Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144992.roa
File:                     AS144992.roa (raw, json)
Hash identifier:          s6ToNwf0dB1XDAEE28fD1qMLvcQaWBUwl2xg+wAxzY0=
Subject key identifier:   8B:17:B1:6D:36:36:BB:5D:CE:1D:A0:FA:D1:08:B6:C4:47:5D:37:7A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6EA9258BFC153B74533A65FAE37B2DD541A10822
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144992.roa
Signing time:             Tue 26 May 2026 06:30:39 +0000
ROA not before:           Tue 26 May 2026 06:25:39 +0000
ROA not after:            Tue 25 May 2027 06:30:39 +0000
asID:                     144992
IP address blocks:        240a:a926::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:a9:25:8b:fc:15:3b:74:53:3a:65:fa:e3:7b:2d:d5:41:a1:08:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:39 2026 GMT
            Not After : May 25 06:30:39 2027 GMT
        Subject: CN=8B17B16D3636BB5DCE1DA0FAD108B6C4475D377A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:86:72:06:70:54:78:51:f2:4d:79:ca:5b:d7:
                    2d:2e:6d:9c:09:82:7a:be:0c:c8:da:c1:bb:95:a3:
                    2c:d7:47:a7:95:19:61:1a:5a:5f:3a:98:b3:98:01:
                    d7:db:c0:4d:bf:e3:6c:b3:7a:71:70:d6:84:86:17:
                    8e:c5:aa:48:28:43:65:05:b1:1f:c9:93:30:4f:2b:
                    48:a4:0d:c3:5d:62:c9:1d:11:62:fb:9a:a5:40:6f:
                    88:0f:bd:c5:cf:ed:3d:74:80:a4:dd:48:33:ac:3f:
                    f8:4f:d6:84:3a:a2:e4:f3:66:4c:31:9d:fd:b4:0c:
                    5d:8d:94:28:3f:7b:2b:b1:d8:0c:a7:bb:0a:d8:a3:
                    ff:a1:f2:01:41:b6:a6:83:f7:b2:5a:9e:76:68:f7:
                    a2:5d:e4:7d:77:a2:f9:3b:52:1f:43:49:7d:e2:e2:
                    ab:4c:58:65:12:76:bc:81:80:3c:25:be:01:8f:55:
                    91:d3:82:f6:e9:8d:ca:16:0d:8c:1e:4f:81:76:f9:
                    62:5f:e6:2e:65:14:76:04:6c:90:e8:86:93:73:c5:
                    79:b4:5c:2b:10:34:a5:0b:be:81:2b:5e:ba:b0:af:
                    ce:40:76:4b:a3:50:83:d8:37:a1:2a:1e:51:0a:ba:
                    83:6b:a6:a2:01:1c:6c:3f:23:7f:31:6a:79:42:5c:
                    02:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:17:B1:6D:36:36:BB:5D:CE:1D:A0:FA:D1:08:B6:C4:47:5D:37:7A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144992.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a926::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:1d:fc:6a:62:8c:3f:85:4b:29:b2:32:79:92:89:a3:fd:02:
         a2:9d:b0:51:4d:7d:b0:e5:fc:bb:6b:9f:d9:57:60:f1:c2:94:
         1b:c1:f4:9d:66:1e:e8:e8:ee:f6:92:0c:c7:45:27:29:48:3f:
         54:db:dd:6b:23:7d:d1:24:f1:be:c8:cd:5d:7e:a3:95:ff:cf:
         b3:de:4d:92:54:f8:71:16:7c:56:f7:d7:80:85:0b:c9:d1:b3:
         40:59:73:16:5b:61:6c:f8:ac:eb:5c:a7:65:f3:76:cb:e5:86:
         45:7b:c9:ba:f4:14:e4:f5:70:eb:1b:d9:bc:68:cb:14:d5:04:
         e6:55:c3:c7:9e:52:a7:b0:1c:4c:27:04:62:f2:c8:e0:a7:b9:
         0d:99:7d:db:f1:1e:47:18:a2:dd:86:85:91:48:77:2f:ab:0a:
         e3:02:99:62:a0:5c:6b:ed:86:db:f1:4f:f9:4f:52:1c:25:bd:
         7d:ce:ea:e1:ed:bd:67:45:b4:82:de:7f:66:c9:de:85:37:5a:
         57:dd:fe:ff:3c:5a:d3:dd:f4:6d:be:8b:fa:05:3e:0a:2c:72:
         8e:f0:a1:1b:1e:2d:03:ff:f9:74:d3:65:4f:32:46:ce:bd:7c:
         4b:62:51:c6:3f:31:45:11:5e:21:fa:bc:83:f2:d1:a1:22:ff:
         08:17:b2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:41 2026 by rpki-client