Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144075.roa
File:                     AS144075.roa (raw, json)
Hash identifier:          EmsHbcVYFaFTOSDi+NMi0Y0sEqeZ26dLwikiGvM3fqY=
Subject key identifier:   7A:C0:C7:7E:6B:16:D9:34:15:DA:AD:76:91:2C:30:28:3F:6C:9E:5E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3D4F30247CC38DD8BFF91402A48093E3386771CF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144075.roa
Signing time:             Tue 26 May 2026 01:13:32 +0000
ROA not before:           Tue 26 May 2026 01:08:32 +0000
ROA not after:            Tue 25 May 2027 01:13:32 +0000
asID:                     144075
IP address blocks:        240a:a591::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:4f:30:24:7c:c3:8d:d8:bf:f9:14:02:a4:80:93:e3:38:67:71:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:08:32 2026 GMT
            Not After : May 25 01:13:32 2027 GMT
        Subject: CN=7AC0C77E6B16D93415DAAD76912C30283F6C9E5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e2:41:54:8f:fb:58:ad:a9:fd:62:11:25:dc:
                    18:93:32:14:be:ed:b5:44:e2:8e:53:9f:2c:78:e4:
                    ed:df:a0:6d:de:31:99:31:5d:9c:49:d4:81:c4:86:
                    c8:16:50:14:a3:40:24:e9:c8:d5:6c:ee:4c:6e:44:
                    fc:93:0a:d6:50:ee:fe:f0:c3:b7:cc:28:73:9c:1a:
                    99:d7:e3:21:29:70:79:a9:8a:92:2c:34:ce:77:be:
                    37:02:82:ed:de:e9:82:bc:92:2a:a7:67:33:4d:a3:
                    80:19:9f:46:31:1d:be:01:4b:1e:7f:39:ef:21:b5:
                    1f:17:fd:cc:80:51:f0:a7:68:f4:a7:a7:3b:3b:fa:
                    d4:cf:52:90:80:a7:e7:c4:11:1a:cf:3c:fd:62:09:
                    68:60:0e:ef:fd:9a:d9:b4:82:f3:6d:b1:d4:b6:aa:
                    70:16:19:da:2a:2a:16:36:0c:06:81:db:cf:2f:86:
                    0d:72:0e:d5:1c:e7:16:55:80:ff:28:11:9b:24:fc:
                    7e:63:37:6f:8f:44:74:dd:a0:db:e2:6f:e6:95:ad:
                    1b:30:6e:3c:33:0a:cc:ab:43:a4:35:32:b7:e9:c0:
                    0d:d3:ef:0b:25:ee:00:61:b2:e9:62:38:13:e4:2a:
                    57:f0:e7:54:12:1c:58:36:0b:21:a6:9f:40:b8:1c:
                    70:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C0:C7:7E:6B:16:D9:34:15:DA:AD:76:91:2C:30:28:3F:6C:9E:5E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144075.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a591::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:a3:1f:c7:0e:e5:af:9d:22:79:b0:f3:f7:da:f6:4d:c5:89:
         9c:ee:27:75:98:e6:0c:21:cc:61:34:9d:a0:fa:cd:1d:cd:33:
         bd:35:fe:12:0e:f2:ba:4a:1f:9d:bb:12:3f:1d:51:7a:79:4d:
         de:c1:d7:b6:76:03:4b:45:28:5d:f6:74:fd:74:51:ac:0b:14:
         5c:26:16:79:ed:db:d0:b0:e3:d8:11:f6:c6:89:62:66:d2:c1:
         55:80:11:df:32:87:db:d2:a9:12:2b:90:15:74:56:08:ee:2a:
         77:3d:a4:67:c7:c2:f1:47:34:bc:bf:87:e5:d6:bc:8c:f8:2e:
         15:61:d2:6e:6e:19:9e:6d:68:ff:ad:02:cc:22:2e:d8:96:64:
         d5:00:5e:46:a8:f7:e6:d8:58:6a:ad:4e:d7:82:7f:8c:5c:13:
         44:bf:28:49:6d:67:ec:3c:c3:9d:15:5b:9e:c6:6f:52:25:6f:
         bb:f4:bc:68:bc:65:f8:ae:eb:38:e2:ca:c1:68:31:ee:29:ba:
         c1:b2:64:3a:28:10:46:e6:d1:25:1c:6c:dc:6b:05:35:06:20:
         b7:16:11:f8:02:9e:3c:90:da:84:c5:84:2f:2b:50:21:7c:05:
         34:59:15:70:43:4e:cc:9c:aa:a7:25:7a:be:2b:4a:71:8f:9b:
         57:6b:0b:ae
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUPU8wJHzDjdi/+RQCpICT4zhncc8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMTA4MzJaFw0yNzA1MjUwMTEzMzJaMDMxMTAvBgNV
BAMTKDdBQzBDNzdFNkIxNkQ5MzQxNURBQUQ3NjkxMkMzMDI4M0Y2QzlFNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy4kFUj/tYran9YhEl3BiTMhS+
7bVE4o5Tnyx45O3foG3eMZkxXZxJ1IHEhsgWUBSjQCTpyNVs7kxuRPyTCtZQ7v7w
w7fMKHOcGpnX4yEpcHmpipIsNM53vjcCgu3e6YK8kiqnZzNNo4AZn0YxHb4BSx5/
Oe8htR8X/cyAUfCnaPSnpzs7+tTPUpCAp+fEERrPPP1iCWhgDu/9mtm0gvNtsdS2
qnAWGdoqKhY2DAaB288vhg1yDtUc5xZVgP8oEZsk/H5jN2+PRHTdoNvib+aVrRsw
bjwzCsyrQ6Q1MrfpwA3T7wsl7gBhsuliOBPkKlfw51QSHFg2CyGmn0C4HHBJAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUesDHfmsW2TQV2q12kSwwKD9snl4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MDc1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqlkTANBgkqhkiG9w0BAQsFAAOCAQEABaMf
xw7lr50iebDz99r2TcWJnO4ndZjmDCHMYTSdoPrNHc0zvTX+Eg7yukofnbsSPx1R
enlN3sHXtnYDS0UoXfZ0/XRRrAsUXCYWee3b0LDj2BH2xoliZtLBVYAR3zKH29Kp
EiuQFXRWCO4qdz2kZ8fC8Uc0vL+H5da8jPguFWHSbm4Znm1o/60CzCIu2JZk1QBe
Rqj35thYaq1O14J/jFwTRL8oSW1n7DzDnRVbnsZvUiVvu/S8aLxl+K7rOOLKwWgx
7im6wbJkOigQRubRJRxs3GsFNQYgtxYR+AKePJDahMWELytQIXwFNFkVcENOzJyq
pyV6vitKcY+bV2sLrg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:39 2026 by rpki-client