Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144196.roa
File:                     AS144196.roa (raw, json)
Hash identifier:          LfTyXemhFKbb8b3AezcRlk1xTVjR0W4NSbmKwKTXhcw=
Subject key identifier:   54:AE:37:FD:CE:4A:E8:DA:B8:FC:E9:28:BA:03:B4:86:44:60:C4:96
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       77830927755C622A65ADB468FE7030AE01AD1C46
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144196.roa
Signing time:             Fri 22 May 2026 06:27:45 +0000
ROA not before:           Fri 22 May 2026 06:22:45 +0000
ROA not after:            Fri 21 May 2027 06:27:45 +0000
asID:                     144196
IP address blocks:        240a:a60a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:83:09:27:75:5c:62:2a:65:ad:b4:68:fe:70:30:ae:01:ad:1c:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:22:45 2026 GMT
            Not After : May 21 06:27:45 2027 GMT
        Subject: CN=54AE37FDCE4AE8DAB8FCE928BA03B4864460C496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:43:b1:20:a7:aa:40:1a:a4:f4:89:6b:2e:9c:
                    3d:0e:0b:7f:17:59:ee:d7:71:01:50:98:11:9c:eb:
                    d1:19:c5:68:48:76:9c:f1:0d:6b:4f:1b:31:fe:0c:
                    35:bc:f2:b5:0a:d2:0b:9e:5c:23:d8:d5:a8:fa:d2:
                    d1:02:07:b4:3f:72:4a:e4:f7:67:f2:91:1e:f5:fd:
                    12:52:0f:3c:5d:1b:48:a0:54:b2:49:8a:34:0b:7a:
                    2a:21:5b:83:3f:0d:c1:ad:02:56:a6:a7:61:2d:64:
                    75:67:b6:fd:70:a8:be:b6:d1:39:14:31:1e:d8:e2:
                    bc:c0:ea:d1:97:e0:57:ff:cf:66:aa:d2:c5:6f:7b:
                    e2:80:19:e6:d5:e4:c6:20:1c:87:4f:ea:aa:e8:e1:
                    96:f1:33:85:ca:fb:3f:f2:d7:45:4b:32:40:fe:85:
                    ee:1e:a3:aa:fa:18:77:f0:52:e3:50:1a:d0:09:e7:
                    58:f0:d1:8a:a0:70:ae:da:74:2d:bd:3e:04:d2:77:
                    ef:67:13:5d:22:e6:43:85:c4:79:dd:74:77:f2:ef:
                    2b:16:a3:88:48:8b:fe:62:e1:05:ec:c7:a1:9d:9f:
                    e1:a9:df:f9:2c:f5:b4:e4:da:b3:dc:06:bd:02:82:
                    a2:a5:e1:a5:a5:0b:fa:e2:74:0d:ad:d0:ed:71:0b:
                    18:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AE:37:FD:CE:4A:E8:DA:B8:FC:E9:28:BA:03:B4:86:44:60:C4:96
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144196.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a60a::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:13:c9:09:cb:6b:66:93:60:47:64:4d:5d:36:eb:1a:78:78:
         12:66:f0:0d:70:ee:ae:83:83:34:05:6a:55:b7:ac:df:3d:08:
         35:a3:9c:4a:26:d6:f7:95:eb:53:e8:cb:bb:12:07:bf:39:76:
         b6:73:e1:7e:90:d0:ce:3c:f1:b0:02:7e:cb:1e:60:6d:06:05:
         19:89:26:f8:60:10:25:4c:13:60:cf:a7:bd:69:57:da:00:9b:
         85:da:7f:4c:33:46:e5:2a:c1:a0:bd:fd:de:f1:e8:ea:76:54:
         9b:c5:84:ac:74:54:74:9c:b2:38:5f:a4:e9:03:91:2e:98:af:
         6e:d3:b7:45:e6:c9:98:90:64:ba:a7:77:f4:9f:dd:47:35:bd:
         48:d4:77:af:28:39:81:01:b7:12:b3:a8:0e:5a:c2:62:c7:4a:
         3e:73:9f:d7:a7:a5:cc:44:f6:67:ff:07:35:0b:96:da:c9:91:
         51:ec:fd:16:48:f0:d7:0e:e6:53:d4:02:98:66:55:71:5e:f1:
         05:4d:46:6b:0c:ee:55:9c:a6:4c:9b:6f:78:63:b9:1e:30:5e:
         7b:e5:09:c8:e6:78:f8:a2:04:33:f2:d9:d4:e0:cf:57:b8:15:
         49:3c:ef:8f:b0:fb:9b:59:70:af:82:a6:8f:c0:d8:f9:99:08:
         0f:43:a3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:57 2026 by rpki-client