Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144003.roa
File:                     AS144003.roa (raw, json)
Hash identifier:          VWDt7C91EuywCH9RAcjt8ksnULiJW+HVYsLQJSz000k=
Subject key identifier:   30:2F:1B:3C:E2:D2:0F:B5:6D:42:82:11:E7:E2:3F:63:92:44:5D:1F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       63D1BB831B4601C843BD7496B6C4996AC78C3996
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144003.roa
Signing time:             Fri 22 May 2026 04:08:14 +0000
ROA not before:           Fri 22 May 2026 04:03:14 +0000
ROA not after:            Fri 21 May 2027 04:08:14 +0000
asID:                     144003
IP address blocks:        240a:a549::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:d1:bb:83:1b:46:01:c8:43:bd:74:96:b6:c4:99:6a:c7:8c:39:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:03:14 2026 GMT
            Not After : May 21 04:08:14 2027 GMT
        Subject: CN=302F1B3CE2D20FB56D428211E7E23F6392445D1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d4:23:98:b3:2a:16:64:12:bb:f7:08:cc:a8:
                    be:79:74:a3:ab:38:10:41:71:72:24:9c:4c:e9:13:
                    d3:8f:2e:8f:b9:86:ab:16:f5:9f:a3:4e:3d:ea:0f:
                    0e:1c:11:19:24:ff:5a:16:e2:b8:db:24:12:19:d9:
                    20:10:8e:76:37:60:cc:ec:cb:4d:77:1a:69:b9:bd:
                    54:57:86:35:d5:2f:e1:3b:4d:ad:69:cc:4a:94:1e:
                    e0:9e:0d:44:c5:79:5f:c9:79:a2:65:ff:49:b7:3e:
                    35:bd:41:79:2f:00:a5:b9:6b:ab:f2:18:bf:ee:60:
                    3a:61:07:17:1e:5c:b1:28:f7:4b:e0:c3:e1:27:db:
                    20:94:dd:2b:f1:2c:98:58:4b:77:1c:4a:a9:bb:0d:
                    28:df:83:d0:be:e1:e4:ce:fd:9e:d4:d1:8e:8b:12:
                    88:eb:2d:74:1c:dc:cb:a7:89:ad:03:1a:ae:cf:c2:
                    3c:1b:87:f9:59:13:29:54:2c:2c:8e:f4:53:25:39:
                    59:9e:b3:7c:72:80:c2:3c:44:45:d3:01:b7:e6:9b:
                    2f:5d:77:b7:f2:8a:c7:ca:47:56:47:09:71:6e:bb:
                    57:cb:82:0a:f8:ba:c3:27:3e:d9:40:e7:15:2f:48:
                    e6:dd:4c:a2:28:c3:ce:41:22:29:15:48:9b:92:1e:
                    f3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:2F:1B:3C:E2:D2:0F:B5:6D:42:82:11:E7:E2:3F:63:92:44:5D:1F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144003.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a549::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:d9:25:2b:ff:66:e1:ee:15:55:6e:4b:db:78:08:1d:4a:fd:
         fa:84:65:75:8b:01:4e:79:73:57:dd:6f:18:1b:68:8d:8c:ea:
         8c:90:27:fc:a8:34:11:58:d6:04:e8:23:8a:8f:4c:8a:68:a4:
         e1:89:e7:86:ac:e8:9d:8d:50:43:e0:64:59:2b:13:35:00:ea:
         a4:da:ca:19:fc:86:28:a2:fb:9b:94:78:cf:af:f2:71:54:3d:
         b8:eb:37:41:ca:43:f0:78:e0:49:3e:44:6c:79:50:cb:da:f8:
         4a:89:b7:f8:e3:73:b9:cb:93:e9:00:17:c5:76:21:97:05:70:
         05:14:29:be:22:10:15:7a:7a:f7:b0:2b:cd:fc:c3:37:76:50:
         c6:cc:dc:91:b4:6b:bf:d4:20:39:09:09:2c:f2:69:af:25:72:
         61:69:2e:24:70:cb:51:1a:5d:be:fa:0e:cd:22:4f:92:be:e2:
         fc:d3:03:b7:e4:4f:7c:80:5b:5c:bd:ec:fa:fc:df:b5:5c:2e:
         e1:98:0b:d5:8b:90:0a:b0:04:ef:7a:d6:a3:da:d2:6e:02:1c:
         ff:c4:a7:b7:0d:70:21:b0:59:77:1f:e2:40:f8:a7:3f:d8:22:
         b1:e9:da:33:8d:75:31:14:d9:92:b0:ef:96:ff:49:5b:48:61:
         bb:a0:e7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----