Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144283.roa
File:                     AS144283.roa (raw, json)
Hash identifier:          p7mYOS8S/nFaVrI5z2Irl69a/ELzd0KvJg8zhjBywY0=
Subject key identifier:   00:D4:DC:D2:AD:D3:FB:D3:D4:B1:DB:90:90:48:B9:69:B5:F2:5D:E7
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       497D28CE652CF63C71132CAC0282F4A8F17C343F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144283.roa
Signing time:             Fri 22 May 2026 01:50:38 +0000
ROA not before:           Fri 22 May 2026 01:45:38 +0000
ROA not after:            Fri 21 May 2027 01:50:38 +0000
asID:                     144283
IP address blocks:        240a:a661::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:7d:28:ce:65:2c:f6:3c:71:13:2c:ac:02:82:f4:a8:f1:7c:34:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:38 2026 GMT
            Not After : May 21 01:50:38 2027 GMT
        Subject: CN=00D4DCD2ADD3FBD3D4B1DB909048B969B5F25DE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f6:e6:e8:2c:ce:e4:e4:7b:ac:d2:fe:3e:05:
                    27:9f:78:6a:ee:79:7b:be:c0:42:76:83:71:87:e7:
                    b6:e3:fb:ca:15:81:ca:ff:34:0a:80:3d:b2:fa:14:
                    a0:7d:06:50:a2:77:ab:45:8f:0c:b3:a0:ef:f8:7f:
                    be:41:39:2c:20:7e:ef:93:07:a1:db:92:09:64:71:
                    2a:2b:fa:69:4c:3b:f6:2a:08:c2:bc:e3:e1:65:ee:
                    39:93:81:17:7f:0e:e8:03:90:5a:5d:3a:9d:e6:02:
                    28:06:cc:f4:38:f0:d0:8a:3d:b4:8f:be:81:85:c9:
                    e9:b4:94:d3:5e:ce:b9:7c:89:13:69:23:cb:1f:cd:
                    80:01:c0:8d:ad:f4:24:81:44:94:ea:3c:2b:bf:e6:
                    27:43:fb:79:e6:ab:8f:1e:79:a7:12:ca:da:f7:84:
                    48:6b:0b:0c:10:9e:5f:6d:0c:84:0d:30:61:95:e3:
                    9a:b0:67:74:5b:fe:3e:76:33:ce:f8:34:62:df:51:
                    0f:0d:ac:1e:87:60:71:4f:53:96:2c:5a:2a:96:86:
                    85:ab:e0:8b:01:15:48:97:8c:05:e0:73:0f:17:b1:
                    37:9c:99:4a:e3:9a:02:4c:6a:19:ad:8a:93:65:3f:
                    dd:51:2e:a6:5c:66:36:c8:d1:78:c7:3a:1e:37:ed:
                    94:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D4:DC:D2:AD:D3:FB:D3:D4:B1:DB:90:90:48:B9:69:B5:F2:5D:E7
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144283.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a661::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:d3:12:b6:a2:f1:8a:11:22:f4:6d:d0:1e:0f:c9:e4:4d:10:
         0d:f8:03:c6:b9:0f:00:b5:3f:f5:ed:59:54:13:35:4b:51:25:
         45:c0:da:5d:0f:c6:83:b7:13:52:d6:58:bf:20:71:89:68:d7:
         b7:4d:77:c3:73:be:5c:ce:1a:07:b1:eb:05:1d:fa:5c:d1:9e:
         ac:89:b0:35:cc:f0:18:12:96:fb:63:ef:33:8d:5b:91:cf:2e:
         cc:77:d2:64:ed:92:31:d6:33:bc:1b:fd:c5:e5:d2:df:97:fc:
         f6:41:3e:e0:10:8f:e2:df:6a:eb:ab:f0:0e:79:e9:9c:7e:d6:
         a0:f3:1e:2b:b3:8d:e4:f8:03:e5:65:f2:0d:30:c3:c3:85:53:
         19:ce:b5:e0:a4:b3:cd:75:04:15:d4:7f:69:ae:d1:be:0d:7a:
         04:88:c1:23:f4:01:4a:f6:a0:a0:3b:c6:f0:74:55:ce:0a:b6:
         d8:11:46:56:2c:a0:3b:5d:1a:15:56:45:5d:b7:4a:a6:fa:d9:
         c8:78:93:0f:c2:83:a9:a0:c3:bb:2a:fb:ee:ed:49:4a:bf:17:
         22:d5:9e:d1:4d:99:a2:71:5a:7f:fb:8c:89:a7:9f:34:97:95:
         ea:f7:55:5b:73:b7:35:cd:36:0b:d6:09:48:f3:da:0f:52:a8:
         5b:e2:b8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:50 2026 by rpki-client