Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144241.roa
File:                     AS144241.roa (raw, json)
Hash identifier:          W0AOzuM743bp/t9kar7Bgc3gLnqdvaqIs3fxmn4RAqI=
Subject key identifier:   EB:DA:E0:E6:6E:87:15:1F:E1:30:E4:3C:A8:88:E3:4E:FB:1A:15:6A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5BF953CF1159112012B0CD06FF2AA1DB83D0DE5B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144241.roa
Signing time:             Tue 26 May 2026 06:12:35 +0000
ROA not before:           Tue 26 May 2026 06:07:35 +0000
ROA not after:            Tue 25 May 2027 06:12:35 +0000
asID:                     144241
IP address blocks:        240a:a637::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:f9:53:cf:11:59:11:20:12:b0:cd:06:ff:2a:a1:db:83:d0:de:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:07:35 2026 GMT
            Not After : May 25 06:12:35 2027 GMT
        Subject: CN=EBDAE0E66E87151FE130E43CA888E34EFB1A156A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e3:92:44:ae:44:24:62:50:b6:94:ab:ad:f8:
                    fa:ae:c1:ac:b8:5a:95:86:0b:b3:cd:57:f6:1b:76:
                    e3:33:fd:7b:34:e8:ad:d9:09:e1:e6:5a:b9:63:b6:
                    50:95:37:59:69:a2:78:42:b9:f9:8c:53:f1:86:90:
                    98:99:ec:14:de:55:e3:de:60:a9:c3:f1:55:36:88:
                    8e:5e:cd:64:af:e9:84:4d:22:14:bf:0b:ee:50:e7:
                    8d:01:1c:c1:25:4d:36:c0:9a:ad:42:50:c2:97:ee:
                    db:5c:34:38:f6:35:31:3c:e1:0e:d3:94:02:26:5c:
                    e6:6e:46:34:36:c5:31:f4:8d:14:1a:6d:2e:6e:39:
                    25:d6:e9:eb:cd:c5:9e:5e:b8:2e:db:92:06:7d:4f:
                    fa:43:69:20:3d:dd:af:a6:67:5d:f2:54:25:e9:50:
                    9e:2b:6f:90:3b:85:69:c4:ab:b4:b5:07:ad:a2:54:
                    36:8e:f7:eb:df:33:ec:e1:e6:0c:cf:e8:a9:0d:a6:
                    9e:5f:bb:82:73:7b:c5:6c:83:a9:b7:e8:75:32:e4:
                    23:56:f1:33:ab:74:4e:ac:48:0c:50:1f:30:d2:44:
                    06:73:69:53:f1:25:0b:16:91:82:7c:9d:07:1f:52:
                    8d:d5:38:b1:93:d1:4a:8a:de:9f:df:b2:26:4c:19:
                    64:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DA:E0:E6:6E:87:15:1F:E1:30:E4:3C:A8:88:E3:4E:FB:1A:15:6A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144241.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a637::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:1d:98:f6:3e:e7:fa:b1:bd:ff:8e:50:26:a0:a9:fc:d9:ec:
         a1:ca:29:cd:be:60:66:56:ef:39:3d:58:8a:e2:1d:59:8b:3d:
         4c:c8:b2:0f:26:db:12:d3:f0:65:80:5c:15:ae:4e:e8:17:d0:
         ea:9a:70:66:b6:da:b3:09:83:8f:36:13:0a:85:96:7b:b0:9f:
         db:63:ae:d1:6c:b6:a2:f5:9b:78:5a:8e:b0:66:5e:4c:dd:23:
         81:43:84:a3:9c:5d:0e:2a:82:3c:19:85:08:96:79:43:df:04:
         2d:52:a0:bd:64:19:68:c5:c9:71:18:b9:79:c3:d2:18:26:8a:
         58:07:92:a2:78:44:66:c3:f5:57:ca:9c:fd:67:06:db:d1:41:
         b5:9d:9d:94:a5:a8:7a:46:a2:b1:1c:c2:0b:d2:bc:69:cd:43:
         dc:57:56:0c:54:43:13:79:ec:a6:f4:8b:c2:ae:a7:cc:f6:4a:
         86:f6:a6:c4:3b:ac:2e:a5:23:b4:e9:bd:10:28:de:43:23:32:
         a7:19:b1:a0:b5:76:b9:b6:36:6b:b9:10:ab:88:27:5e:76:d7:
         0b:bd:39:a9:a7:09:5e:b6:44:a4:7b:a0:96:79:24:ba:a6:76:
         ce:ae:2f:b5:2c:b9:7d:e8:6b:aa:16:ea:b3:a6:5e:d5:46:78:
         66:cf:b3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:00 2026 by rpki-client