Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144286.roa
File:                     AS144286.roa (raw, json)
Hash identifier:          5sk62jmGe/rDpbcJ9C1Tny7EuOFGAVGbkpxUBft3mLE=
Subject key identifier:   C1:E4:F9:1A:96:9C:A9:6C:1D:22:72:71:3C:D6:9D:4B:9A:61:B7:DA
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2FFB3056609F1CCCF9C7BFE9760A6AA1E7E172A3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144286.roa
Signing time:             Mon 25 May 2026 01:51:29 +0000
ROA not before:           Mon 25 May 2026 01:46:29 +0000
ROA not after:            Mon 24 May 2027 01:51:29 +0000
asID:                     144286
IP address blocks:        240a:a664::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:fb:30:56:60:9f:1c:cc:f9:c7:bf:e9:76:0a:6a:a1:e7:e1:72:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:29 2026 GMT
            Not After : May 24 01:51:29 2027 GMT
        Subject: CN=C1E4F91A969CA96C1D2272713CD69D4B9A61B7DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7b:1f:cb:a2:28:04:74:dc:b5:65:a3:f7:40:
                    e3:0a:e0:c6:08:51:f1:5a:47:5d:67:c7:2a:23:b9:
                    7b:d0:d5:be:92:c0:f4:a5:c8:8f:43:1a:c9:f9:6c:
                    d6:80:c4:51:58:f8:74:1b:e3:46:9e:40:7a:cd:18:
                    1c:73:c2:9f:18:a2:93:fc:27:77:aa:dc:53:d5:3b:
                    a2:62:16:5b:6c:1a:c6:72:be:a5:59:e7:cc:4f:4e:
                    85:e1:84:cb:b6:95:85:ae:a7:ef:50:46:51:aa:95:
                    4c:67:18:5a:0c:ea:8c:0e:fc:0a:17:8c:02:e1:ed:
                    97:d0:20:e6:6b:73:a0:44:16:84:ce:12:61:0a:00:
                    a5:84:6c:57:ef:9f:28:f5:07:8e:eb:49:28:cd:12:
                    96:37:69:ec:ab:8a:fd:71:fe:ea:fc:ca:02:c8:9d:
                    d7:e6:76:31:8f:99:bd:37:ee:a7:c3:ca:f2:7a:63:
                    11:05:4d:d4:5c:87:7f:9c:14:fd:9a:20:3f:8b:46:
                    9d:5e:af:37:0b:d2:50:f1:5d:83:50:74:dd:12:53:
                    f3:d6:46:6f:3b:c8:b1:28:62:52:89:3b:66:99:00:
                    ca:0e:d9:c4:c2:54:29:43:1e:f3:32:0c:0d:df:46:
                    ce:e7:fc:e9:0f:d8:37:a4:31:8a:78:85:5a:28:d8:
                    84:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E4:F9:1A:96:9C:A9:6C:1D:22:72:71:3C:D6:9D:4B:9A:61:B7:DA
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144286.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a664::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:d4:87:a2:bc:07:8e:63:b9:b5:91:33:0e:46:f3:d5:a9:b9:
         f9:1d:c8:e3:ba:1e:51:f4:0d:09:41:ae:3c:bf:8b:ea:6f:f2:
         51:35:d7:72:58:5a:9f:93:bb:d1:6a:76:32:10:80:1b:46:55:
         0e:e6:bc:c1:8c:c0:e1:39:67:43:7b:6c:06:d0:cf:0d:b4:84:
         7f:fc:d0:09:6d:23:22:b3:41:08:01:6e:2b:61:c3:c5:cf:05:
         50:41:d5:26:d5:3b:53:24:7d:b8:1b:f2:ba:0f:d3:e8:d6:c1:
         75:aa:e5:af:cd:6d:c7:28:73:9a:6c:e1:96:44:59:0a:21:63:
         50:9c:d7:eb:bc:41:cb:92:22:91:3b:46:ba:7b:86:02:10:d4:
         6f:18:cf:e7:de:37:88:01:17:bb:5a:00:c1:a4:9a:3e:6f:b5:
         af:38:76:76:be:f9:59:77:9a:11:28:82:a8:ec:71:86:ab:a4:
         ef:9a:89:54:c3:ad:2a:d7:8f:9c:ad:d0:e2:be:e1:a3:85:2e:
         ae:e4:2b:9d:ec:59:2f:b7:dc:f3:5f:80:4a:c5:61:38:d1:12:
         5e:88:a1:05:0b:a5:05:b6:4a:d0:57:b2:bf:ce:ea:e2:23:4e:
         7d:ea:cc:48:82:4a:9d:84:75:36:8f:73:1d:2c:df:f9:d6:b8:
         e2:75:95:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----