85:ae:8a:f1:42:48:39:64:ef:04:88:
                    ac:be:5e:36:a5:36:a6:5c:01:5b:74:fd:92:a2:b4:
                    87:de:7b:fb:53:94:c8:8c:01:b3:5b:03:86:28:eb:
                    63:cb:8b:d5:93:23:ce:18:38:a8:3a:d6:f2:f2:85:
                    d8:02:46:48:93:e1:fe:6a:61:6e:19:75:97:b5:34:
                    29:b5:25:1d:68:3f:d0:4f:45:09:51:b9:27:5a:07:
                    96:99:ea:b6:27:65:75:2a:e9:a8:60:e9:d4:9d:72:
                    54:f6:58:6a:07:b3:47:8e:42:ab:88:64:e0:15:0c:
                    1e:6a:a0:04:9e:26:3a:1e:04:a4:e5:be:22:c0:d3:
                    d1:cd:7c:15:b1:68:d4:41:ec:fd:30:14:7a:7a:54:
                    ef:a1:03:44:49:db:36:b5:30:6b:03:2f:08:9a:c5:
                    70:39:9b:ac:2f:be:4e:45:10:10:cc:35:20:81:d2:
                    4b:74:ed:50:46:90:07:20:ce:f9:0a:94:16:2a:7d:
                    b2:9a:a0:c5:ce:69:b6:32:cb:6c:18:a7:62:8f:7f:
                    7f:55:c2:11:07:3c:e3:6e:13:18:43:f4:0e:bc:29:
                    68:05:d1:76:c4:82:ea:a6:61:3d:c5:0d:36:28:39:
                    20:88:1d:73:e1:57:66:bd:ee:d5:58:7f:b5:8a:25:
                    2d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:2D:DF:7C:4C:EF:8E:F1:89:8F:4E:FD:8B:80:F4:87:89:2A:3D:62
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144916.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a8da::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:3d:98:d3:49:80:f9:71:67:88:45:95:4b:0c:30:08:93:64:
         bc:70:6c:98:de:21:0d:1e:e7:ac:7d:21:1f:d5:f6:32:e5:95:
         45:3d:05:1d:7e:05:1f:bd:28:d3:95:36:48:fd:30:4f:f5:2f:
         a6:86:99:b0:e4:38:2e:d3:b3:2e:bf:9d:dc:12:ba:e5:5a:8f:
         00:39:51:3f:c4:bf:b1:73:43:dd:7c:6a:3c:a4:7f:18:46:4f:
         2b:2b:55:14:ce:6d:2b:d3:63:8c:6f:2e:8f:9c:2e:1f:4b:52:
         59:8a:b5:32:e1:af:35:47:3a:49:57:9b:bd:52:f5:f8:cc:4d:
         bf:86:7a:cf:6b:0d:08:ef:6d:ae:dc:3c:10:99:a7:0e:42:91:
         28:4e:1b:de:e6:3f:4d:f1:a6:fe:4b:87:da:d8:88:7a:a0:42:
         60:42:08:c7:41:36:41:26:d7:04:95:20:6e:f7:fa:0e:ab:a9:
         3f:5e:fc:83:53:ad:9a:1b:22:cf:63:11:95:d8:89:10:b6:b9:
         43:25:3a:59:a8:9f:54:70:bf:40:33:c6:78:2e:0c:25:b3:6d:
         6b:ec:f4:63:aa:77:ac:c6:15:d6:32:43:b8:b1:23:ad:8c:8b:
         9e:c9:62:5d:8c:e9:11:97:6a:cc:b3:5f:de:5d:07:21:70:33:
         73:3d:f3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:20 2026 by rpki-client