Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144052.roa
File:                     AS144052.roa (raw, json)
Hash identifier:          1lhVJhBEvp++HTQrtulPE6d0zIas/0BLvmEpdmKwTKg=
Subject key identifier:   76:F8:5F:36:94:9F:55:61:A1:1D:15:76:E3:FB:7E:EF:7E:65:B8:A2
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       617ECD89815E8CB852F6364F842AA8D359BB57E9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144052.roa
Signing time:             Fri 22 May 2026 06:58:18 +0000
ROA not before:           Fri 22 May 2026 06:53:18 +0000
ROA not after:            Fri 21 May 2027 06:58:18 +0000
asID:                     144052
IP address blocks:        240a:a57a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:7e:cd:89:81:5e:8c:b8:52:f6:36:4f:84:2a:a8:d3:59:bb:57:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:18 2026 GMT
            Not After : May 21 06:58:18 2027 GMT
        Subject: CN=76F85F36949F5561A11D1576E3FB7EEF7E65B8A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d3:32:a9:e7:3c:0f:df:5d:e0:37:d1:7b:35:
                    da:7d:dd:53:6d:cf:75:ab:34:a4:43:2e:a5:59:98:
                    3c:cd:17:ba:ed:38:be:fa:c5:c2:3e:c6:aa:bc:80:
                    a3:ae:bc:d1:7d:ff:52:64:a9:22:49:61:d5:83:75:
                    95:75:7a:3f:ae:16:5b:e1:29:f2:14:3e:2b:bc:25:
                    02:20:21:02:92:97:fc:bb:15:15:68:d7:d4:05:3a:
                    23:d2:5e:15:d1:cb:d8:e2:6c:4f:aa:65:25:6e:47:
                    62:2e:0b:68:96:fd:6e:0e:ed:82:38:cd:6f:a6:ec:
                    b7:cf:5f:81:6f:31:ff:5e:b6:a9:d2:00:d3:ac:2d:
                    30:21:79:8c:c2:1e:2d:df:7a:ad:d4:a6:fa:63:e0:
                    76:b1:15:34:9d:9c:54:69:3a:36:81:a5:95:4d:c6:
                    42:4a:27:cc:87:0c:2c:ca:41:53:b8:04:84:2a:9e:
                    e5:a1:cc:ff:af:3a:c7:be:c4:04:62:c1:94:02:f4:
                    50:b8:50:80:b5:47:7e:ba:19:1f:0b:48:5c:be:d2:
                    59:3d:92:ac:47:73:27:ed:ec:58:70:da:59:80:7c:
                    bb:58:b5:be:d3:f5:5b:fb:03:57:cb:cb:d8:66:f0:
                    2a:3c:c1:e7:44:a2:11:08:10:bc:6b:36:02:c5:e6:
                    f9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F8:5F:36:94:9F:55:61:A1:1D:15:76:E3:FB:7E:EF:7E:65:B8:A2
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144052.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a57a::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:e9:24:dd:70:ce:76:af:18:d5:cb:81:3e:0c:43:ff:f2:1a:
         69:b7:62:cb:24:4a:7a:aa:43:92:db:20:f9:35:15:a0:b4:f4:
         ed:f7:0b:e7:6f:91:a3:3f:ef:91:0b:7d:ad:76:6f:b4:1d:06:
         1e:08:a3:76:5b:56:72:c5:b9:b2:4e:5b:30:4a:bb:9c:f4:cf:
         db:e5:1d:36:ad:e0:03:fa:3b:2d:8c:e6:5f:a5:ed:f7:b2:61:
         dd:8f:8a:d1:9a:22:9c:9d:09:16:a6:99:ce:cc:72:94:c5:77:
         c0:e5:e7:f7:0f:7a:df:c1:55:b1:14:40:2a:76:25:24:5e:52:
         cb:b4:01:86:d3:2c:34:43:5c:59:a1:e2:89:7d:97:42:33:9d:
         95:04:d1:ac:dd:be:6f:c9:72:62:23:02:e0:46:03:4b:60:3e:
         89:66:b3:1b:43:a1:43:f8:47:bd:0e:c3:4c:5a:56:e4:e1:ab:
         39:e5:28:32:9b:92:07:c9:45:8e:7e:7d:b2:d5:76:15:93:3c:
         e4:44:4b:85:f9:d2:15:2c:d4:98:ab:eb:51:61:90:06:31:fc:
         44:3c:90:84:6c:7c:69:b6:b5:d6:fd:b9:08:2b:ed:be:50:59:
         ac:3e:63:cd:70:26:35:01:6a:4c:1b:3f:ec:20:48:80:a6:0f:
         f1:1e:c8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:36 2026 by rpki-client