Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144245.roa
File:                     AS144245.roa (raw, json)
Hash identifier:          LFu8yvRggKNewPUf9bcXuy452tgjJ6MwI/gGVWc63FA=
Subject key identifier:   E7:26:62:7C:1E:FB:E0:94:FB:D9:0A:05:E2:A4:4D:18:67:EE:A8:84
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3E5BEC0E453F5AC958FB024AD8C0601D84CE50E3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144245.roa
Signing time:             Tue 26 May 2026 01:13:09 +0000
ROA not before:           Tue 26 May 2026 01:08:09 +0000
ROA not after:            Tue 25 May 2027 01:13:09 +0000
asID:                     144245
IP address blocks:        240a:a63b::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:5b:ec:0e:45:3f:5a:c9:58:fb:02:4a:d8:c0:60:1d:84:ce:50:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:08:09 2026 GMT
            Not After : May 25 01:13:09 2027 GMT
        Subject: CN=E726627C1EFBE094FBD90A05E2A44D1867EEA884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5b:99:dc:1f:96:01:87:1f:e7:39:54:4c:c6:
                    7d:ca:13:20:29:24:db:95:c0:64:67:d5:c9:d7:c8:
                    6f:f8:12:9c:dd:da:d4:7e:3e:d2:5e:51:20:51:bc:
                    fa:e9:74:c6:94:53:05:a9:02:03:d5:fc:35:84:a2:
                    2a:aa:c7:c6:33:9e:20:78:9c:42:dd:f0:3d:c9:4c:
                    dd:09:20:a7:aa:8d:d2:2b:66:59:c9:8d:32:ea:40:
                    c9:39:7c:fb:ec:e8:62:f8:56:1e:24:ce:80:01:b5:
                    3f:fa:b6:a5:88:52:ee:09:29:86:8f:21:4f:37:88:
                    65:27:2f:f6:d1:4f:c6:93:4d:eb:bf:22:ee:3b:aa:
                    39:04:5c:89:24:6a:cf:ca:44:0d:14:88:5e:2a:26:
                    c8:96:44:cf:5f:1f:0e:67:d7:a1:a9:c5:30:d3:fa:
                    9b:49:ba:71:65:96:11:48:b9:62:bb:f4:40:37:01:
                    b3:5f:da:42:c2:bb:29:8c:c2:b3:d3:fb:8d:f9:86:
                    a4:cb:54:29:79:92:7b:9c:ca:d0:53:bc:12:46:0c:
                    c8:cd:2a:d0:de:db:a8:aa:9e:92:1f:03:f7:b5:4b:
                    94:c8:9e:79:a4:85:48:e8:60:4a:8c:ec:f2:10:4f:
                    b3:9e:75:ca:bb:dd:fa:4d:88:c8:d4:98:2d:71:e9:
                    4f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:26:62:7C:1E:FB:E0:94:FB:D9:0A:05:E2:A4:4D:18:67:EE:A8:84
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144245.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a63b::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:45:f7:7c:73:d8:f6:4f:c2:75:c7:92:43:5e:86:d4:8c:00:
         4e:62:b8:a8:97:ca:47:58:d5:4b:22:91:67:76:a6:5f:29:9e:
         9d:d4:4d:7d:5a:2c:d3:4f:ec:60:5e:34:1c:09:1d:14:9b:56:
         0b:5d:0e:7b:e7:35:c3:a0:b4:ab:59:10:85:7a:81:06:f4:04:
         1b:c9:bc:54:e2:bf:d2:81:ad:aa:4a:82:81:16:e1:01:ba:b5:
         07:f9:2a:67:e0:c4:9d:6e:a0:af:73:f8:dd:af:02:47:ed:b4:
         ac:2e:be:e2:c2:94:cb:ef:7b:f4:9d:c9:a1:fc:b8:c5:56:b5:
         7f:a7:e4:d7:10:1b:d6:a8:76:00:b7:02:46:77:ca:b4:10:e8:
         76:09:26:3e:2d:9b:0d:96:37:5c:76:d2:14:d4:1b:f2:5c:a0:
         41:0d:f1:35:8e:9d:b4:94:7c:eb:7a:08:4e:22:f7:4b:59:02:
         38:82:7b:dc:6a:1a:c3:c3:3b:22:f5:26:be:a0:b6:ad:c8:47:
         38:80:09:49:cb:8b:23:df:64:03:e0:5f:b3:11:b7:83:ff:f3:
         4e:7c:90:c3:af:5a:06:cd:61:14:d0:1a:06:d0:ef:78:63:d2:
         08:64:99:89:dc:2c:23:23:95:f4:fc:14:24:1e:b0:0d:39:76:
         ff:a0:1c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:46 2026 by rpki-client