Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144101.roa
File:                     AS144101.roa (raw, json)
Hash identifier:          bUKn1+IOh7tORS8ceY5wjbeIDRT03jH6t0PM7nQtCUY=
Subject key identifier:   26:C0:F0:2D:4B:46:0C:CE:8B:96:60:3D:0C:39:18:69:2D:41:84:51
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7C78318E0792E334F67E36BB4797F27EA5CD2D9E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144101.roa
Signing time:             Fri 22 May 2026 07:09:09 +0000
ROA not before:           Fri 22 May 2026 07:04:09 +0000
ROA not after:            Fri 21 May 2027 07:09:09 +0000
asID:                     144101
IP address blocks:        240a:a5ab::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:78:31:8e:07:92:e3:34:f6:7e:36:bb:47:97:f2:7e:a5:cd:2d:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:04:09 2026 GMT
            Not After : May 21 07:09:09 2027 GMT
        Subject: CN=26C0F02D4B460CCE8B96603D0C3918692D418451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:0a:27:06:9c:f1:c1:71:6c:0e:ed:9a:20:df:
                    2f:d0:90:bd:52:f9:75:0c:59:bf:28:4c:51:fe:eb:
                    a9:88:9b:a8:2e:ba:8a:1a:2b:4f:ca:3f:be:6b:fa:
                    af:f0:be:91:e0:97:f9:3a:1b:96:b8:ea:91:59:0d:
                    77:b2:f5:fc:f3:a2:39:54:32:26:52:62:0b:d0:86:
                    d7:5b:71:3b:71:db:8e:d2:8e:b1:2b:cd:ca:bc:d4:
                    fc:9b:ae:7e:cb:18:04:b4:09:be:6b:89:9e:1e:d6:
                    87:42:0d:22:ac:d6:76:6e:a8:47:61:ec:5b:a3:f7:
                    23:e3:9d:48:44:5b:7d:de:f1:9c:fc:1a:8e:89:69:
                    7c:47:60:ef:55:06:3a:cd:48:c7:66:bc:e4:aa:88:
                    dd:61:90:df:79:0f:aa:f0:e7:a4:d2:f3:89:3b:67:
                    e1:13:19:e7:6b:33:6f:02:76:93:2e:5f:9a:f9:e1:
                    a5:50:e7:f6:ee:57:0e:6c:23:43:1f:93:35:3a:c8:
                    48:7b:ae:82:f6:e7:b0:23:94:60:11:79:2c:e6:26:
                    c2:9e:b5:0d:50:12:31:c0:1d:81:80:3d:08:62:37:
                    61:86:c9:10:1e:0a:fa:c7:4b:6c:76:b4:fb:3c:79:
                    e0:49:56:7d:c8:63:3e:75:01:96:7f:47:75:09:65:
                    77:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C0:F0:2D:4B:46:0C:CE:8B:96:60:3D:0C:39:18:69:2D:41:84:51
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144101.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a5ab::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:e8:e6:88:39:75:c6:0c:c7:2d:01:c1:81:77:ff:48:cf:1a:
         9c:ca:9e:fa:a7:b7:b2:f5:8b:99:39:4d:f8:0c:f2:ae:8a:e6:
         d1:e0:f8:68:92:de:b9:99:f1:20:32:7a:56:7d:f9:83:ae:52:
         27:50:f6:89:75:42:3c:e0:4e:25:51:21:4b:40:0a:5d:26:fb:
         4a:25:70:7d:cf:3c:c1:c1:d0:a5:51:e3:00:56:5c:28:42:af:
         f2:79:9e:fb:3d:7a:ee:8f:a7:6a:a5:74:ed:1b:a6:2b:3c:6a:
         1c:07:50:8b:b4:7e:ec:e8:7a:52:dd:8e:18:0c:cc:9f:3d:82:
         a6:97:5e:d8:72:df:a6:16:ac:04:1e:78:0f:ca:5b:a9:b4:97:
         d3:53:9b:c4:47:38:78:6d:ee:b2:3e:8a:79:eb:91:25:cf:b8:
         9b:bb:32:98:55:9f:78:96:11:89:54:70:6d:d6:75:cc:77:58:
         ce:62:7e:fd:2b:2d:64:88:fe:2a:dd:2f:9e:22:a5:cb:33:dd:
         75:fe:1a:52:0c:49:c1:e2:f9:62:b7:98:a6:20:d4:2d:81:1d:
         78:17:74:d0:8f:29:63:44:9c:32:1d:37:04:20:15:f0:1e:53:
         5e:e8:94:1e:41:35:9a:f0:15:9a:a4:35:26:cc:40:a0:ad:f3:
         6f:33:c2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----