Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144226.roa
File:                     AS144226.roa (raw, json)
Hash identifier:          9j0fNvLZcznoLmhWnevILQwr0oyFvhBeqz9jYSdMq10=
Subject key identifier:   99:47:78:5F:84:23:32:33:49:B5:DA:E3:31:43:33:09:23:CD:78:0E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       03207D3AE395E0CB10C48CF7AA22CA148BF8E76C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144226.roa
Signing time:             Fri 22 May 2026 07:40:42 +0000
ROA not before:           Fri 22 May 2026 07:35:42 +0000
ROA not after:            Fri 21 May 2027 07:40:42 +0000
asID:                     144226
IP address blocks:        240a:a628::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:20:7d:3a:e3:95:e0:cb:10:c4:8c:f7:aa:22:ca:14:8b:f8:e7:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:35:42 2026 GMT
            Not After : May 21 07:40:42 2027 GMT
        Subject: CN=9947785F8423323349B5DAE33143330923CD780E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2f:32:b9:4c:c4:f2:24:a1:1f:cb:05:af:70:
                    e6:1c:66:b3:30:23:82:80:60:bb:6b:88:85:1b:39:
                    50:c8:6b:f1:70:61:0b:6b:93:53:13:27:a0:15:16:
                    e9:f1:4d:5e:b1:a7:65:7a:d6:12:83:ce:8e:c3:bc:
                    ec:ef:c8:f0:66:f6:02:5f:70:6e:98:57:a8:a9:51:
                    78:33:05:3a:bd:52:3c:e5:a5:5c:4a:6e:b0:e8:aa:
                    73:ea:0e:c4:bf:5c:7e:dd:6f:3b:5d:42:a1:bf:19:
                    3d:9c:e7:63:37:a7:2d:39:e8:d1:26:4e:c5:2a:c4:
                    26:34:f7:07:3b:3c:45:fe:d5:ac:9b:7b:08:90:32:
                    83:ff:33:d9:50:97:36:a0:95:53:16:a7:f8:80:89:
                    6c:39:90:eb:e5:7b:14:a1:e4:4e:86:24:30:6f:6c:
                    e2:52:31:4c:e5:99:fe:77:88:78:1d:4a:97:06:a1:
                    bf:6b:4e:ad:8c:a9:d5:45:90:fb:31:9e:c1:31:9a:
                    d5:77:a8:c5:9e:ac:16:f7:65:8e:85:37:a9:26:9b:
                    57:ab:18:54:15:d8:b7:3b:9e:db:a6:54:0d:cf:44:
                    a1:8d:7d:81:f2:11:43:f9:1f:11:29:b4:11:e9:89:
                    81:54:0c:ea:0c:63:82:65:cc:73:74:03:14:28:a2:
                    af:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:47:78:5F:84:23:32:33:49:B5:DA:E3:31:43:33:09:23:CD:78:0E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144226.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a628::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:1f:64:e6:82:f1:36:dc:82:0c:18:4c:ee:4a:2b:a7:d9:7f:
         17:e3:e9:5e:1b:1e:c7:4f:06:a8:b1:ac:a8:93:90:c7:5f:2e:
         39:ba:33:19:a4:69:6f:e0:96:31:54:ad:77:51:65:fc:46:db:
         40:09:f4:33:4f:03:90:08:c4:ff:06:e6:d1:47:8d:12:7b:6c:
         67:07:64:32:a6:9f:6c:c9:a9:df:e3:de:b5:4d:d7:dc:56:5e:
         02:11:83:6c:1e:74:db:12:47:95:7e:06:87:c9:77:19:9a:c2:
         77:6b:62:8f:d6:37:56:6a:e8:b8:c6:35:65:dd:4f:38:3e:0c:
         50:41:5a:12:fd:73:b8:d7:39:fa:84:df:8b:1e:ae:31:0a:37:
         c1:e6:97:39:3a:b5:de:7a:2e:97:62:f4:28:8b:36:51:7d:72:
         7c:28:a2:ab:2e:c5:09:bc:5a:0b:b7:ce:28:1f:ae:ab:f1:81:
         39:88:ba:dd:6a:d6:01:9f:a6:1e:1a:1e:74:34:0a:1b:64:6f:
         69:81:85:98:39:cd:d5:16:24:f6:e3:35:57:63:13:f8:3c:a5:
         48:21:dd:45:09:0b:6f:5a:04:d6:bb:fa:25:90:69:3b:a3:08:
         35:33:72:84:5d:69:b4:81:6e:46:73:f0:88:65:9e:52:9f:43:
         32:30:ab:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----