Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144114.roa
File:                     AS144114.roa (raw, json)
Hash identifier:          PpcPg4fyueY96GP7Uncbfo75jF2HQQzGeL8St4J1BDw=
Subject key identifier:   D6:03:0B:D6:72:28:6F:E2:54:85:80:05:50:CF:5E:C8:29:C2:02:CD
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7D7195FF89EEECAD69EF5B17F72C3C554AB1E2B5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144114.roa
Signing time:             Fri 22 May 2026 06:46:11 +0000
ROA not before:           Fri 22 May 2026 06:41:11 +0000
ROA not after:            Fri 21 May 2027 06:46:11 +0000
asID:                     144114
IP address blocks:        240a:a5b8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:71:95:ff:89:ee:ec:ad:69:ef:5b:17:f7:2c:3c:55:4a:b1:e2:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:11 2026 GMT
            Not After : May 21 06:46:11 2027 GMT
        Subject: CN=D6030BD672286FE25485800550CF5EC829C202CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4e:22:cb:5a:99:c7:7d:49:34:dd:80:74:75:
                    48:c6:c6:f0:f0:a3:39:cc:e1:0f:c3:7b:02:e8:65:
                    65:df:b9:ac:a3:36:95:00:75:14:e0:25:46:57:4a:
                    e0:f3:98:09:d6:76:15:3d:88:0c:e3:fc:83:44:fb:
                    fd:d3:d9:bd:59:e2:fe:2c:72:0c:3a:93:28:57:d5:
                    cf:f0:0d:c2:50:5a:c4:6b:9b:f4:2e:84:3f:c7:03:
                    6d:54:5e:81:c8:0c:68:bf:f6:59:79:bb:9a:0a:5b:
                    09:88:18:82:85:72:bd:ac:14:9a:12:e9:64:b0:76:
                    2f:76:f6:de:5c:aa:82:f1:ec:65:c5:89:8e:8a:b7:
                    c9:b9:f2:39:22:04:2c:5e:11:9c:a3:5c:0a:31:21:
                    b5:33:cc:cd:a9:d2:bb:00:0a:05:fc:76:9a:4c:ec:
                    2d:14:74:52:bc:10:14:69:f8:01:7e:89:52:78:97:
                    c3:d4:93:74:34:1b:b9:2e:01:18:7a:a8:de:45:4b:
                    54:da:9f:5f:87:fa:1e:4c:4e:2f:5f:37:87:d5:af:
                    db:30:fa:b0:4f:45:c6:da:6b:89:67:87:aa:a9:79:
                    1e:59:08:18:ec:52:e2:47:ca:22:0d:df:29:d1:8f:
                    ce:ec:72:d2:bb:c1:a9:f9:28:06:78:90:ae:a1:6f:
                    19:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:03:0B:D6:72:28:6F:E2:54:85:80:05:50:CF:5E:C8:29:C2:02:CD
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144114.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a5b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:23:4f:76:6f:cd:f8:15:4c:3d:2d:e7:fc:c2:88:72:fc:4d:
         e0:db:95:8b:64:f1:e7:06:27:1f:3d:c3:d1:8e:9a:41:b8:90:
         92:98:9d:85:31:5e:32:33:90:89:f1:79:ba:bd:34:ba:6a:2a:
         c2:12:d9:c2:57:e7:f4:35:40:67:70:52:9d:9d:ee:1d:99:79:
         72:64:c2:a9:c1:f2:cf:ae:35:99:e3:15:e1:18:48:58:04:cc:
         e4:d6:1f:2a:c5:bb:5b:24:fa:fe:bb:8d:da:27:d7:27:cb:99:
         38:59:19:0a:1c:6a:3d:2c:dd:d0:12:9b:92:6e:8c:88:58:66:
         85:ea:9d:73:e6:97:77:a4:be:9c:21:08:4c:df:f2:c6:e4:b3:
         39:13:b8:20:f9:36:e1:69:1f:20:45:b7:1c:33:56:b3:e7:0d:
         b3:c9:04:14:bc:fd:35:d0:02:e4:3f:21:50:bd:ab:37:03:47:
         e0:7b:d7:bd:e0:32:13:19:8e:de:55:b5:06:0d:ec:06:9b:96:
         40:42:f3:15:83:b1:5d:1d:a8:6f:a6:97:5c:76:e7:cc:bb:88:
         81:7a:08:98:ce:fb:0e:5d:04:f4:5f:04:54:45:b4:21:8a:70:
         85:74:9b:8d:ac:e2:df:7c:2a:35:e5:c3:c4:ec:45:33:a5:c8:
         ef:9b:0b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:36 2026 by rpki-client