Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144163.roa
File:                     AS144163.roa (raw, json)
Hash identifier:          Ps4RWHrYSr5fkRsiyPLRQOGiTuNfem/YevxdYZEjgIo=
Subject key identifier:   E5:37:37:16:8C:01:0B:C8:BC:1A:6F:0F:76:1F:48:04:74:EF:F7:A1
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       78CA57A46E2B03C74D307B3C000886CBE85A026E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144163.roa
Signing time:             Mon 25 May 2026 01:20:12 +0000
ROA not before:           Mon 25 May 2026 01:15:12 +0000
ROA not after:            Mon 24 May 2027 01:20:12 +0000
asID:                     144163
IP address blocks:        240a:a5e9::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ca:57:a4:6e:2b:03:c7:4d:30:7b:3c:00:08:86:cb:e8:5a:02:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:15:12 2026 GMT
            Not After : May 24 01:20:12 2027 GMT
        Subject: CN=E53737168C010BC8BC1A6F0F761F480474EFF7A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a9:69:fd:96:72:2c:c8:c6:94:b3:85:16:f4:
                    6e:51:92:f0:b5:58:27:91:c6:53:ff:86:46:1f:1d:
                    9e:60:94:9a:a3:db:3a:a3:d9:c8:b1:c1:90:7d:90:
                    13:85:82:a8:02:ce:00:d9:34:3a:f2:c4:cf:74:75:
                    fa:eb:aa:9d:cb:e2:fd:f4:4b:07:06:52:a6:bd:86:
                    03:7e:3c:24:a3:2d:8e:2d:63:83:0e:d9:48:fb:7b:
                    41:54:d7:a6:27:0e:0d:8d:55:98:5a:96:0c:43:7e:
                    0b:f8:0c:ee:8f:54:7e:75:aa:55:3e:01:b6:de:84:
                    ba:11:57:c6:13:af:73:29:bd:59:b5:6f:84:f7:f5:
                    25:00:a7:e0:35:37:3e:8b:3c:9a:b8:de:1d:ba:f3:
                    67:3a:77:10:fc:e1:02:52:d3:a2:11:21:30:41:49:
                    48:0f:43:5f:64:e2:bf:fa:d9:1e:41:e2:ee:27:08:
                    96:d6:a8:d5:fa:7f:cf:54:1d:f3:4b:11:21:0c:d2:
                    27:ba:ba:aa:82:d0:a7:2f:53:e6:0e:16:90:08:54:
                    6d:8b:6b:9b:65:71:09:8f:b2:ca:f9:fa:45:01:c8:
                    5a:12:4e:8c:f4:44:eb:39:74:d5:b9:dd:f3:e6:ae:
                    f8:b9:7b:7f:11:33:16:1d:72:8e:ff:6b:9e:21:73:
                    48:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:37:37:16:8C:01:0B:C8:BC:1A:6F:0F:76:1F:48:04:74:EF:F7:A1
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144163.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a5e9::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:b6:34:c3:de:eb:c4:72:fa:65:e7:14:19:f6:cf:a0:17:90:
         cb:d0:1a:c0:3e:c6:ee:a9:d9:40:40:74:52:8b:ec:ff:e6:f7:
         74:56:f4:d4:5d:71:b4:e4:47:01:4b:8d:d4:84:8a:50:81:38:
         cd:08:6f:c5:6c:e2:aa:c2:97:5d:3c:82:82:c7:ee:54:ef:5c:
         35:27:f6:00:18:ed:06:64:26:9f:04:f6:67:5a:91:84:38:83:
         b9:2b:c9:c3:17:fd:f5:f5:34:52:ca:76:55:23:ff:09:8c:18:
         cc:bf:e9:26:c7:e9:47:77:d4:1c:67:92:c5:de:6a:a4:e8:3a:
         54:d0:d3:6e:d3:50:03:66:db:8f:99:a5:01:7b:f6:99:c9:78:
         a4:38:e9:ad:80:07:46:98:aa:a3:60:67:af:7d:ac:ff:2a:94:
         16:b7:46:04:a9:bc:36:42:75:8f:a5:bb:80:9a:0b:3d:8f:92:
         0c:f3:80:34:da:a5:5e:e8:a3:3f:87:a1:7b:08:72:45:b9:8c:
         53:dc:8e:63:d0:81:a9:30:3a:40:0d:be:3c:77:72:07:4b:ca:
         46:db:7d:17:e3:55:cd:aa:bd:e8:c5:b6:9c:93:c4:78:f2:b0:
         a5:cd:b4:04:ab:7e:ee:67:19:9b:78:ae:90:5a:91:76:39:31:
         b0:c2:57:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:46 2026 by rpki-client