Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144224.roa
File:                     AS144224.roa (raw, json)
Hash identifier:          h8FPAT+mtiaLl7e6mLBoxl0ORLy/frbNSIzruGwcXKM=
Subject key identifier:   56:BE:2C:69:89:A3:E8:F8:1B:18:89:B6:DD:46:0F:0C:21:D1:F9:30
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4CD895F94458EC0DECD25A30B77E6C09E70FC3B2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144224.roa
Signing time:             Fri 22 May 2026 04:07:53 +0000
ROA not before:           Fri 22 May 2026 04:02:53 +0000
ROA not after:            Fri 21 May 2027 04:07:53 +0000
asID:                     144224
IP address blocks:        240a:a626::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d8:95:f9:44:58:ec:0d:ec:d2:5a:30:b7:7e:6c:09:e7:0f:c3:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:02:53 2026 GMT
            Not After : May 21 04:07:53 2027 GMT
        Subject: CN=56BE2C6989A3E8F81B1889B6DD460F0C21D1F930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7a:13:ac:eb:d3:84:22:64:6c:52:6b:2d:78:
                    dd:f2:79:75:40:8b:a5:69:bf:3f:96:66:b7:1b:ec:
                    cf:f7:0a:76:c6:a8:c0:4b:e9:27:28:b2:d7:2b:ff:
                    9b:d8:ce:29:ca:b4:7d:b4:f6:23:6d:d9:44:ce:47:
                    c8:e3:8d:08:c6:49:ad:20:b8:6d:49:c8:10:32:8c:
                    28:b2:c9:df:5c:19:0c:5d:73:86:e0:14:59:c7:2a:
                    c1:e5:8e:ee:37:00:e0:47:2c:e7:72:ff:ef:87:4a:
                    03:4b:a1:99:0e:34:4a:ef:5b:48:06:2d:be:d4:c2:
                    ee:b4:ce:63:4b:03:73:7b:99:63:e7:8e:10:86:9e:
                    8d:53:85:95:b0:c9:a0:32:f8:93:01:0d:cd:0e:50:
                    3e:ea:53:8b:14:f1:76:b4:12:9d:68:bb:e4:85:59:
                    c3:ed:77:8a:39:4f:cb:4d:89:6c:ec:a3:4c:48:c7:
                    36:7c:6d:dc:e9:b3:1e:df:74:6e:11:14:bd:a2:c3:
                    ed:18:d6:fd:b5:56:f1:02:d9:6d:29:54:44:fd:2a:
                    5b:e6:52:1d:1a:f1:b1:5e:37:09:8d:90:e7:20:5c:
                    9c:ac:21:16:33:4d:15:92:6b:d7:c6:8f:87:1d:54:
                    48:09:1e:9f:6a:c1:24:8e:20:83:f6:ce:d9:08:d0:
                    2a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BE:2C:69:89:A3:E8:F8:1B:18:89:B6:DD:46:0F:0C:21:D1:F9:30
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144224.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a626::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:9f:3d:73:5e:f7:ac:c7:f8:c2:c6:9e:69:c3:26:9b:c3:91:
         2b:0b:58:13:1e:e5:7d:62:b7:36:e0:98:15:04:d6:97:1c:d1:
         79:7c:89:9b:8a:53:be:75:56:fb:54:52:d1:8b:fb:06:a5:70:
         60:ec:f4:1c:ce:22:e4:ae:81:6c:fa:40:5c:b3:5e:af:70:43:
         1f:ba:db:c0:33:05:da:20:19:fc:3b:54:4f:74:3a:a4:e4:fa:
         26:12:28:22:90:cd:6c:71:4c:de:9e:64:86:57:45:55:fe:c8:
         ed:70:37:73:45:19:bf:42:02:d9:85:0d:92:d1:2b:15:7c:9b:
         ac:3d:c9:ea:3a:70:55:91:a4:bc:55:b5:44:48:4f:c9:81:95:
         a3:79:64:1a:9c:c5:39:45:e1:03:e9:cb:5f:e7:40:aa:53:a2:
         94:d8:37:b0:bd:07:c0:15:f2:c8:2e:b6:58:10:88:b9:54:c5:
         8b:f3:b0:c1:d7:a1:23:33:55:7a:1f:79:33:f4:90:85:1b:f0:
         02:54:66:b8:71:93:18:45:e0:b0:6c:de:94:1e:29:1e:44:9b:
         45:93:bb:b8:d4:c3:e6:de:33:42:85:ea:3d:7c:a9:70:fc:38:
         69:64:ac:28:9a:74:10:da:47:ca:43:c3:07:e4:dd:b0:d2:cd:
         28:9b:9f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----