Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144124.roa
File:                     AS144124.roa (raw, json)
Hash identifier:          oIUMGhthQ9EAUM3aH76XDxNCTbJZuLIPcg2XX9OQFAQ=
Subject key identifier:   ED:44:03:C3:D5:03:97:86:72:84:DC:1C:1B:33:32:8F:A3:5B:AB:38
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       59F8C8FC8965E515F3AD16E132ADB9EBBED1BF2E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144124.roa
Signing time:             Fri 22 May 2026 06:58:15 +0000
ROA not before:           Fri 22 May 2026 06:53:15 +0000
ROA not after:            Fri 21 May 2027 06:58:15 +0000
asID:                     144124
IP address blocks:        240a:a5c2::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f8:c8:fc:89:65:e5:15:f3:ad:16:e1:32:ad:b9:eb:be:d1:bf:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:15 2026 GMT
            Not After : May 21 06:58:15 2027 GMT
        Subject: CN=ED4403C3D50397867284DC1C1B33328FA35BAB38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:05:39:c4:cc:3a:07:3a:ac:30:5b:ae:f2:c3:
                    cd:5b:63:08:fd:ed:a8:6d:c8:29:6b:89:a0:c4:e4:
                    d2:78:64:01:d6:5e:68:a3:8c:0c:bf:67:9a:b2:2f:
                    13:02:bf:12:80:c7:1a:6d:c0:94:d0:30:f4:7d:ed:
                    a6:46:50:b8:49:7b:5f:22:b5:6b:a7:db:20:1c:af:
                    2e:7b:2d:59:77:e6:fd:07:84:92:74:d4:0c:67:10:
                    66:68:a1:16:45:cb:68:4d:d8:81:d5:44:8c:48:46:
                    32:98:b8:f8:c3:45:f1:fd:3b:6a:37:7c:f3:ca:cb:
                    36:8c:f5:99:39:ab:fa:2a:c2:c0:65:64:14:01:25:
                    71:5f:d2:98:ae:29:6f:ee:e6:ff:b3:76:04:ca:8e:
                    2b:43:ad:d8:7a:3c:50:9c:46:08:e6:82:9b:b4:56:
                    c4:7a:88:5b:39:23:71:44:47:60:62:af:d7:5d:11:
                    a6:48:37:9f:86:21:09:c7:88:57:96:8b:2f:95:3b:
                    22:41:95:b0:a4:5b:a0:eb:e8:a9:6a:c2:d5:d2:a3:
                    b7:56:56:42:22:50:4d:34:b6:f8:6e:4c:32:e5:60:
                    7f:fe:5c:23:cd:e2:13:4a:60:fa:70:dd:7e:c9:c6:
                    38:3e:21:01:8c:17:26:50:b2:99:b2:29:f4:bc:cc:
                    02:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:44:03:C3:D5:03:97:86:72:84:DC:1C:1B:33:32:8F:A3:5B:AB:38
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144124.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a5c2::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:df:ab:ce:e8:a3:51:1a:3b:ec:99:45:a5:68:af:3f:6e:e5:
         0a:14:94:bd:70:8a:f8:2e:61:cf:95:72:be:bd:df:14:18:5e:
         45:dd:34:d7:04:3d:b6:58:e7:4d:8e:78:56:f7:07:51:1d:08:
         15:71:b8:36:a7:01:18:8c:a8:59:c1:ec:ea:b3:d5:7c:a6:00:
         9e:db:5c:32:28:0f:c5:12:d9:62:82:33:ca:7b:1c:59:f5:93:
         29:71:95:8e:c5:a4:b1:40:4d:19:90:00:c0:fa:1c:58:55:60:
         ed:ec:e8:aa:ee:71:70:8f:0b:b2:22:29:5e:f4:63:0b:21:63:
         bc:6e:e5:09:52:93:8b:d1:59:9d:e2:d2:5d:77:ed:22:d2:2e:
         24:f1:76:c7:b7:5e:52:cf:08:8e:0a:98:c9:31:5d:6a:1b:84:
         30:7f:da:cb:27:96:27:7a:f8:0e:d0:7b:b8:3a:e7:11:6b:35:
         db:95:21:eb:dd:4c:61:ad:98:7c:fa:81:12:a7:6f:fc:87:8a:
         d4:bd:5e:78:ca:0d:c4:b1:67:8c:69:1c:bc:8d:0d:e8:d3:f1:
         f0:6c:1f:1c:c1:ad:ce:94:56:66:9c:65:b2:53:d8:d7:54:6a:
         85:a8:6a:35:5b:b6:ce:10:53:0b:d0:f0:a1:5e:35:b3:96:fc:
         f5:4b:0f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:49 2026 by rpki-client