Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144032.roa
File:                     AS144032.roa (raw, json)
Hash identifier:          69XqZIxYDwg5jFWsZdW+kvs/TWiVnwbWEcjlBvplEpM=
Subject key identifier:   63:CE:5E:E6:B8:EA:59:01:B8:8B:19:8A:BA:0B:86:6F:4D:99:23:9B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       529C6F69A16EBC2993F53B5E9869E52507CBAE66
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144032.roa
Signing time:             Tue 26 May 2026 06:30:30 +0000
ROA not before:           Tue 26 May 2026 06:25:30 +0000
ROA not after:            Tue 25 May 2027 06:30:30 +0000
asID:                     144032
IP address blocks:        240a:a566::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:9c:6f:69:a1:6e:bc:29:93:f5:3b:5e:98:69:e5:25:07:cb:ae:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:30 2026 GMT
            Not After : May 25 06:30:30 2027 GMT
        Subject: CN=63CE5EE6B8EA5901B88B198ABA0B866F4D99239B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d8:00:36:58:28:e9:c9:17:ea:d0:13:42:80:
                    13:bb:26:34:58:9c:1f:20:b9:47:6b:30:53:ce:cb:
                    46:19:12:28:c6:54:15:fe:9d:17:46:4c:55:fd:6f:
                    a9:67:29:93:c7:f9:1a:03:3e:68:f9:fb:7d:37:51:
                    73:6a:b5:ff:98:dd:8e:5b:7f:71:a6:26:4a:0f:43:
                    1f:b4:62:63:47:f8:7e:56:9e:49:87:fb:66:5a:27:
                    9f:af:ec:d4:0c:03:9a:86:01:0a:6b:26:0e:65:c4:
                    c3:10:e2:30:3a:19:39:30:e4:69:c3:49:21:e8:b2:
                    36:8f:86:88:64:8e:2b:03:17:20:8f:1b:e4:16:92:
                    9f:7a:3a:7e:33:11:5a:f3:34:c3:fd:a3:de:ce:69:
                    79:6d:dc:e3:1e:a9:d1:46:50:6a:21:84:78:d8:cb:
                    cc:e7:27:8b:ad:41:a8:ca:41:82:3a:38:b8:d0:1f:
                    54:eb:d9:71:c9:a9:e7:58:db:03:99:fb:24:2d:64:
                    00:19:d9:3a:ca:79:f5:9a:ac:c7:c5:1e:5c:41:85:
                    92:da:4d:9c:1c:25:bd:d4:da:fa:c9:e9:39:b6:83:
                    fc:4b:e3:1f:28:17:8c:07:de:c9:d6:b3:11:fd:18:
                    ac:bf:6b:d0:07:9d:1f:a4:d6:c5:c9:90:9a:6c:d6:
                    0e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CE:5E:E6:B8:EA:59:01:B8:8B:19:8A:BA:0B:86:6F:4D:99:23:9B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a566::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:fc:bf:a3:27:04:82:3f:0d:1f:47:a5:eb:02:68:27:e6:68:
         12:b8:58:01:e1:e0:74:68:fa:28:01:f5:6c:43:11:cb:24:24:
         36:63:2a:a7:f5:29:94:9f:50:86:5b:28:1f:ee:08:97:a4:ba:
         95:60:89:22:d4:e9:b5:ce:67:b7:93:43:0d:a7:a6:d1:e8:94:
         8c:c5:bf:18:f4:4a:25:4b:14:31:bb:4f:24:ef:7e:ba:7b:53:
         05:6b:1a:81:c3:93:59:b2:0d:cd:24:d3:e8:92:45:12:70:2f:
         7f:a3:49:d1:42:18:64:bb:1d:21:38:81:ba:bf:fc:08:be:31:
         06:5d:cf:ad:e2:5c:4c:d9:ea:3c:43:16:b0:3a:f8:07:e7:13:
         50:08:92:6d:cd:23:d0:a3:08:a0:47:fe:fd:09:89:cb:bc:54:
         51:c7:9f:35:53:73:56:e3:c5:ca:af:e6:7c:2d:be:82:fd:47:
         0b:6c:b3:d6:11:4d:83:6a:04:ae:ec:03:ea:b9:e8:cc:a4:7e:
         75:b4:e9:09:79:e3:e7:0a:71:ff:5a:94:91:cb:80:b4:84:f2:
         83:ba:1d:6d:87:72:ac:72:87:c6:82:4a:3b:ac:a6:ae:c1:95:
         56:5f:09:68:d1:aa:f9:63:13:4f:6d:07:c2:87:4d:39:69:85:
         65:c1:b1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----