Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144137.roa
File:                     AS144137.roa (raw, json)
Hash identifier:          lSiyKhLaGL8BMNRnTx4EJIlL1K2hGUfTn4svkS1tkE0=
Subject key identifier:   2B:10:0C:34:53:3A:58:09:4C:CB:48:7E:3A:3D:70:1F:D1:08:EC:6B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2E37331B764507F6E946C7B01398E42F7F1414EF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144137.roa
Signing time:             Tue 26 May 2026 01:13:06 +0000
ROA not before:           Tue 26 May 2026 01:08:06 +0000
ROA not after:            Tue 25 May 2027 01:13:06 +0000
asID:                     144137
IP address blocks:        240a:a5cf::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:37:33:1b:76:45:07:f6:e9:46:c7:b0:13:98:e4:2f:7f:14:14:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:08:06 2026 GMT
            Not After : May 25 01:13:06 2027 GMT
        Subject: CN=2B100C34533A58094CCB487E3A3D701FD108EC6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:63:ba:5c:81:a2:4e:2d:00:6c:4d:a5:06:26:
                    29:4c:03:08:8e:2d:02:6a:f2:37:89:56:e4:61:07:
                    34:83:96:f2:e2:05:c8:17:95:a0:9e:9c:7d:05:6f:
                    e3:26:58:b9:39:83:a5:e8:de:a9:e6:ad:ce:64:7d:
                    42:2a:33:e6:ec:ea:8a:ad:65:bf:e4:a9:88:0f:00:
                    07:05:3a:24:08:1e:2e:68:ab:22:ee:f2:b2:78:26:
                    ae:76:76:03:c5:f1:0f:e3:0a:01:e4:61:b0:e7:c3:
                    98:0c:c0:a5:b7:ab:2a:5d:d7:6c:df:ae:97:f0:9f:
                    1f:d5:4a:ee:51:1d:46:eb:1a:cd:e3:d9:e8:50:71:
                    e7:4e:f6:15:7c:f2:b9:bd:63:76:7c:e1:bb:ee:46:
                    f4:be:98:82:41:47:d0:4d:f3:e0:6a:58:b8:5c:ea:
                    d3:0c:d6:b0:7e:dd:b5:07:1e:cb:e8:85:01:e5:c2:
                    e8:b3:1d:d4:fc:d2:7c:74:c7:c0:cd:65:dc:d6:dd:
                    d6:32:42:72:c6:26:86:7c:91:e8:d2:97:a7:78:18:
                    82:00:b7:10:3a:27:88:fd:9d:10:82:63:ab:d3:a0:
                    31:05:2f:09:ad:63:97:0e:03:62:a8:8c:97:77:08:
                    b1:96:1c:7c:19:67:4a:a1:34:13:4e:c0:a8:d6:24:
                    f3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:10:0C:34:53:3A:58:09:4C:CB:48:7E:3A:3D:70:1F:D1:08:EC:6B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a5cf::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:1c:94:55:a7:73:64:ec:03:f4:eb:0b:bd:ee:75:21:60:65:
         55:8b:f2:1e:c5:8d:fe:85:86:ae:78:16:ff:c8:34:61:96:86:
         d7:d0:5e:dd:6e:04:f1:48:8a:cf:ed:56:f1:61:2f:bd:22:31:
         af:16:6b:b5:b5:76:0e:fe:56:6a:d3:bc:92:f4:8e:fa:d9:59:
         fa:09:4d:8c:e6:e3:30:41:a7:6f:30:15:e7:a1:79:1d:01:dd:
         d4:fd:ad:bc:44:48:53:d7:f4:f7:77:bc:5d:98:64:70:9b:ad:
         bf:82:50:62:31:0f:9d:2f:d5:2c:51:74:73:a5:07:58:2d:b3:
         c9:c2:12:44:2d:20:ba:b7:b7:1f:19:17:78:f4:92:7c:fc:3e:
         1a:b7:03:92:cb:9c:cd:a6:95:b1:2f:5f:9e:b8:d9:93:63:d6:
         d1:1c:f2:ca:93:12:0e:87:9b:3c:2f:30:00:2f:66:69:c8:2e:
         1d:81:7f:13:43:19:93:d1:75:dd:52:f7:aa:74:79:61:e9:83:
         84:c8:6d:8c:f6:21:21:65:04:72:bd:48:c8:99:ab:ca:9d:d8:
         77:aa:63:b3:6d:dc:d4:cb:20:ac:65:2e:69:2f:bf:6a:7d:5e:
         16:4f:d2:c2:a0:e5:53:37:2c:34:10:8b:0f:e3:e2:a5:c1:a8:
         e8:12:70:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:12 2026 by rpki-client