Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144976.roa
File:                     AS144976.roa (raw, json)
Hash identifier:          LdLyT97Hp3BXBBwE6oG7cdNiH6/FO9UubtvtcS+mFYc=
Subject key identifier:   C9:EA:C5:8C:8E:56:EE:DF:69:4A:74:49:43:7C:EE:5A:C6:34:29:A5
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       030D6E7AA6770B5357C6A0469780FB6CDBB96FDA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144976.roa
Signing time:             Fri 22 May 2026 06:46:07 +0000
ROA not before:           Fri 22 May 2026 06:41:07 +0000
ROA not after:            Fri 21 May 2027 06:46:07 +0000
asID:                     144976
IP address blocks:        240a:a916::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:0d:6e:7a:a6:77:0b:53:57:c6:a0:46:97:80:fb:6c:db:b9:6f:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:07 2026 GMT
            Not After : May 21 06:46:07 2027 GMT
        Subject: CN=C9EAC58C8E56EEDF694A7449437CEE5AC63429A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d0:5a:bb:39:8f:ca:99:c3:cc:21:de:ba:66:
                    5d:35:e0:96:da:61:f2:3a:fc:58:2f:20:9f:b5:39:
                    a9:13:01:64:fd:9c:f8:3d:bd:ca:f0:73:07:56:3c:
                    2e:4f:6e:f7:29:79:6d:b5:9f:5a:8c:6e:50:26:96:
                    bd:d1:0a:f1:3f:91:4f:8d:f2:d0:35:15:df:f8:d1:
                    d9:1c:4e:8f:e2:7e:52:48:a0:e6:70:af:91:82:c4:
                    04:e7:6c:a3:96:73:80:77:47:6d:a7:c3:e6:06:d7:
                    11:ed:2b:86:25:e6:04:5f:3f:a1:38:af:8e:d1:fe:
                    ba:33:7e:e4:b6:a0:dd:04:40:5c:79:c5:8c:e2:37:
                    81:0f:8d:1c:09:bb:ef:62:d4:e4:c3:a0:97:24:d5:
                    5d:78:ec:5f:ea:ba:60:2a:a6:d1:f8:ed:a9:a1:4b:
                    27:12:85:43:18:e4:b1:d5:20:f8:4d:18:54:ca:56:
                    a7:c7:78:33:4f:7b:4d:e2:a4:f5:f2:e6:1e:53:b4:
                    c7:68:4d:7a:8a:5c:e7:fa:44:15:59:5f:11:7a:3b:
                    ad:e1:47:84:7a:72:1b:2b:e0:9a:56:39:8b:aa:ad:
                    7a:1a:59:66:55:a7:d8:95:b7:21:ff:22:2c:5e:f3:
                    e5:87:e8:10:00:24:0a:2d:45:28:c0:dd:0c:42:eb:
                    ab:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:EA:C5:8C:8E:56:EE:DF:69:4A:74:49:43:7C:EE:5A:C6:34:29:A5
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144976.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a916::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:4b:88:fc:80:0e:3c:e2:93:70:2e:8c:81:61:17:6a:7c:4f:
         ef:67:85:5b:96:17:d6:67:9d:e6:6b:73:f7:f1:83:75:0b:e9:
         b5:55:26:4d:67:5f:2c:51:12:ce:57:f9:ae:c2:a3:e7:2a:a7:
         6e:7d:63:f1:c4:68:34:2a:85:dc:91:d0:5e:c3:6f:ad:b5:81:
         38:fb:31:25:22:c9:d4:49:8c:72:af:6d:dc:96:92:e5:c0:3c:
         b8:a2:f8:76:fd:be:83:6d:93:21:36:14:c3:f3:e6:f6:c4:cb:
         20:10:e7:9b:7b:5a:3d:d9:21:c9:bd:01:c8:94:6e:dd:bf:fd:
         27:1b:02:2d:45:80:73:86:1e:b1:b1:99:5f:2e:3c:e0:f5:62:
         74:89:08:52:86:b1:55:dc:b7:89:7b:b0:42:2c:7b:c9:d8:6e:
         01:a6:b6:fe:ff:ba:8b:98:b4:94:96:f0:24:2d:60:05:dc:66:
         ba:00:79:75:dd:e3:e6:25:0b:a1:df:ae:e7:e0:f0:ac:a8:0b:
         40:eb:a0:7d:1e:0e:cd:a2:60:67:20:eb:76:1e:a8:d1:09:8d:
         23:99:99:2e:33:74:1c:c5:1c:96:0e:e2:11:4c:96:17:f2:39:
         dc:a0:84:73:bc:af:db:95:06:9e:00:50:49:04:a2:cc:16:97:
         f7:21:25:db
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUAw1ueqZ3C1NXxqBGl4D7bNu5b9owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjQxMDdaFw0yNzA1MjEwNjQ2MDdaMDMxMTAvBgNV
BAMTKEM5RUFDNThDOEU1NkVFREY2OTRBNzQ0OTQzN0NFRTVBQzYzNDI5QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv0Fq7OY/KmcPMId66Zl014Jba
YfI6/FgvIJ+1OakTAWT9nPg9vcrwcwdWPC5PbvcpeW21n1qMblAmlr3RCvE/kU+N
8tA1Fd/40dkcTo/iflJIoOZwr5GCxATnbKOWc4B3R22nw+YG1xHtK4Yl5gRfP6E4
r47R/rozfuS2oN0EQFx5xYziN4EPjRwJu+9i1OTDoJck1V147F/qumAqptH47amh
SycShUMY5LHVIPhNGFTKVqfHeDNPe03ipPXy5h5TtMdoTXqKXOf6RBVZXxF6O63h
R4R6chsr4JpWOYuqrXoaWWZVp9iVtyH/Iixe8+WH6BAAJAotRSjA3QxC66uVAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUyerFjI5W7t9pSnRJQ3zuWsY0KaUwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0OTc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqpFjANBgkqhkiG9w0BAQsFAAOCAQEAKUuI
/IAOPOKTcC6MgWEXanxP72eFW5YX1med5mtz9/GDdQvptVUmTWdfLFESzlf5rsKj
5yqnbn1j8cRoNCqF3JHQXsNvrbWBOPsxJSLJ1EmMcq9t3JaS5cA8uKL4dv2+g22T
ITYUw/Pm9sTLIBDnm3taPdkhyb0ByJRu3b/9JxsCLUWAc4YesbGZXy484PVidIkI
UoaxVdy3iXuwQix7ydhuAaa2/v+6i5i0lJbwJC1gBdxmugB5dd3j5iULod+u5+Dw
rKgLQOugfR4OzaJgZyDrdh6o0QmNI5mZLjN0HMUclg7iEUyWF/I53KCEc7yv25UG
ngBQSQSizBaX9yEl2w==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:21 2026 by rpki-client