Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144053.roa
File:                     AS144053.roa (raw, json)
Hash identifier:          Cci8xoAW+pWeeYCyf4od5h1GlxkiI69Qtnn4TjIs/zI=
Subject key identifier:   23:14:3D:A8:F3:80:19:05:63:9B:40:65:D2:48:6A:B1:7B:95:2A:31
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6A15EDEF0E6185BB6829CF3BEC597A20541A49C2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144053.roa
Signing time:             Fri 22 May 2026 07:32:05 +0000
ROA not before:           Fri 22 May 2026 07:27:05 +0000
ROA not after:            Fri 21 May 2027 07:32:05 +0000
asID:                     144053
IP address blocks:        240a:a57b::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:15:ed:ef:0e:61:85:bb:68:29:cf:3b:ec:59:7a:20:54:1a:49:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:05 2026 GMT
            Not After : May 21 07:32:05 2027 GMT
        Subject: CN=23143DA8F3801905639B4065D2486AB17B952A31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ab:1f:5e:1f:ac:4a:a5:d9:f3:9d:a1:7f:70:
                    80:ac:40:15:2e:df:08:3e:8d:d7:25:e1:eb:54:ec:
                    d9:72:e3:d9:32:5b:fd:e3:26:2f:dd:6d:f2:69:2b:
                    c1:10:d5:bf:06:c5:e1:d6:df:7b:3c:ce:1b:84:88:
                    92:94:42:54:af:89:bf:6b:c3:ec:08:fb:e9:91:78:
                    b5:22:4b:d1:ee:cd:15:f3:8f:4d:db:6d:26:be:d5:
                    12:c8:c3:00:6d:28:c6:4a:ea:a6:a1:bd:84:ed:2b:
                    41:45:f3:ff:97:e8:82:2b:31:b9:91:69:ea:61:47:
                    ee:64:ab:52:4c:ea:90:32:ab:f0:12:45:45:d6:fb:
                    81:87:19:2e:ed:67:a4:d5:35:91:90:32:a2:9c:aa:
                    61:a3:62:9a:67:35:15:19:f4:6a:e3:d3:40:41:b6:
                    a1:c8:38:6c:14:7c:08:4c:40:7e:b2:91:a9:2f:1b:
                    dd:c5:9f:11:c1:b2:31:36:23:09:71:fb:94:53:2a:
                    32:fa:7b:8a:38:05:3f:5f:2b:0f:c1:3e:4c:3d:74:
                    bc:7f:e4:59:c2:48:b9:3d:6e:ad:b3:72:57:8b:39:
                    d8:13:2b:3e:4b:42:d3:bf:36:f4:75:27:88:46:7c:
                    ee:b0:89:d3:a4:2d:c5:b0:97:e1:98:64:19:39:cf:
                    01:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:14:3D:A8:F3:80:19:05:63:9B:40:65:D2:48:6A:B1:7B:95:2A:31
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144053.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a57b::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:36:29:48:13:0a:f1:f1:29:fc:98:6d:9c:67:30:80:84:cb:
         0a:6b:72:65:ef:3a:26:03:51:9e:5f:57:bc:fd:33:7b:8d:47:
         21:dc:fa:22:16:82:b5:f6:50:58:e1:55:40:aa:17:a7:79:93:
         d0:9f:45:f6:60:45:c9:e9:e2:e8:d1:51:99:fd:5b:c0:ad:f6:
         ae:7e:a2:93:51:da:85:a7:73:67:dd:22:65:ab:74:4e:8d:d1:
         cd:ef:d8:4d:c9:b5:c1:4a:6e:1d:e8:c8:a0:c5:12:a7:62:99:
         58:7a:10:2f:c9:bf:25:1e:16:d9:ef:9e:65:a3:77:0a:b1:f3:
         63:93:76:ee:69:97:29:1e:84:11:3e:75:a0:18:ac:ea:27:d8:
         de:70:62:47:37:cd:34:f8:f3:6d:1d:2f:c4:f4:b7:61:99:8a:
         2e:8c:c9:5e:19:b1:ed:be:db:77:f9:1d:9e:67:34:26:86:6e:
         29:e5:5d:95:11:64:f0:58:0b:89:46:c2:58:79:1e:4a:bc:05:
         dc:d3:36:c7:cc:b3:e9:94:b9:e4:b3:b1:49:8d:a1:05:a6:3b:
         25:b1:ad:37:d8:ea:ad:73:5e:d8:2b:f9:57:f3:35:a0:22:51:
         c5:87:bb:5f:10:77:83:86:66:e9:28:af:14:1d:e9:e9:70:75:
         74:d6:fc:7c
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUahXt7w5hhbtoKc877Fl6IFQaScIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzI3MDVaFw0yNzA1MjEwNzMyMDVaMDMxMTAvBgNV
BAMTKDIzMTQzREE4RjM4MDE5MDU2MzlCNDA2NUQyNDg2QUIxN0I5NTJBMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRqx9eH6xKpdnznaF/cICsQBUu
3wg+jdcl4etU7Nly49kyW/3jJi/dbfJpK8EQ1b8GxeHW33s8zhuEiJKUQlSvib9r
w+wI++mReLUiS9HuzRXzj03bbSa+1RLIwwBtKMZK6qahvYTtK0FF8/+X6IIrMbmR
aephR+5kq1JM6pAyq/ASRUXW+4GHGS7tZ6TVNZGQMqKcqmGjYppnNRUZ9Grj00BB
tqHIOGwUfAhMQH6ykakvG93FnxHBsjE2Iwlx+5RTKjL6e4o4BT9fKw/BPkw9dLx/
5FnCSLk9bq2zcleLOdgTKz5LQtO/NvR1J4hGfO6widOkLcWwl+GYZBk5zwE3AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUIxQ9qPOAGQVjm0Bl0khqsXuVKjEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MDUzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqlezANBgkqhkiG9w0BAQsFAAOCAQEAczYp
SBMK8fEp/JhtnGcwgITLCmtyZe86JgNRnl9XvP0ze41HIdz6IhaCtfZQWOFVQKoX
p3mT0J9F9mBFyeni6NFRmf1bwK32rn6ik1HahadzZ90iZat0To3Rze/YTcm1wUpu
HejIoMUSp2KZWHoQL8m/JR4W2e+eZaN3CrHzY5N27mmXKR6EET51oBis6ifY3nBi
RzfNNPjzbR0vxPS3YZmKLozJXhmx7b7bd/kdnmc0JoZuKeVdlRFk8FgLiUbCWHke
SrwF3NM2x8yz6ZS55LOxSY2hBaY7JbGtN9jqrXNe2Cv5V/M1oCJRxYe7XxB3g4Zm
6SivFB3p6XB1dNb8fA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:49 2026 by rpki-client