Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144083.roa
File:                     AS144083.roa (raw, json)
Hash identifier:          VfDGI7hrFADOdVVXpp4bauaK6o1rmCqCaajnvplTPtg=
Subject key identifier:   CF:6C:A5:A9:0A:6A:53:71:BE:89:A0:62:2A:EC:A9:9F:18:BE:BE:47
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1357EDD3F3B28CF2A8C22AF69EF128C2458DE275
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144083.roa
Signing time:             Tue 26 May 2026 03:17:16 +0000
ROA not before:           Tue 26 May 2026 03:12:16 +0000
ROA not after:            Tue 25 May 2027 03:17:16 +0000
asID:                     144083
IP address blocks:        240a:a599::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:57:ed:d3:f3:b2:8c:f2:a8:c2:2a:f6:9e:f1:28:c2:45:8d:e2:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:12:16 2026 GMT
            Not After : May 25 03:17:16 2027 GMT
        Subject: CN=CF6CA5A90A6A5371BE89A0622AECA99F18BEBE47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:38:45:98:bd:88:4e:e6:c2:d3:7c:a7:cf:18:
                    7a:53:48:dc:2a:71:53:34:da:47:c5:a6:21:06:bb:
                    7c:11:a0:da:e3:46:e9:20:cc:8f:13:dd:8d:5a:7e:
                    f2:fe:06:6c:5d:7c:fa:7b:19:a9:69:cf:6d:4b:2a:
                    17:89:e1:00:4a:73:b7:57:d7:22:ab:4e:7e:1f:f5:
                    d9:6f:d2:9c:c9:9b:bb:7b:71:e5:d5:7a:d9:f1:00:
                    63:6c:61:44:66:47:ef:7d:57:2f:97:0d:af:46:f9:
                    14:e2:49:4b:99:5f:c5:ec:ae:44:c3:19:b5:15:f5:
                    17:db:1c:38:90:fb:6b:ee:9f:63:f0:da:fe:c5:79:
                    e8:42:c2:dc:9d:9e:68:11:10:21:e7:51:dd:e4:11:
                    d9:25:b3:5e:34:a6:b9:a1:9e:b7:a2:10:b0:36:2d:
                    6c:18:69:4e:f1:cf:bb:a4:87:e2:01:a7:ef:e4:63:
                    40:08:86:f4:43:e3:4d:86:c3:8c:6a:fe:33:ca:51:
                    d9:62:08:47:ce:ab:98:24:62:e2:a1:b4:59:53:1d:
                    de:9f:af:c1:94:10:b7:12:dc:a9:b8:15:45:46:88:
                    04:ef:c4:4b:ac:75:6a:69:97:5e:d6:d4:36:e6:6c:
                    ec:d7:c5:90:de:98:69:3a:68:4d:cb:4c:47:5b:49:
                    7d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6C:A5:A9:0A:6A:53:71:BE:89:A0:62:2A:EC:A9:9F:18:BE:BE:47
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144083.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a599::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:e9:3c:50:6b:6c:cb:5a:4b:4d:0f:f1:1a:44:b4:6b:de:ef:
         e5:f2:8c:3e:68:62:aa:9f:ad:2d:fd:3d:07:c7:f9:fb:8b:17:
         79:52:76:90:53:19:24:bc:a0:b7:8e:1f:5d:c9:21:9c:54:49:
         05:8d:8c:00:d8:0b:a0:54:24:5a:11:f7:ac:ec:18:1b:51:26:
         88:82:d4:29:79:e3:ff:eb:3c:21:f9:74:10:7c:ab:dd:c9:6d:
         d2:f9:b6:a9:46:8e:b8:1b:1a:de:ed:f2:9e:f9:32:17:f4:ad:
         7c:1e:3b:a2:17:22:cc:ba:74:4a:57:ad:03:6b:61:8f:57:a9:
         6d:1a:d2:22:46:57:82:8b:9f:59:48:56:6d:9e:0f:3b:f5:ba:
         c8:47:36:88:f3:45:0d:79:89:8d:56:9b:73:ec:17:32:a4:35:
         40:84:b8:a5:d7:76:9d:14:14:a2:1d:cf:96:0f:0b:35:40:57:
         6a:cc:13:75:5d:60:73:ff:c7:7d:7b:7b:8c:ec:fa:e9:6d:73:
         1e:3f:aa:f5:f8:e2:59:af:37:8d:f7:88:c2:df:54:43:69:a9:
         83:8b:24:47:eb:a7:9e:72:41:fc:aa:96:12:3d:04:5f:23:ff:
         90:d8:f0:e3:4d:31:6b:eb:c8:d6:64:ce:8a:8e:31:4b:13:b4:
         57:d4:b8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----