Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144076.roa
File:                     AS144076.roa (raw, json)
Hash identifier:          3A9JNB9aXLji0P0qAKEFA0iJDuJN72s+09u7QZRvTvk=
Subject key identifier:   C2:D3:73:C9:91:AF:62:24:75:4D:25:29:6A:92:D2:38:F1:83:6F:1C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       16B5AE5CAE34E06792A502D81AF43D4B6C33925F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144076.roa
Signing time:             Tue 26 May 2026 01:13:08 +0000
ROA not before:           Tue 26 May 2026 01:08:08 +0000
ROA not after:            Tue 25 May 2027 01:13:08 +0000
asID:                     144076
IP address blocks:        240a:a592::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b5:ae:5c:ae:34:e0:67:92:a5:02:d8:1a:f4:3d:4b:6c:33:92:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:08:08 2026 GMT
            Not After : May 25 01:13:08 2027 GMT
        Subject: CN=C2D373C991AF6224754D25296A92D238F1836F1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:77:78:6c:a1:ab:a8:4a:fd:f5:77:3e:40:6a:
                    67:ef:e0:6b:1c:67:ae:ea:d1:99:32:2f:a0:a1:d1:
                    16:1a:cc:2f:bd:0a:a6:7a:05:68:f6:3c:a0:bc:38:
                    ff:10:13:fa:6d:70:5f:51:bc:17:bc:43:d2:c2:ec:
                    cc:1b:19:e2:06:cc:fc:47:eb:37:8c:08:07:7b:70:
                    3d:9a:a8:bb:8f:3c:24:ee:b7:6a:c0:39:e6:41:54:
                    43:5f:0a:9c:f3:ee:31:31:33:e5:0d:ce:45:0b:c5:
                    36:9f:58:0d:f9:b3:08:91:b5:7d:73:fb:a1:8d:3f:
                    7d:88:2a:11:1d:f6:83:bf:0d:90:40:a0:c6:5b:f3:
                    b5:b9:6e:6d:fa:d2:c6:68:97:0a:0e:70:bd:1a:04:
                    d0:58:82:55:cf:50:35:9e:13:c5:de:37:82:cd:16:
                    97:d7:b9:6f:db:55:c8:31:1b:df:1d:8d:2c:3e:94:
                    bd:4c:51:c3:48:9c:4b:00:99:0c:be:4d:bf:38:e5:
                    0a:59:37:02:17:fd:a5:5a:5b:d4:af:12:19:8b:3f:
                    2c:72:ce:7a:cd:c9:3d:d3:10:23:cb:43:d6:c8:70:
                    2e:b3:14:89:be:45:e1:a2:f9:db:d9:3a:81:df:6f:
                    66:a2:c9:80:d8:09:38:3d:c4:04:17:b9:7a:c3:44:
                    1f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D3:73:C9:91:AF:62:24:75:4D:25:29:6A:92:D2:38:F1:83:6F:1C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144076.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a592::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:ed:ce:32:a1:0a:c3:96:85:8c:10:1f:25:7c:d5:d9:20:af:
         21:dc:53:be:e6:63:60:6b:d4:0f:7e:69:3e:12:c0:3e:38:ea:
         a6:70:96:7b:33:13:fe:2d:77:c0:0d:e9:ae:1b:82:d7:3b:a8:
         5d:ee:ef:de:3b:76:bd:bb:57:38:f0:94:a6:b7:63:d2:2c:5e:
         54:7b:3a:08:7f:1b:c0:9e:46:bf:10:56:16:24:d8:b9:d7:d6:
         03:0c:94:2b:df:39:be:4a:bf:9d:82:bc:59:9e:eb:a8:0c:e1:
         a8:7d:81:d7:2c:30:d1:d3:30:e7:48:6a:68:58:06:1e:26:c7:
         65:78:90:c7:30:2d:6f:9a:02:27:f2:9b:c2:7f:ea:fc:57:b8:
         23:7f:65:35:45:7f:04:a6:fd:1d:ec:ba:10:ed:66:f5:29:33:
         ef:e2:85:a1:3e:2f:31:4a:1b:e1:7d:8f:a2:62:f1:c1:59:60:
         a8:29:29:d3:9f:52:14:be:e7:26:c3:f4:62:00:43:65:c1:c6:
         12:a2:b1:15:40:36:1e:75:0f:d3:5e:ad:c0:e1:b3:bd:8e:06:
         34:f4:03:4e:33:67:0f:27:f5:68:76:6e:19:52:ac:38:d6:ae:
         82:a7:55:3b:e6:1b:2a:41:a3:ca:e4:b0:e2:74:f2:b2:ef:a1:
         ce:fe:28:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:36 2026 by rpki-client