Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144123.roa
File:                     AS144123.roa (raw, json)
Hash identifier:          RcpfhUglGDV4dvXJ2ngz10DInn+2mZyYEG8dmIsJ7ZE=
Subject key identifier:   A5:FA:F5:BB:15:15:77:65:08:34:5D:74:A8:50:65:84:02:D8:F0:5B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5B7B7868E8FF0E4B9A9F3AE82E705DC2A445CE73
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144123.roa
Signing time:             Fri 22 May 2026 07:24:27 +0000
ROA not before:           Fri 22 May 2026 07:19:27 +0000
ROA not after:            Fri 21 May 2027 07:24:27 +0000
asID:                     144123
IP address blocks:        240a:a5c1::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:7b:78:68:e8:ff:0e:4b:9a:9f:3a:e8:2e:70:5d:c2:a4:45:ce:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:19:27 2026 GMT
            Not After : May 21 07:24:27 2027 GMT
        Subject: CN=A5FAF5BB1515776508345D74A850658402D8F05B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:5b:c8:62:25:0f:21:ad:6f:0c:a1:d1:b8:87:
                    40:5c:01:ff:cc:44:39:3c:68:3b:38:bd:d8:be:96:
                    80:8d:03:7f:6c:17:59:19:9b:d8:87:04:84:2a:11:
                    9d:d1:f1:c7:2d:c6:43:25:22:a0:06:b8:8f:11:4d:
                    ce:42:e7:1f:98:f1:6e:8b:80:c0:60:8b:21:3e:c8:
                    0c:ad:fb:49:39:e8:72:09:10:85:06:08:f1:70:3f:
                    42:67:70:a5:80:4b:54:9a:ec:1a:ab:33:5d:00:86:
                    90:0a:48:a0:2a:ff:ce:dd:f2:da:56:5a:5c:2a:ad:
                    cf:54:21:1e:95:7f:01:dd:1e:0a:35:bc:86:49:30:
                    4e:1a:44:3d:97:91:3c:d8:37:7e:ba:9d:47:9b:ed:
                    39:b6:97:b9:41:cd:d5:1c:ba:a0:da:94:32:37:e7:
                    e7:3f:c5:a4:a5:10:eb:dd:e1:88:68:da:86:9a:11:
                    e5:79:44:46:a6:ec:c2:ec:6f:04:01:8a:3a:a3:2f:
                    e3:40:ef:85:13:1f:b5:a2:73:75:91:16:64:bb:98:
                    01:8b:ad:11:d8:0d:c4:a8:c5:07:98:12:4f:b8:84:
                    9a:5b:f7:e6:21:38:76:69:4d:dc:f1:72:4f:a3:cb:
                    85:b6:fc:38:73:1b:ae:d0:90:4f:a6:21:62:84:8d:
                    06:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:FA:F5:BB:15:15:77:65:08:34:5D:74:A8:50:65:84:02:D8:F0:5B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144123.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a5c1::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:89:3d:79:a8:79:03:fc:01:6e:0c:d4:88:5c:80:6a:85:49:
         4b:08:4b:b8:44:94:4e:cd:39:9f:23:0e:04:67:3f:d3:fd:9a:
         14:e6:69:98:69:62:09:7d:17:c7:28:17:48:d6:78:0d:91:f6:
         f0:bf:4a:2a:52:24:0a:04:ec:f1:70:7b:dc:87:9f:d4:24:4d:
         25:e7:f0:81:d4:2f:ed:94:19:46:33:92:c8:d4:fc:2b:56:83:
         9b:16:33:1c:22:77:21:94:dc:5c:4d:49:bf:2b:21:ca:59:6c:
         65:38:d4:9b:9e:2a:8f:82:b7:49:98:9d:23:4a:62:d5:21:20:
         f0:6c:30:c1:18:4b:96:ed:82:22:7e:d9:ad:c8:74:a4:62:15:
         c8:c0:1e:0c:89:d2:81:da:82:c4:44:29:67:ca:dc:0a:d0:b0:
         04:70:b9:a3:1d:f6:c6:ba:7f:86:a9:81:8e:d3:36:ca:1d:8b:
         01:fe:3e:1f:13:46:43:88:f0:1e:04:03:63:e5:5d:6b:c8:f6:
         2a:3a:91:72:4b:48:0b:2c:89:e1:f5:ad:53:f8:e0:9a:40:8f:
         e0:9f:cd:78:92:4b:36:5f:58:e6:0c:96:b8:93:89:54:6e:e8:
         7c:ae:49:37:ee:e6:b3:7b:f5:11:95:cd:03:ed:cd:75:9d:71:
         93:b0:87:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----