Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144077.roa
File:                     AS144077.roa (raw, json)
Hash identifier:          ASd6OZ/2vRPMxYdrMefsSqqx1O3/osq0HkuyndqzLZM=
Subject key identifier:   5D:1F:80:E2:03:10:73:75:CC:54:AA:DF:61:E0:C9:23:2B:24:0F:0A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3416C75280B4C4633D173ED0D509AD4E5B9E686E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144077.roa
Signing time:             Mon 25 May 2026 03:19:27 +0000
ROA not before:           Mon 25 May 2026 03:14:27 +0000
ROA not after:            Mon 24 May 2027 03:19:27 +0000
asID:                     144077
IP address blocks:        240a:a593::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:16:c7:52:80:b4:c4:63:3d:17:3e:d0:d5:09:ad:4e:5b:9e:68:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:27 2026 GMT
            Not After : May 24 03:19:27 2027 GMT
        Subject: CN=5D1F80E203107375CC54AADF61E0C9232B240F0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:72:73:97:f5:f3:33:81:a3:4a:f8:18:6d:36:
                    01:d6:7b:6b:a2:61:7e:de:94:32:11:63:5c:58:67:
                    90:6c:6f:e4:29:07:61:84:f2:93:a6:94:d5:08:45:
                    41:b1:71:4f:1a:dc:24:06:44:3b:1a:c8:b5:08:70:
                    ae:59:b9:41:c2:7e:b6:4f:ee:56:46:ee:fd:72:b5:
                    8b:b8:55:d1:e6:cd:c1:6f:d9:bf:d8:e6:42:64:47:
                    fd:53:f7:80:cd:74:1a:5f:04:fc:8e:7e:a8:fd:6c:
                    6b:24:12:24:9b:f0:e4:5f:55:12:7f:01:f9:99:e7:
                    96:e8:53:3d:33:09:62:5f:fa:fe:c7:44:63:2a:c1:
                    ff:73:56:27:a4:a9:2e:e5:2a:ab:32:dd:e8:34:68:
                    eb:29:e3:39:b3:19:34:c5:c9:51:10:ca:d4:77:98:
                    20:87:ad:8c:9a:ad:a0:c3:38:04:e3:96:5e:d6:39:
                    37:c7:88:6e:a7:7b:c7:6b:f1:08:ef:28:f5:80:12:
                    a1:34:dc:c1:49:86:4f:b7:1b:ba:1f:05:e5:5f:82:
                    16:f0:78:10:b9:7e:42:54:be:21:6c:30:60:00:86:
                    69:75:b6:ab:15:f3:d1:9a:0f:70:51:f9:79:b5:70:
                    9d:d7:31:6c:f1:72:90:77:3e:60:f9:ff:3e:4a:a0:
                    a2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:1F:80:E2:03:10:73:75:CC:54:AA:DF:61:E0:C9:23:2B:24:0F:0A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144077.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a593::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:7f:71:9d:e5:1e:2c:25:63:df:92:6e:98:fe:15:f1:78:94:
         7d:c9:49:d4:7d:6e:54:b5:03:51:cc:c3:79:f3:c6:dd:a5:3e:
         52:84:fe:02:a4:a7:ee:08:4f:92:ad:b5:89:2f:7a:98:9e:e3:
         b8:df:14:60:0d:25:26:a2:2c:7f:ba:1e:59:67:b9:60:ef:a9:
         75:8b:c3:04:01:2f:c9:8e:f4:00:46:c3:b0:23:f1:ed:32:74:
         e4:72:62:3b:c3:f2:f0:1e:2b:c5:61:ae:08:cf:70:06:b9:b6:
         0c:00:79:bd:ce:12:f0:c8:76:2e:a8:25:20:cb:9a:c8:36:d8:
         e8:d4:6b:fc:76:22:d3:f2:46:c8:41:04:9e:44:d5:86:27:32:
         3b:4c:0b:92:66:d7:7f:f4:e4:59:b5:42:b6:79:24:f5:29:d7:
         ad:25:b7:bc:15:89:0b:9e:9d:aa:17:70:0e:5c:8c:92:f8:61:
         e3:70:b8:f6:be:7d:c3:c5:74:f9:e2:22:48:5f:4d:82:06:85:
         e1:0e:b1:ed:f8:dc:48:c6:8b:e7:ec:a5:3b:72:a9:7e:62:90:
         ae:4d:c8:60:73:27:22:62:40:5b:06:87:4d:62:16:2d:44:97:
         58:88:f1:f6:08:0b:bd:9b:c3:ce:c3:e1:85:dc:9b:38:81:7d:
         76:e9:c8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:28 2026 by rpki-client