Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144024.roa
File:                     AS144024.roa (raw, json)
Hash identifier:          tRgKcbChxubu6l6/989sjQFlxXIbyF4/RD9aoDTldTs=
Subject key identifier:   64:67:9E:EC:9E:0D:D1:E3:BB:2A:98:04:44:02:B8:80:2A:6C:C8:2E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       283F69DF02C73BB4F6BC2A6E11600083CE2F3A4C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144024.roa
Signing time:             Mon 25 May 2026 01:20:24 +0000
ROA not before:           Mon 25 May 2026 01:15:24 +0000
ROA not after:            Mon 24 May 2027 01:20:24 +0000
asID:                     144024
IP address blocks:        240a:a55e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:3f:69:df:02:c7:3b:b4:f6:bc:2a:6e:11:60:00:83:ce:2f:3a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:15:24 2026 GMT
            Not After : May 24 01:20:24 2027 GMT
        Subject: CN=64679EEC9E0DD1E3BB2A98044402B8802A6CC82E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c7:7e:8f:12:a0:c3:c2:c5:96:9d:23:5a:c7:
                    1f:d5:e3:de:ca:c8:78:89:e2:bb:e9:4a:54:a0:82:
                    3f:25:9a:9f:97:a5:11:fe:91:0a:79:71:8b:cb:a4:
                    f4:67:9b:85:ce:6b:aa:77:8c:ec:10:0d:2b:fc:fd:
                    e0:c4:13:de:11:f9:8d:d8:d0:7f:17:48:34:2d:32:
                    a5:ea:c6:08:7b:16:fe:1a:2d:dc:a5:93:01:47:97:
                    9b:f9:dc:71:5d:be:be:ea:5b:69:25:a9:81:b1:95:
                    fc:ea:25:2d:ab:98:91:46:44:c7:fe:66:58:cf:06:
                    ad:e6:f4:a4:c8:b0:b8:04:13:d2:b2:08:f8:c6:93:
                    89:84:fb:8f:3f:a1:8b:1f:4c:82:fa:0e:b1:07:ee:
                    26:fc:30:29:2f:53:bf:19:fc:dd:0d:97:dc:21:0f:
                    ff:86:f2:2a:7d:a7:d8:3a:2c:e2:83:ec:cb:5f:50:
                    71:5d:6f:ed:18:4c:46:34:cd:1d:9b:fa:5f:6d:10:
                    1d:4f:93:4f:8a:6e:dc:8b:2d:95:29:1c:8e:f8:36:
                    1e:63:1e:95:d0:5c:96:02:8e:d6:57:30:fb:24:21:
                    3e:d3:17:f3:81:45:a4:49:84:8f:b4:f9:3b:77:8c:
                    57:ec:a1:8e:43:2b:4b:a2:c8:be:ed:43:07:a0:8e:
                    63:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:67:9E:EC:9E:0D:D1:E3:BB:2A:98:04:44:02:B8:80:2A:6C:C8:2E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144024.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a55e::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:b3:29:06:73:05:dc:75:7f:56:7d:0f:bd:74:aa:95:84:04:
         6c:d0:7f:ed:5f:37:12:cf:20:ae:52:22:5a:f7:4f:38:87:01:
         8e:fe:f6:e6:26:c6:85:02:eb:37:4c:bf:0f:a3:53:04:15:09:
         98:0e:63:2c:c2:44:28:70:26:10:36:1d:7e:dd:86:ba:ed:4e:
         d7:e0:b0:e2:ea:7c:23:09:8c:89:8d:a1:34:1a:bb:d7:ef:14:
         b4:5c:13:eb:f5:ec:f1:16:d1:1f:db:9a:11:33:59:65:d4:a1:
         a3:be:b5:02:75:8b:42:07:f9:5d:c3:b4:0a:64:86:3c:d0:fe:
         72:7b:28:ca:28:3c:29:11:b9:e4:3b:89:c4:a9:11:1b:a4:eb:
         0b:dd:c6:0f:ed:fe:64:f3:07:7c:a0:7e:65:e2:bd:25:c4:12:
         0f:a3:6e:42:7b:b3:04:24:03:82:34:1c:c3:99:c5:bb:96:10:
         75:1e:cb:32:db:25:b9:1a:d9:25:6c:75:1f:dd:82:b3:4a:25:
         37:a7:6b:8d:03:69:07:1d:8e:4c:91:d2:71:54:e6:eb:e6:7b:
         55:c4:1c:60:ca:67:9d:42:70:ee:b9:da:94:1c:96:e4:f4:df:
         f2:a0:d7:5f:97:d2:ce:97:e0:a8:98:7e:d2:f7:d1:70:3e:71:
         fa:30:50:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----