Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144154.roa
File:                     AS144154.roa (raw, json)
Hash identifier:          onT349EGdUvvOvfFgFlExcO5317IoBGouPvLLzP7D24=
Subject key identifier:   89:87:11:85:87:91:E2:2F:B7:FB:6E:D8:A3:52:EC:BE:BD:90:88:B6
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6C50D6F539AB362031C3C4F08D61C86A80B9B289
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144154.roa
Signing time:             Mon 25 May 2026 01:38:29 +0000
ROA not before:           Mon 25 May 2026 01:33:29 +0000
ROA not after:            Mon 24 May 2027 01:38:29 +0000
asID:                     144154
IP address blocks:        240a:a5e0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:50:d6:f5:39:ab:36:20:31:c3:c4:f0:8d:61:c8:6a:80:b9:b2:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:29 2026 GMT
            Not After : May 24 01:38:29 2027 GMT
        Subject: CN=898711858791E22FB7FB6ED8A352ECBEBD9088B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ae:ef:e1:3b:62:79:d7:c9:57:69:f2:1d:fd:
                    d9:0c:a1:ff:50:ae:46:50:1b:6a:1f:b3:b8:81:a0:
                    59:1e:32:6d:81:92:94:89:ff:da:f2:2e:d7:a3:53:
                    1c:91:46:c6:88:0a:75:44:f4:4d:7f:a7:a5:1f:e6:
                    58:31:7c:df:d1:da:93:10:03:9d:44:f0:58:b7:41:
                    46:bb:11:bc:6e:c1:c5:2b:3a:91:a4:f8:84:bd:d9:
                    03:d8:85:5b:1d:17:fc:db:2d:a0:b8:fa:22:fd:fe:
                    5f:dc:06:09:e9:ed:4a:d8:a9:b5:d6:b9:37:fa:c5:
                    7a:d0:f0:69:aa:00:a8:83:31:5a:89:1b:6b:19:b8:
                    bd:52:23:bd:a7:41:bc:6e:3a:3a:9f:4c:1e:98:9b:
                    f6:fb:8d:39:58:92:02:36:b6:b9:77:8a:f1:96:e8:
                    b7:0b:4d:98:7b:a8:7b:00:4d:12:80:f1:e7:6b:bd:
                    e1:40:80:e8:09:5d:b3:0f:bf:4c:40:a1:c5:72:62:
                    a0:bf:bd:82:40:99:1c:cb:93:09:7c:4f:37:7d:92:
                    df:e4:36:ee:90:d8:9f:2e:e9:33:52:37:a8:bc:fd:
                    a6:c1:6e:90:52:df:dc:a0:84:31:59:5c:eb:64:9a:
                    5e:51:79:4a:ae:bb:bb:9c:a7:4d:3d:78:4c:e2:93:
                    1b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:87:11:85:87:91:E2:2F:B7:FB:6E:D8:A3:52:EC:BE:BD:90:88:B6
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144154.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a5e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:b2:7f:14:1c:47:b2:71:ce:c5:e3:8b:6e:dc:1e:48:a0:00:
         ad:a5:3e:ce:07:08:99:f5:c1:cb:5c:f2:18:c2:76:0e:e4:6c:
         3d:92:23:b1:42:e9:54:df:8a:bb:ab:2d:8f:c0:a2:d7:68:86:
         e9:32:e6:b9:7f:66:93:c0:63:10:9d:0b:86:21:c5:d9:db:6e:
         e8:1e:dc:d3:f3:e2:7b:a8:9d:16:e2:af:26:6e:a9:26:4b:b4:
         36:75:55:74:9a:02:d3:08:b3:aa:51:27:6d:3a:d2:a9:e3:03:
         d5:0e:db:7e:23:63:8d:f0:ce:b4:74:90:c6:a1:e4:6a:e5:61:
         5b:98:e7:6d:78:97:6e:44:a1:50:12:47:4b:af:ba:4e:91:ad:
         92:8d:85:ea:6b:a9:a8:30:da:52:9a:6f:28:e7:10:e2:df:06:
         75:20:25:ba:4b:0f:14:23:e4:cb:6e:c9:a0:1b:b7:fb:3f:d7:
         20:91:f9:f3:33:d8:6e:29:1e:77:b0:03:ca:f5:f3:85:d1:06:
         eb:67:16:ca:da:63:c5:73:6c:f5:6d:76:1f:01:8b:51:ca:9b:
         95:1b:f3:28:da:89:6f:31:89:29:be:94:b4:4f:8a:cb:48:4d:
         28:12:7c:1f:7f:c8:86:1d:35:3c:65:a0:b8:10:7d:fb:6c:06:
         65:1f:60:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----