Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144932.roa
File:                     AS144932.roa (raw, json)
Hash identifier:          klqy/E8epCek0tnfInUL0J7iZVJUBbVMu0TvuqgFtYY=
Subject key identifier:   69:90:D2:DF:AE:5A:52:D5:4B:A4:AB:89:CE:AB:CD:8B:D6:82:E9:09
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       591587099BCE67E53699F0D4972AE2DD0F19D3E7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144932.roa
Signing time:             Tue 26 May 2026 06:30:49 +0000
ROA not before:           Tue 26 May 2026 06:25:49 +0000
ROA not after:            Tue 25 May 2027 06:30:49 +0000
asID:                     144932
IP address blocks:        240a:a8ea::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:15:87:09:9b:ce:67:e5:36:99:f0:d4:97:2a:e2:dd:0f:19:d3:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:49 2026 GMT
            Not After : May 25 06:30:49 2027 GMT
        Subject: CN=6990D2DFAE5A52D54BA4AB89CEABCD8BD682E909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ac:32:dd:42:79:49:3d:f4:57:26:a1:93:f4:
                    ef:7f:71:45:ba:35:21:09:00:6d:2e:4b:dc:81:5f:
                    53:f9:c4:a8:e0:3d:f2:26:48:34:de:80:15:2d:ad:
                    e8:5a:f6:80:d8:0a:bf:55:ee:74:df:bb:45:46:77:
                    ca:16:d1:02:4d:83:f4:e6:be:b4:34:37:93:a1:7a:
                    97:c5:07:f6:81:2c:0d:51:9a:2e:9f:87:7e:0f:26:
                    c4:f8:7c:d0:95:1d:ba:ba:d2:2a:2c:8f:c9:c9:f9:
                    a3:85:8a:05:54:c5:ab:6d:cf:7b:dc:05:35:54:f5:
                    60:1e:47:b8:1e:cc:b9:c2:87:1a:92:fb:3a:37:9b:
                    7a:07:c1:5c:1e:6d:f8:32:62:8f:55:5f:2f:f2:9c:
                    87:70:1e:46:b8:c7:70:a0:d7:28:16:c9:7e:3d:78:
                    e6:d8:ee:29:de:aa:67:ee:e2:e0:74:fa:78:48:85:
                    cf:57:ee:19:12:ae:d9:6d:d7:3f:7c:87:54:54:48:
                    3d:62:bb:53:9f:b8:ad:d9:d9:1e:b3:64:71:31:99:
                    74:8a:16:2d:e1:e1:6b:74:55:24:40:91:d5:31:08:
                    fc:bb:bc:be:3e:59:9d:29:b9:52:58:fd:91:c9:ff:
                    14:35:42:29:cd:93:28:2f:83:0c:f6:77:51:b8:cb:
                    9b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:90:D2:DF:AE:5A:52:D5:4B:A4:AB:89:CE:AB:CD:8B:D6:82:E9:09
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a8ea::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:48:05:22:43:30:6a:b4:0a:ea:d1:09:a5:0c:e6:23:cb:1e:
         4f:4a:78:a6:8c:ad:e8:f8:a8:64:13:62:d8:ed:aa:1b:d9:0a:
         f1:74:52:26:04:89:e8:18:6b:a4:bc:cb:86:8a:94:55:ef:57:
         59:47:ad:be:0d:94:2a:55:66:e2:02:4e:7a:54:af:60:8a:07:
         b8:68:7d:e5:00:6b:95:70:ce:9d:54:f6:fe:51:1c:50:06:74:
         b8:e6:5e:10:a8:b7:2e:4c:f2:37:5e:88:60:ad:55:63:07:b5:
         81:43:ac:2e:ad:e7:d0:8a:5d:0c:b3:a5:07:11:35:c7:09:30:
         51:8b:10:f6:61:f1:5b:c0:2e:c5:2b:1b:5e:5b:04:4b:d3:c0:
         10:ec:4c:a4:0e:cf:98:af:8d:a4:bb:eb:26:87:4d:03:f6:68:
         38:11:4c:57:8d:04:e9:73:72:ff:57:35:96:f7:6e:b2:14:52:
         b9:ea:b8:fb:7d:62:90:45:f4:5e:9e:b6:12:37:7a:b3:8d:74:
         72:84:27:41:8e:ce:a6:59:da:4e:0e:06:ea:55:cd:71:28:03:
         b8:02:0f:e8:e0:2c:68:7f:3f:d2:e8:ae:c1:6f:96:b4:ad:50:
         02:03:28:25:51:a1:ef:95:f0:ad:69:1c:63:1f:4d:74:79:e0:
         c6:1c:44:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:31 2026 by rpki-client