Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144026.roa
File:                     AS144026.roa (raw, json)
Hash identifier:          GhWr/NL3mW1u5beSFjCKQ740JCh6uPGbCxzEdWU5UbI=
Subject key identifier:   E5:AE:6E:00:3D:A5:03:B1:4E:0D:1B:FE:16:EC:F9:FC:CC:15:1A:51
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5E04BA4BCF6A60C829140D22C427513AFE7D8272
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144026.roa
Signing time:             Fri 22 May 2026 06:05:34 +0000
ROA not before:           Fri 22 May 2026 06:00:34 +0000
ROA not after:            Fri 21 May 2027 06:05:34 +0000
asID:                     144026
IP address blocks:        240a:a560::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:04:ba:4b:cf:6a:60:c8:29:14:0d:22:c4:27:51:3a:fe:7d:82:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:00:34 2026 GMT
            Not After : May 21 06:05:34 2027 GMT
        Subject: CN=E5AE6E003DA503B14E0D1BFE16ECF9FCCC151A51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:12:49:03:48:9c:fe:16:54:80:59:67:f1:49:
                    b1:b1:a1:a8:f0:5c:06:57:4a:dd:1e:4e:fa:4c:83:
                    51:24:6e:19:fe:db:26:89:e6:7c:69:c3:bb:8b:69:
                    b5:ab:db:6e:dc:b3:fd:33:22:30:a5:b1:38:46:3c:
                    25:35:5b:dc:55:71:fa:f5:b5:11:47:e6:72:89:9d:
                    1c:12:92:e7:df:8d:b3:49:e2:ba:61:db:ec:76:1f:
                    de:1c:fe:e7:dd:49:38:00:08:7a:5a:e6:76:48:07:
                    a0:73:c1:8c:c4:17:81:72:84:c2:aa:92:4a:f8:05:
                    a9:e2:f3:7a:ca:90:5c:98:d8:fe:a9:7a:35:ba:aa:
                    5c:8b:1a:0e:bd:46:69:25:9e:2b:31:26:d3:4a:91:
                    ef:06:a8:5a:45:5b:a8:b9:70:38:0d:9e:ca:a4:d7:
                    94:64:cf:9d:b7:3d:2c:ce:a0:ea:4a:ec:9f:67:3e:
                    b6:67:f0:71:bd:e1:a5:1e:83:49:ab:95:97:9d:c3:
                    95:bc:51:06:47:c8:6d:11:da:2d:ec:dd:2c:fa:1a:
                    42:00:8f:da:f2:ab:1e:49:b5:6f:35:b2:c3:7a:15:
                    1d:3e:f2:de:21:91:d9:57:f3:96:a2:b1:40:88:72:
                    35:4e:54:62:fb:6a:48:cf:16:75:21:d3:47:0d:fe:
                    b4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:AE:6E:00:3D:A5:03:B1:4E:0D:1B:FE:16:EC:F9:FC:CC:15:1A:51
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144026.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a560::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:d9:0e:5c:07:23:02:99:6a:bb:8d:13:e7:a5:0f:8d:7a:db:
         55:5c:47:22:b4:ed:be:e0:1f:1d:fb:6e:27:6f:f2:c4:e1:5c:
         ac:42:8b:c3:68:9b:05:8a:8a:1a:58:1f:d6:6a:6f:e3:d1:cb:
         3d:6a:4b:48:a9:6f:ba:83:f3:ea:00:fe:ea:3e:5b:4b:83:ec:
         02:32:4b:90:d7:b2:a7:97:18:2b:db:06:95:6d:23:2f:ea:13:
         33:a0:48:db:0b:a2:19:ae:34:76:2a:d2:00:1d:49:98:21:09:
         da:07:8f:ba:f0:7d:e3:86:d6:2c:84:d6:9b:1c:88:ef:e6:0d:
         5c:8f:cc:1e:d7:ab:ec:b7:ee:94:6b:81:cb:69:04:ca:ca:e8:
         b7:0a:b3:3f:90:e1:07:dc:6a:02:31:a5:5c:56:a0:a9:19:50:
         c1:d3:33:6f:93:07:fc:34:41:d9:c4:b0:d4:74:fc:92:e6:81:
         20:cd:4f:21:bb:84:9e:51:45:a7:da:4e:a0:a6:36:36:7b:bc:
         00:16:3a:e3:0e:77:ed:9c:66:5d:db:d9:4e:95:a2:06:85:c1:
         11:d2:39:a0:62:25:06:c0:6e:6a:8f:2b:ff:3d:40:24:c7:13:
         c5:14:48:4f:30:6f:fd:8f:eb:b6:5c:60:49:72:79:a6:3a:5f:
         24:66:60:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:50 2026 by rpki-client