Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144981.roa
File:                     AS144981.roa (raw, json)
Hash identifier:          6ES1AraS+MdvdngoxJ5H6gXdieVFPz+HE4OX9t1KOlM=
Subject key identifier:   93:F4:EE:EA:CD:F0:8C:F7:E1:E5:44:EF:CE:22:2F:A7:72:2B:EA:DD
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       204BC9F02F87C376981DABA9C184D82E8521632D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144981.roa
Signing time:             Fri 22 May 2026 06:46:25 +0000
ROA not before:           Fri 22 May 2026 06:41:25 +0000
ROA not after:            Fri 21 May 2027 06:46:25 +0000
asID:                     144981
IP address blocks:        240a:a91b::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:4b:c9:f0:2f:87:c3:76:98:1d:ab:a9:c1:84:d8:2e:85:21:63:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:25 2026 GMT
            Not After : May 21 06:46:25 2027 GMT
        Subject: CN=93F4EEEACDF08CF7E1E544EFCE222FA7722BEADD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2f:7a:f5:e5:8b:26:7e:4f:b1:47:79:a8:a4:
                    97:80:30:55:58:c8:81:3d:86:4b:16:21:e3:9d:0e:
                    c1:67:f9:4b:ee:4f:10:bc:76:fe:1b:e3:7e:e6:80:
                    6e:70:27:bf:32:ef:19:ed:17:fc:7d:b0:e8:38:8e:
                    9f:b1:85:92:68:2d:b6:94:a5:f9:80:b5:31:a3:aa:
                    c1:65:ba:5c:05:be:77:64:5e:58:9a:18:e5:45:1e:
                    56:5e:15:b9:62:92:55:fb:d8:54:38:6c:4a:fe:35:
                    18:50:d4:2b:12:9e:c3:98:ae:93:54:18:6a:6b:cd:
                    b8:e0:f6:32:4d:6d:c0:ba:eb:29:a5:c3:db:d9:6f:
                    e4:b6:23:c5:b5:fe:8d:52:a9:fd:82:15:8b:bc:4e:
                    c5:3c:18:c4:68:f0:d0:b0:ec:34:9c:04:fa:d9:a8:
                    d5:91:47:c8:a2:eb:aa:3f:65:d1:01:3f:c7:bc:a5:
                    9a:4c:94:56:02:8a:ec:ef:a6:92:82:c4:55:fb:16:
                    b5:29:72:68:34:0a:71:e9:34:69:0e:48:5c:cf:58:
                    50:bd:a6:f9:3d:f8:d3:93:03:6a:84:42:7c:6e:af:
                    5e:8f:1a:42:6e:98:8d:61:24:44:85:a2:16:25:7e:
                    52:2b:e8:de:4a:46:21:b1:ec:95:de:2f:81:a6:56:
                    0c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F4:EE:EA:CD:F0:8C:F7:E1:E5:44:EF:CE:22:2F:A7:72:2B:EA:DD
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144981.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a91b::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:0a:1a:47:1f:39:f0:a7:31:7d:8d:77:2c:27:57:fb:81:27:
         e3:ff:58:57:7f:6c:10:c4:15:1f:11:3a:06:e9:b1:47:c7:27:
         1d:a6:c9:eb:a5:6d:60:bd:ea:58:0b:73:77:6b:69:b0:1c:d1:
         f1:78:91:b5:9d:b1:57:ba:97:9a:c5:ed:15:22:9f:91:1e:12:
         bf:cf:35:9a:b4:d2:c3:37:76:63:ba:e1:f3:b2:87:f9:53:0d:
         36:9e:7a:41:61:70:db:40:45:d0:1d:f7:43:cd:50:0b:81:ee:
         86:98:19:16:f0:63:4e:aa:54:4a:66:60:a8:ad:1e:71:b8:d4:
         58:d4:43:26:3c:a6:14:1b:87:f8:a5:65:44:df:2f:5a:3a:10:
         63:93:74:98:cf:89:c5:9d:4a:83:0f:0c:ca:16:3f:5a:d2:e3:
         f5:bd:9c:ab:f6:eb:29:6b:e1:30:9c:31:04:17:7e:4d:8e:33:
         37:c3:0a:80:ba:90:a5:a4:38:4d:c3:75:90:dc:23:17:76:96:
         04:cd:c5:85:d5:e2:b9:78:f8:b5:c7:b2:0d:2d:fe:76:f4:28:
         5e:18:35:77:7d:3d:2b:65:08:2a:b1:c2:3a:d3:c9:11:eb:e2:
         68:26:f4:80:ad:24:2c:3b:32:71:58:4b:89:95:e4:3a:67:e3:
         ef:fc:9b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:24:33 2026 by rpki-client