Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144140.roa
File:                     AS144140.roa (raw, json)
Hash identifier:          8wHouOotFLPo5iH5tPihTmLlfU3V+qq9NzDCflhBmIA=
Subject key identifier:   C0:78:00:59:14:7A:8F:9A:09:D3:30:2C:4F:52:CC:C0:C5:57:09:02
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       09E68C8FA2AA6E455015CA13FE153AC7CC7091BF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144140.roa
Signing time:             Mon 25 May 2026 01:20:05 +0000
ROA not before:           Mon 25 May 2026 01:15:05 +0000
ROA not after:            Mon 24 May 2027 01:20:05 +0000
asID:                     144140
IP address blocks:        240a:a5d2::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:e6:8c:8f:a2:aa:6e:45:50:15:ca:13:fe:15:3a:c7:cc:70:91:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:15:05 2026 GMT
            Not After : May 24 01:20:05 2027 GMT
        Subject: CN=C0780059147A8F9A09D3302C4F52CCC0C5570902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0b:60:97:c7:f9:00:0d:ec:db:b7:62:7f:59:
                    aa:d8:98:20:87:68:95:c9:9e:a8:53:9b:c8:73:55:
                    57:09:89:3a:b6:71:a6:04:26:76:d1:8f:55:47:35:
                    0d:2e:f6:47:f8:a8:33:11:51:d3:21:9b:29:1f:6a:
                    ef:b2:4f:12:e8:55:e3:d3:a0:0a:9f:e0:0e:e6:c6:
                    00:c7:c3:fb:fa:f2:60:8d:87:1b:4f:e3:3f:d0:b4:
                    93:fe:13:09:79:fb:b1:ff:e5:c7:76:24:31:17:05:
                    f4:7d:a0:e4:38:8d:e6:49:83:84:51:63:fd:9d:14:
                    7c:3f:01:f1:8e:bd:88:fb:d1:ff:c1:55:5f:4d:8b:
                    d5:66:3d:8d:07:10:2b:ec:b1:6c:44:a9:1e:34:0a:
                    d5:4d:36:7c:14:6d:8d:b8:68:10:86:92:c6:c0:a0:
                    df:83:2c:60:1a:09:cb:ac:10:16:1d:7c:93:6d:0e:
                    08:58:df:a6:a0:fb:48:de:7e:66:04:ea:64:75:83:
                    a9:57:88:a2:a9:f0:65:a5:83:3b:df:be:d3:68:fb:
                    c8:5a:3e:94:7d:cd:2c:44:b1:00:47:10:88:7f:8e:
                    79:72:4c:9d:6a:49:8c:ab:c6:75:ed:72:c4:79:d9:
                    f3:d5:d6:17:f3:06:20:e2:b0:7f:d4:cb:05:90:46:
                    a3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:78:00:59:14:7A:8F:9A:09:D3:30:2C:4F:52:CC:C0:C5:57:09:02
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144140.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a5d2::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:1e:25:62:b8:03:97:a5:f7:7b:d1:8e:90:a3:1e:b4:dc:8b:
         82:f1:c8:dc:0e:e3:53:82:1d:bc:cf:ac:bb:4d:78:91:2e:20:
         59:72:a2:81:73:bc:f5:c2:a9:d5:cc:4a:44:c1:69:61:d0:77:
         99:00:43:09:3c:1b:3f:66:44:ec:98:6a:55:a2:e7:00:25:b3:
         f0:0f:5a:77:50:f6:f7:6d:4f:7f:6a:b8:e6:92:df:1e:f4:d3:
         9d:2d:3f:be:a8:a2:58:b3:6d:17:93:d8:c1:7a:e8:ce:31:c7:
         8d:92:22:db:49:1b:27:6b:8c:0d:04:6e:c0:28:73:15:6c:6f:
         07:8e:9a:54:d4:52:0d:e4:3e:cc:09:7b:04:e4:d5:2e:25:d8:
         d9:a3:b6:fc:71:0d:99:49:c2:d8:be:5e:37:0b:8e:68:5d:44:
         be:00:c6:0a:7d:9e:26:0e:89:ec:6f:6a:4b:dc:0a:50:ff:06:
         f8:3b:c9:7f:ea:b4:15:2c:4d:e4:0a:14:fa:41:bd:ca:b3:ed:
         59:be:da:27:74:15:23:97:d1:e2:22:61:fc:ee:77:ce:58:72:
         47:dc:97:67:80:ab:ca:f8:24:6d:ec:1b:d4:6b:0c:92:32:ca:
         16:60:a8:52:30:cc:7f:9e:7a:04:43:f0:7b:3c:a0:e4:7e:74:
         ba:1a:82:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:13 2026 by rpki-client