Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144235.roa
File:                     AS144235.roa (raw, json)
Hash identifier:          hl1n6icHRw1OKTd1pujl/A7N2T4h+96wRcgzoqvH5Lo=
Subject key identifier:   7D:48:29:E4:CE:57:5F:BD:F7:9B:08:C3:5A:8E:4A:C8:13:78:6B:B6
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4F1D6B4611FAC26376070A40E8550FA985D22113
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144235.roa
Signing time:             Mon 25 May 2026 02:22:42 +0000
ROA not before:           Mon 25 May 2026 02:17:42 +0000
ROA not after:            Mon 24 May 2027 02:22:42 +0000
asID:                     144235
IP address blocks:        240a:a631::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:1d:6b:46:11:fa:c2:63:76:07:0a:40:e8:55:0f:a9:85:d2:21:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 02:17:42 2026 GMT
            Not After : May 24 02:22:42 2027 GMT
        Subject: CN=7D4829E4CE575FBDF79B08C35A8E4AC813786BB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6d:b0:5b:94:bc:e5:22:bb:85:8f:1d:85:f7:
                    bf:15:b9:5a:45:d2:c8:0f:8f:f2:98:82:03:8f:e2:
                    b7:7e:8a:18:d8:51:51:d9:e0:a1:9e:e0:91:be:70:
                    9d:a1:4f:f5:02:68:75:76:5f:a2:2c:2b:6f:59:f8:
                    22:25:8b:c2:35:10:ab:d4:bf:5a:aa:b7:9f:4b:a9:
                    56:32:aa:95:f6:56:f0:ca:ee:dc:0b:eb:4e:b2:16:
                    81:9d:c4:37:57:9a:76:f3:03:94:4c:c6:4d:65:55:
                    89:df:5b:07:4c:24:d8:14:a8:ac:b6:fd:2c:03:d8:
                    c7:16:7f:06:bb:9d:aa:57:fa:0f:70:e8:e3:0b:d5:
                    84:77:a2:e2:cb:fc:1d:8b:0b:a8:af:2d:7d:6a:f8:
                    f0:c5:47:b5:e0:8d:1a:a5:13:9b:a3:73:3f:99:6f:
                    5f:fb:aa:c6:e3:08:f6:ce:62:36:0d:03:79:24:ee:
                    69:a0:6a:91:76:c5:1c:97:6c:4d:22:43:a0:01:87:
                    c7:2f:b3:a3:82:fc:29:cc:61:0a:6a:84:fc:f0:f9:
                    ae:21:bd:73:e1:62:18:c3:0e:c8:e1:1c:56:c1:5e:
                    14:d9:ce:71:64:0a:d9:ac:c9:8f:b2:ff:c1:b1:ba:
                    77:8c:79:f7:a4:b6:b4:71:ff:29:18:08:c3:d7:b3:
                    00:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:48:29:E4:CE:57:5F:BD:F7:9B:08:C3:5A:8E:4A:C8:13:78:6B:B6
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a631::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:2f:3c:95:6b:13:a9:a5:93:f7:dc:c1:57:57:4f:9e:30:53:
         34:a2:07:3a:42:e3:50:ac:07:e5:2a:68:2f:b4:09:8a:fb:19:
         6c:ed:f0:f9:0b:99:48:81:2f:99:37:e6:39:95:e7:10:bc:a0:
         ff:60:3d:0d:5d:6e:7b:51:98:b7:b5:26:45:e8:3d:3f:4e:d5:
         35:ac:c0:b3:5a:a8:2e:78:85:cd:f6:9a:2f:09:81:35:60:ae:
         0a:4d:67:f7:3a:c4:9b:5f:e0:6f:7c:21:5f:8a:76:e4:5a:42:
         05:75:c3:bc:d2:49:3f:71:9b:aa:4a:2c:c3:d1:11:cc:26:4c:
         cc:ba:4b:a2:55:f0:02:98:fc:a2:7f:55:cd:ef:ea:05:cd:5f:
         9b:9f:a8:6c:6c:e8:b4:a8:13:fe:09:55:6f:66:34:a9:3d:fa:
         61:25:32:5c:97:d4:26:c7:15:49:01:99:59:83:fb:ee:fe:9a:
         de:7c:e4:51:b0:8b:74:55:b1:bf:63:35:5e:ef:b6:82:81:9d:
         35:5f:53:4a:4a:43:eb:6e:be:2f:a4:ef:b0:1f:db:ba:3f:83:
         5b:e6:ff:0d:e8:bb:8b:c9:6d:bd:2d:99:1a:9a:57:15:2c:75:
         a4:26:92:36:3f:4c:4e:ff:05:26:0b:b2:a2:44:95:1c:74:0f:
         98:40:a5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:48:59 2026 by rpki-client