Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144259.roa
File:                     AS144259.roa (raw, json)
Hash identifier:          xmPLRCdVyoO0JE8fwqOrvdXL7P1GPXHiyYTnztiF9Uo=
Subject key identifier:   9B:BC:83:C1:1B:31:97:BF:7A:C1:AC:6C:59:A5:ED:F1:D8:9E:CD:EB
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5BDAFBCD9CCA82A868630F44DF45DD8750F5B394
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144259.roa
Signing time:             Fri 22 May 2026 06:27:56 +0000
ROA not before:           Fri 22 May 2026 06:22:56 +0000
ROA not after:            Fri 21 May 2027 06:27:56 +0000
asID:                     144259
IP address blocks:        240a:a649::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:da:fb:cd:9c:ca:82:a8:68:63:0f:44:df:45:dd:87:50:f5:b3:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:22:56 2026 GMT
            Not After : May 21 06:27:56 2027 GMT
        Subject: CN=9BBC83C11B3197BF7AC1AC6C59A5EDF1D89ECDEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:27:b1:7b:3c:fe:b8:e3:51:67:62:58:6b:87:
                    c7:91:12:49:40:58:11:70:4c:3c:0c:23:30:f5:f6:
                    7d:11:1a:50:60:ad:57:21:f4:14:b9:35:a8:a9:84:
                    8f:16:ce:fb:ba:24:9f:15:41:c9:8d:82:6a:78:6c:
                    29:3a:03:6a:e6:43:f8:1a:88:6d:5f:4f:30:b5:39:
                    3f:19:2e:0c:73:72:50:88:26:70:81:1f:35:6d:4e:
                    16:dd:e6:9c:1b:0d:f7:de:6d:b8:84:60:bb:55:2b:
                    e7:6b:c1:3b:3e:ee:06:44:6d:17:1d:5a:54:d3:ad:
                    f2:d4:d2:5c:c8:e7:32:ae:e2:34:79:93:0b:f6:77:
                    2f:4b:5a:df:29:a8:1e:31:56:ea:60:27:84:c9:3e:
                    34:e0:be:bf:e8:b4:18:7b:f3:bf:60:be:1a:32:42:
                    a7:f8:d0:f2:0b:f1:b8:3a:5a:10:66:27:a7:56:f0:
                    51:b7:7a:74:1f:bd:c6:10:71:9c:55:15:93:35:6f:
                    79:99:fb:c0:08:13:92:c7:fc:66:b6:79:b3:a8:44:
                    d8:81:d5:3d:ae:1a:ac:6c:00:80:91:c6:25:3a:58:
                    99:9a:e8:e4:c7:fe:a6:3a:4a:9d:59:9d:c6:e1:23:
                    d7:bc:5a:b7:df:a1:e0:07:b3:59:35:f9:be:ac:10:
                    ff:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:BC:83:C1:1B:31:97:BF:7A:C1:AC:6C:59:A5:ED:F1:D8:9E:CD:EB
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144259.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a649::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:30:44:11:0a:12:fd:64:85:f6:2b:87:12:11:79:87:ca:0d:
         56:2d:67:13:58:ea:44:08:5b:de:8a:d8:eb:ca:eb:c8:13:d1:
         81:d8:41:3c:a9:dc:ae:76:ec:f8:db:73:a1:4e:5f:70:69:dd:
         fe:8e:db:75:73:06:06:d4:ea:66:15:a9:bb:23:b2:92:01:4d:
         f2:b3:5d:2a:40:6d:d7:55:5b:37:85:10:87:d7:d3:44:d7:44:
         d4:c9:1c:52:92:d4:17:ed:9d:fc:cf:af:a2:4e:3c:a3:01:9b:
         d8:33:8f:ff:e9:4c:7a:dc:20:9b:7e:79:99:df:eb:9f:31:05:
         32:bd:86:cc:5d:5d:2f:68:6f:c0:ba:70:45:dc:c2:09:2c:ec:
         52:00:a8:09:34:fb:80:92:ae:21:56:7b:06:be:a5:d5:d3:0e:
         07:90:7b:dd:73:08:fc:5c:bc:59:6d:ac:af:6e:e6:a2:93:c4:
         c6:ac:ba:97:6f:30:27:53:fc:53:f3:da:25:89:40:3f:ff:46:
         33:30:8e:2d:bb:da:be:7d:4d:73:ad:7c:b1:37:4f:5b:d5:30:
         d5:da:5b:c7:06:b6:67:5d:8d:05:d5:74:79:b5:50:0a:14:62:
         96:63:4b:cf:c7:9d:35:6b:54:10:07:19:97:08:74:8b:26:60:
         e3:2f:de:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:06 2026 by rpki-client