Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144950.roa
File:                     AS144950.roa (raw, json)
Hash identifier:          ORRDay4bYWUAmPSatZZ5FrCSyeseBQHq9P4nDu40BRE=
Subject key identifier:   B6:E8:67:04:94:B7:87:87:C4:05:F4:0E:25:C7:39:BA:0F:BB:06:18
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       771DA59D9C1B188F4FC4B90AAE349FCE77A2CAEB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144950.roa
Signing time:             Fri 22 May 2026 04:26:51 +0000
ROA not before:           Fri 22 May 2026 04:21:51 +0000
ROA not after:            Fri 21 May 2027 04:26:51 +0000
asID:                     144950
IP address blocks:        240a:a8fc::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:1d:a5:9d:9c:1b:18:8f:4f:c4:b9:0a:ae:34:9f:ce:77:a2:ca:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:21:51 2026 GMT
            Not After : May 21 04:26:51 2027 GMT
        Subject: CN=B6E8670494B78787C405F40E25C739BA0FBB0618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8a:9f:eb:e1:fc:f3:51:44:31:e0:a5:f8:c5:
                    ec:39:65:ef:07:d8:b4:e6:79:d8:66:18:09:dc:72:
                    3f:87:e0:8e:ca:5d:af:74:7e:5c:e3:18:89:b0:76:
                    1f:db:87:26:47:42:e8:98:13:a9:bb:df:14:a5:d3:
                    2d:25:82:83:4e:a9:8e:c5:d2:35:71:1a:4e:d7:89:
                    e3:c5:af:bb:b8:42:fa:9e:8c:c5:e2:4e:42:f5:df:
                    85:fd:7d:45:43:88:b7:27:d5:e7:15:b1:f9:2f:44:
                    56:23:61:dc:e2:7b:e8:bf:17:61:9b:56:fb:d4:ec:
                    22:1c:9f:4a:07:7d:6c:97:a7:5d:bf:2e:dd:e9:b4:
                    0e:a5:f3:00:dc:cc:6a:36:57:c8:53:52:dc:0b:5d:
                    dc:23:c5:32:e7:59:01:45:09:d6:b8:ba:62:40:34:
                    ea:f5:93:8a:9b:79:39:0d:5f:db:68:d6:29:1d:12:
                    07:8a:f6:5a:f7:6a:99:94:1f:9f:14:d9:be:2a:03:
                    73:f5:06:cc:f0:5c:b9:c2:65:40:f9:bf:66:db:3d:
                    48:90:e9:41:6d:92:5a:41:72:ba:64:58:05:dc:26:
                    36:4d:9c:bc:a9:72:ab:71:f2:fe:c4:ba:96:ba:38:
                    48:90:65:cc:d8:85:c5:7e:26:e8:5a:bc:48:01:a2:
                    74:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E8:67:04:94:B7:87:87:C4:05:F4:0E:25:C7:39:BA:0F:BB:06:18
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144950.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a8fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:0c:be:d1:2f:b0:4d:50:2a:89:4e:41:5b:9e:ee:2d:54:e7:
         c8:b9:6e:a5:f0:0b:6e:12:30:e5:ec:ab:5c:60:79:b9:fb:2f:
         18:d8:df:dc:fb:cb:11:af:56:07:b2:41:48:90:a0:e4:2f:5a:
         4d:fc:35:10:9f:70:3b:0e:95:3a:df:6c:64:24:9f:3e:6e:f9:
         06:dd:ee:e7:b3:89:a4:cf:54:84:a4:8a:92:50:e0:8f:e7:9f:
         f5:dd:3c:af:bb:a1:8c:a4:0b:f9:3a:88:b6:ff:b1:01:28:62:
         fe:30:ea:7c:38:ed:1f:fb:6e:da:e5:ef:62:27:07:3e:31:7f:
         4d:7d:ec:7b:c3:10:bb:e7:01:42:dc:ca:d3:1c:25:0c:c6:14:
         2a:2b:bc:25:bd:bd:3a:1d:6b:47:4e:bc:65:37:3d:43:ad:5e:
         5e:76:5b:ba:2d:41:5f:11:da:57:4f:75:33:b6:9c:03:27:0d:
         bd:29:6c:13:d4:dd:53:d5:f9:3e:f1:46:4a:36:da:5c:3c:42:
         dc:71:09:9a:ef:ad:1e:d6:d5:9d:29:17:35:82:e4:bc:8c:7c:
         99:71:64:ea:97:f7:f1:04:da:91:9c:50:9d:36:06:6c:cd:46:
         0c:c6:82:f6:81:c3:6b:87:4b:c1:80:5a:31:1d:a3:04:50:60:
         6d:df:f5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:39 2026 by rpki-client