Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144150.roa
File:                     AS144150.roa (raw, json)
Hash identifier:          b64Y3mF1Bfr4K/q+8axMQfRNBqR4UK3c20fIqXLbmpc=
Subject key identifier:   CD:F9:8C:26:C0:B3:9F:1A:F9:68:3D:5E:0D:F8:2A:32:DD:03:AA:6F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2C0E8BEF242A5AFA3FCB67F74A6D860CA2A9B4DF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144150.roa
Signing time:             Fri 22 May 2026 06:28:00 +0000
ROA not before:           Fri 22 May 2026 06:23:00 +0000
ROA not after:            Fri 21 May 2027 06:28:00 +0000
asID:                     144150
IP address blocks:        240a:a5dc::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:0e:8b:ef:24:2a:5a:fa:3f:cb:67:f7:4a:6d:86:0c:a2:a9:b4:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:23:00 2026 GMT
            Not After : May 21 06:28:00 2027 GMT
        Subject: CN=CDF98C26C0B39F1AF9683D5E0DF82A32DD03AA6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dc:d9:5a:8b:72:60:50:8b:ba:56:f2:db:96:
                    35:4a:61:99:4e:55:45:01:07:ff:5a:f5:0a:f7:11:
                    a2:a6:89:f3:22:fa:05:35:3b:23:60:b0:3e:a9:c4:
                    bc:ad:47:42:a8:dd:31:1c:45:10:d7:76:75:35:08:
                    27:a0:e1:18:45:55:f3:59:8f:a8:72:23:28:07:27:
                    cb:90:7e:e2:55:d7:04:40:da:31:a4:33:df:59:04:
                    2f:c4:33:92:50:cc:d0:08:3b:27:c5:a4:d4:ba:78:
                    7b:be:dc:dc:de:ff:2a:15:95:5b:78:19:ae:8f:79:
                    57:8b:ba:2e:0b:b7:85:e0:88:e9:1b:f2:0e:7e:d2:
                    94:e6:1c:bd:c7:c1:0b:59:63:df:08:ba:74:bc:2f:
                    1b:ce:42:40:e2:54:9b:7c:ba:84:c2:8f:ec:48:0f:
                    f6:f4:45:60:5f:fe:bd:1d:08:93:7e:ee:f5:a7:d9:
                    7a:f7:10:62:68:06:3e:9a:e9:1f:29:e3:d3:fb:f6:
                    92:16:26:d0:2e:02:2b:83:cb:5c:60:8d:ba:a7:2b:
                    ec:10:d4:05:b6:77:f2:eb:ad:3d:fa:0f:8f:a3:5f:
                    e3:fc:bb:13:43:e5:b2:18:2e:86:bc:79:cf:96:ca:
                    83:f3:5e:29:93:f3:d5:52:1a:c2:38:38:a4:68:2e:
                    d8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F9:8C:26:C0:B3:9F:1A:F9:68:3D:5E:0D:F8:2A:32:DD:03:AA:6F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144150.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a5dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:7d:c3:bf:a1:f9:a6:85:e1:59:8e:47:92:fc:a7:b4:59:99:
         e8:14:aa:96:c3:cf:ef:d1:a0:62:ac:00:5e:83:bc:f1:2d:56:
         62:e3:95:b6:ca:a1:a3:da:47:a4:1b:6f:1b:4b:bb:68:bd:5d:
         d8:a5:20:31:cc:29:2a:a1:90:e1:52:a6:13:d7:cd:32:b2:d4:
         f4:e4:04:87:23:4d:40:9b:20:e1:a9:e9:1c:bc:01:0c:89:c5:
         23:a8:42:04:18:94:80:9a:e0:1c:ff:d2:b9:f3:3b:a2:20:61:
         21:11:15:da:34:8e:87:ac:38:de:02:36:20:d8:da:f6:5c:60:
         96:01:04:19:e3:a9:75:01:9c:6a:17:9d:b6:7e:4e:70:84:b0:
         52:d6:8a:ba:c1:a2:0c:24:55:2c:45:97:04:d2:57:7c:d1:30:
         6c:6b:ca:79:55:ea:07:93:34:dc:fa:1e:8b:ea:a4:50:58:b8:
         7e:93:59:3e:da:93:ad:f6:f2:5f:16:e7:3c:9e:4c:97:86:1c:
         ab:36:86:6d:7d:b3:a8:85:cf:72:67:9e:75:82:55:55:4d:0b:
         5a:72:7b:84:67:2e:0a:d6:9e:21:dc:ff:ee:45:1a:98:c9:f2:
         d0:0b:88:d7:49:75:86:9f:71:c0:a2:bb:3a:98:51:84:3b:ad:
         c0:01:a7:d9
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIULA6L7yQqWvo/y2f3Sm2GDKKptN8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjIzMDBaFw0yNzA1MjEwNjI4MDBaMDMxMTAvBgNV
BAMTKENERjk4QzI2QzBCMzlGMUFGOTY4M0Q1RTBERjgyQTMyREQwM0FBNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC53Nlai3JgUIu6VvLbljVKYZlO
VUUBB/9a9Qr3EaKmifMi+gU1OyNgsD6pxLytR0Ko3TEcRRDXdnU1CCeg4RhFVfNZ
j6hyIygHJ8uQfuJV1wRA2jGkM99ZBC/EM5JQzNAIOyfFpNS6eHu+3Nze/yoVlVt4
Ga6PeVeLui4Lt4XgiOkb8g5+0pTmHL3HwQtZY98IunS8LxvOQkDiVJt8uoTCj+xI
D/b0RWBf/r0dCJN+7vWn2Xr3EGJoBj6a6R8p49P79pIWJtAuAiuDy1xgjbqnK+wQ
1AW2d/LrrT36D4+jX+P8uxND5bIYLoa8ec+WyoPzXimT89VSGsI4OKRoLtg/AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUzfmMJsCznxr5aD1eDfgqMt0Dqm8wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MTUwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAql3DANBgkqhkiG9w0BAQsFAAOCAQEAnn3D
v6H5poXhWY5HkvyntFmZ6BSqlsPP79GgYqwAXoO88S1WYuOVtsqho9pHpBtvG0u7
aL1d2KUgMcwpKqGQ4VKmE9fNMrLU9OQEhyNNQJsg4anpHLwBDInFI6hCBBiUgJrg
HP/SufM7oiBhIREV2jSOh6w43gI2INja9lxglgEEGeOpdQGcahedtn5OcISwUtaK
usGiDCRVLEWXBNJXfNEwbGvKeVXqB5M03Poei+qkUFi4fpNZPtqTrfbyXxbnPJ5M
l4YcqzaGbX2zqIXPcmeedYJVVU0LWnJ7hGcuCtaeIdz/7kUamMny0AuI10l1hp9x
wKK7OphRhDutwAGn2Q==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:48 2026 by rpki-client