Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144144.roa
File:                     AS144144.roa (raw, json)
Hash identifier:          NOD67VKIPcCQoZsaWP44u1G8cc5O0DXqhKlO4XZt+pI=
Subject key identifier:   2F:D6:06:B7:A7:A4:4C:6F:0A:D5:7E:6D:25:DD:96:8D:28:51:5D:9B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       70BD8475B8602957D4F8983BF1A7CF2C8FA70A44
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144144.roa
Signing time:             Fri 22 May 2026 02:48:05 +0000
ROA not before:           Fri 22 May 2026 02:43:05 +0000
ROA not after:            Fri 21 May 2027 02:48:05 +0000
asID:                     144144
IP address blocks:        240a:a5d6::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:bd:84:75:b8:60:29:57:d4:f8:98:3b:f1:a7:cf:2c:8f:a7:0a:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:43:05 2026 GMT
            Not After : May 21 02:48:05 2027 GMT
        Subject: CN=2FD606B7A7A44C6F0AD57E6D25DD968D28515D9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ff:a8:c2:25:7e:61:3b:d3:26:15:c3:84:a9:
                    ec:69:52:82:1e:90:e8:50:4f:61:91:c7:35:1c:34:
                    3a:1a:3a:9d:46:60:c7:b3:1e:43:25:a1:7a:e3:ee:
                    21:1f:6e:d0:06:9c:f0:43:ab:cf:5a:5f:02:25:86:
                    85:4c:10:eb:5f:07:4d:bd:a0:79:79:15:07:17:29:
                    cd:b2:d5:d7:04:91:a3:3d:cb:ec:5c:6a:e4:52:9e:
                    69:62:95:42:53:5d:6c:5d:67:40:11:7e:36:ce:65:
                    ab:de:cd:ad:79:e2:d5:e4:be:22:18:d2:d7:67:3f:
                    38:2c:cd:f0:e3:a7:40:9d:57:a3:27:ab:c5:fd:19:
                    4c:ef:d6:c7:45:c2:a7:b3:06:bd:db:3d:c4:6c:bd:
                    1d:e4:4f:9c:0b:3d:b1:68:12:04:3f:33:7f:9d:83:
                    28:36:99:a2:11:97:35:21:85:60:64:44:e6:01:6f:
                    13:34:40:18:81:9e:38:fa:4b:47:2e:eb:0f:18:a9:
                    7c:aa:e7:4d:bf:a7:ae:12:91:1c:74:2a:35:d5:ef:
                    3a:60:20:8c:90:a0:cd:4d:a9:ba:20:05:eb:27:05:
                    b9:5c:97:68:5e:32:a8:5d:fc:01:5c:85:ba:f8:85:
                    27:07:95:c5:3b:af:72:74:0b:ad:f3:3b:04:6a:1a:
                    16:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D6:06:B7:A7:A4:4C:6F:0A:D5:7E:6D:25:DD:96:8D:28:51:5D:9B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144144.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a5d6::/32

    Signature Algorithm: sha256WithRSAEncryption
         bd:f8:cd:12:6f:ca:cd:ce:6e:03:ef:ed:4a:f6:ac:39:b4:66:
         e3:bd:e4:e6:20:be:ca:08:59:42:c7:71:89:64:c4:b2:a2:cf:
         71:c6:ce:1e:cf:95:7c:dc:fb:66:27:ed:c2:e6:a0:9e:29:7e:
         af:9e:64:dd:af:c1:32:e8:88:64:c0:b4:0e:05:12:33:6a:d4:
         b4:ac:43:91:06:72:e6:0c:96:ee:66:84:5b:9e:82:f4:cf:96:
         b1:06:d8:b1:dc:9a:a4:1c:59:1c:fc:a2:6e:54:79:64:3a:c6:
         fe:b7:6f:e6:54:01:7f:a7:29:1c:5d:27:12:bd:51:1a:84:02:
         54:31:a8:49:aa:e2:7d:42:c0:c2:f1:26:e4:29:af:55:9a:e0:
         51:24:51:eb:27:4d:15:36:9e:57:6a:70:1c:9f:d6:b4:39:c5:
         70:c4:3a:d8:21:87:48:62:4f:b4:16:a3:71:c5:42:bb:1b:0a:
         ab:f7:2b:78:46:b7:8d:db:2c:2e:13:ee:28:49:f6:f4:25:2c:
         3d:ce:96:9d:70:f4:5d:67:56:66:47:02:68:dc:4c:d6:44:90:
         9f:f2:8e:2d:1a:9c:b0:05:1e:20:0f:3b:cd:65:cb:69:62:07:
         67:77:d7:0b:4f:72:2c:90:24:e3:a4:dc:99:22:77:7e:1f:a4:
         35:5a:33:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:52 2026 by rpki-client