Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144186.roa
File:                     AS144186.roa (raw, json)
Hash identifier:          6BAf/Sl0HqcyYNmiadFMv0s+/2PLSqSpNlW/RGg4mM8=
Subject key identifier:   CA:42:7E:31:64:22:3C:4A:04:DD:48:FC:E0:B8:64:C0:86:58:3E:66
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3EC919D02D03519EEA325677A911C1AB0BD4C281
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144186.roa
Signing time:             Tue 26 May 2026 03:17:18 +0000
ROA not before:           Tue 26 May 2026 03:12:18 +0000
ROA not after:            Tue 25 May 2027 03:17:18 +0000
asID:                     144186
IP address blocks:        240a:a600::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:c9:19:d0:2d:03:51:9e:ea:32:56:77:a9:11:c1:ab:0b:d4:c2:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:12:18 2026 GMT
            Not After : May 25 03:17:18 2027 GMT
        Subject: CN=CA427E3164223C4A04DD48FCE0B864C086583E66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2d:eb:b8:14:44:b5:94:69:38:f3:d8:dd:6a:
                    35:3f:90:18:02:23:c9:7f:a0:d2:63:d9:d2:c7:61:
                    46:4c:be:08:53:cd:3d:57:d2:01:4a:fe:fb:79:ab:
                    79:98:10:8a:20:8e:ba:4a:21:de:5a:5d:28:75:45:
                    ee:49:0e:2c:19:98:71:93:44:42:14:ba:a7:07:34:
                    bc:7c:ca:a9:da:47:6c:40:6d:10:a3:9b:ad:9e:63:
                    28:50:00:97:d0:f5:b8:9b:8e:a9:54:4d:37:6c:ff:
                    e7:c4:6a:0c:17:d2:8a:aa:41:6d:26:d9:fd:0d:31:
                    11:0e:ae:a4:d0:13:fc:90:ae:03:20:c6:94:91:47:
                    86:70:60:3e:34:79:c7:85:2c:d1:f6:a1:5f:63:49:
                    71:f8:b0:44:22:a8:f7:66:95:ac:7f:46:ad:c5:40:
                    d4:4b:2c:3c:1c:c7:82:7a:74:c9:12:1b:5e:c9:98:
                    74:91:73:a9:6c:7f:65:a6:df:02:47:0d:9c:6a:d4:
                    68:fc:cb:ee:3e:b9:d0:ef:62:4a:5d:9d:8a:b7:78:
                    53:ee:8f:bd:d7:b9:bd:6c:66:92:fc:37:bc:a0:53:
                    25:a6:0d:09:34:1f:12:dc:c8:f4:c2:c9:68:f5:7d:
                    6d:a9:f6:e3:48:5d:64:0b:c3:23:a5:4c:e1:34:bb:
                    67:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:42:7E:31:64:22:3C:4A:04:DD:48:FC:E0:B8:64:C0:86:58:3E:66
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144186.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a600::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:cf:08:ae:c3:22:ed:1e:fb:2b:ea:d4:41:22:2d:e6:62:54:
         5f:d0:d1:35:d2:13:5b:83:a5:6c:f3:0b:f0:81:2f:58:5e:81:
         ae:8e:4b:4e:8e:59:9b:9a:20:d3:c3:15:1f:c3:16:3d:64:55:
         56:59:5f:e6:3d:9f:79:81:ff:26:c0:81:29:70:0c:87:cf:81:
         1c:99:e7:6a:61:72:a5:2e:e2:fe:d6:35:79:1e:4a:56:77:5d:
         63:9c:83:89:d9:a3:14:35:cd:14:2d:cc:93:6e:83:2b:cb:3a:
         30:fb:59:74:b0:b6:4d:ff:49:62:84:8f:97:4b:d9:77:0f:81:
         dd:4b:3c:a0:e6:44:bf:b3:54:1c:9a:26:68:5c:f7:71:1a:15:
         5e:f4:22:31:5b:dd:79:aa:74:1e:bd:fe:2c:82:1d:ab:bc:0c:
         80:7f:a5:51:3f:11:a5:30:f5:4e:38:df:58:11:02:9f:2e:d0:
         8f:77:98:bf:d2:5f:22:a5:1c:3b:ed:66:fd:13:a1:b1:0c:52:
         3d:ef:e8:ec:13:21:36:11:38:6c:92:cb:41:0f:d1:da:09:b3:
         23:90:46:7e:cf:16:f4:b9:a0:8e:5b:b2:91:1b:f6:e3:15:ab:
         70:97:16:d4:58:d9:22:74:db:bb:4b:64:54:94:bf:16:82:8e:
         b1:b1:8b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----