Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144244.roa
File:                     AS144244.roa (raw, json)
Hash identifier:          VHOZIFcepkik1SlQCAXOkMcOkanEzx4KXrQh0SwV0NA=
Subject key identifier:   F0:00:55:53:7B:F8:52:02:05:97:AC:9A:29:1F:30:48:56:9B:99:F9
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1FC063FBD929063BD1591C6F80BD754FFE4EE318
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144244.roa
Signing time:             Tue 26 May 2026 06:12:30 +0000
ROA not before:           Tue 26 May 2026 06:07:30 +0000
ROA not after:            Tue 25 May 2027 06:12:30 +0000
asID:                     144244
IP address blocks:        240a:a63a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:c0:63:fb:d9:29:06:3b:d1:59:1c:6f:80:bd:75:4f:fe:4e:e3:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:07:30 2026 GMT
            Not After : May 25 06:12:30 2027 GMT
        Subject: CN=F00055537BF852020597AC9A291F3048569B99F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:49:4c:ea:57:37:ad:73:f8:6f:0e:ce:fc:d4:
                    62:e8:05:3a:5a:9a:57:ee:4e:a6:ad:58:56:96:4d:
                    79:6e:15:3f:b8:89:88:0f:5b:d3:35:50:85:20:5c:
                    b3:8a:53:d2:2d:da:e1:9d:6c:6e:00:50:33:7e:3c:
                    e3:50:01:21:98:34:0d:12:9c:a3:e7:f7:b9:cb:d6:
                    c0:2e:e0:df:52:74:19:cb:ad:df:5d:6d:00:e9:09:
                    2c:fb:6b:b3:79:25:6d:8a:af:35:84:9b:9c:5b:c2:
                    47:b5:fc:c3:84:e7:41:c5:24:d3:25:63:78:b2:3f:
                    37:82:9c:71:bd:78:99:81:d8:5d:5b:42:e7:d5:1e:
                    63:a5:51:a8:fa:17:38:7c:f4:9a:bb:7f:18:a4:69:
                    e9:50:8e:36:1f:92:ac:16:21:ea:ff:e9:f3:a9:bb:
                    eb:ec:b3:88:5e:3c:ec:d1:13:63:93:52:ef:c7:51:
                    52:e7:93:c5:a4:14:2b:ef:25:dc:2c:53:06:5b:65:
                    68:fa:30:14:bd:fa:3b:86:c1:6a:c4:35:77:92:70:
                    f6:4f:34:da:96:88:7b:c0:85:17:7a:58:ba:c3:24:
                    41:e6:75:58:21:70:37:36:3d:50:f8:d7:98:e8:01:
                    e3:31:08:66:b2:2c:4c:37:92:67:0d:5a:d7:0c:0a:
                    32:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:00:55:53:7B:F8:52:02:05:97:AC:9A:29:1F:30:48:56:9B:99:F9
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144244.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a63a::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:db:f3:10:47:4d:d2:84:b8:1f:c7:88:84:3d:38:d3:72:f8:
         ed:be:93:7c:fc:21:27:9f:c8:35:48:77:00:fb:6e:f9:21:9c:
         39:fe:5a:29:41:6b:b5:16:a1:18:bb:f2:be:ba:2e:a6:a7:e7:
         f8:f5:75:4c:00:fc:3d:b7:9a:f4:98:74:a0:20:b5:a2:b4:db:
         43:3e:45:de:ea:2e:1d:d9:67:5b:93:db:9b:8d:a7:9f:15:20:
         0a:a3:0b:4c:3e:2b:28:a3:50:cc:7a:6c:68:cd:19:da:1d:8e:
         bd:8c:10:16:4a:a0:55:08:15:1b:7f:1f:b1:f9:52:c3:49:73:
         d0:68:21:de:a2:86:4c:c8:5c:74:e6:19:4c:aa:99:bd:7a:8d:
         72:8f:c4:6d:f1:d8:1a:d0:fd:b6:b5:ff:62:43:07:ac:77:05:
         d9:21:3e:19:5d:7d:64:dc:6c:a6:fb:d1:e8:e8:c6:8e:05:28:
         ab:2f:af:8d:cb:dd:52:6c:83:90:18:00:ac:d6:f8:01:2e:d7:
         99:ad:6f:39:45:88:bc:9a:19:07:50:88:d1:33:dd:b5:4f:81:
         20:e7:47:9b:2b:e6:66:32:58:8a:d2:e6:f4:3e:a4:2d:93:a1:
         5f:42:32:86:d3:a4:5d:ce:a1:7e:8e:4d:0d:3d:7b:ad:50:5a:
         9b:ec:01:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:19 2026 by rpki-client