Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144307.roa
File:                     AS144307.roa (raw, json)
Hash identifier:          mqvKxjYIC8mZ62ZJUxdVmHDxIY/lXlOEuvDcpIDMQc4=
Subject key identifier:   1F:3A:4A:23:44:03:B7:44:E7:5F:36:12:47:00:77:41:E7:1C:09:52
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       23CB16135AEBDD2737F8D097F76FF1155D552D8B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144307.roa
Signing time:             Fri 22 May 2026 06:05:28 +0000
ROA not before:           Fri 22 May 2026 06:00:28 +0000
ROA not after:            Fri 21 May 2027 06:05:28 +0000
asID:                     144307
IP address blocks:        240a:a679::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:cb:16:13:5a:eb:dd:27:37:f8:d0:97:f7:6f:f1:15:5d:55:2d:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:00:28 2026 GMT
            Not After : May 21 06:05:28 2027 GMT
        Subject: CN=1F3A4A234403B744E75F361247007741E71C0952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:50:80:7f:7f:ca:7b:4b:fd:91:73:50:ef:37:
                    30:03:ad:cb:63:e5:90:a6:f0:9f:07:a2:ad:91:cc:
                    fe:b7:ae:fc:7c:65:b6:3b:84:f4:73:ef:d7:60:23:
                    59:f9:b6:6b:85:08:8b:b9:83:8b:6e:32:d8:2d:46:
                    b9:38:26:b8:a1:3b:36:90:57:f3:84:7f:20:7f:ec:
                    f7:6d:f6:8d:52:01:a2:c5:e0:50:fa:d1:df:5f:ca:
                    cd:83:ab:23:d8:07:95:0b:0f:46:84:23:57:77:fe:
                    a3:87:50:19:4a:82:db:ce:cc:55:f8:e2:64:a2:3c:
                    18:c2:67:7b:02:a7:b1:09:af:9b:98:52:2b:2c:b3:
                    c9:bc:05:6d:8f:5c:e8:3d:5e:59:c6:94:46:6a:fd:
                    46:2a:ff:36:ce:f3:98:72:60:de:ce:39:7a:97:e9:
                    1d:e3:b2:c9:a7:c9:18:c2:eb:f5:8a:0a:51:24:e7:
                    42:fa:6e:0c:9a:19:3b:e3:2c:3d:66:19:fb:f0:3d:
                    41:6d:4f:ab:16:ca:c2:68:4e:a4:24:89:6b:5f:bd:
                    ff:52:a7:31:0c:09:2c:94:cb:2c:8a:d3:08:0a:fc:
                    e9:4e:b3:49:7b:5d:83:77:56:98:b3:ab:70:12:8d:
                    eb:f2:3e:f1:41:30:ee:e4:c3:0c:d4:9d:1d:b2:8f:
                    21:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:3A:4A:23:44:03:B7:44:E7:5F:36:12:47:00:77:41:E7:1C:09:52
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144307.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a679::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:b0:11:32:9a:58:45:2a:73:8c:c8:9b:33:03:64:28:d9:e7:
         14:bd:d2:6b:07:75:bf:78:71:f1:28:7a:41:e0:3e:94:69:ba:
         76:7c:e4:c7:c0:af:86:99:bb:6e:40:f0:43:f3:c3:7f:72:0e:
         8c:95:a3:ac:1d:d3:0f:3b:63:f7:90:58:8b:5c:c3:69:d6:07:
         64:20:97:30:b2:d2:e4:d7:be:bd:7a:4a:87:35:41:d3:ba:61:
         10:7c:ec:97:88:9e:99:4c:3f:cc:6d:28:12:a7:6e:4c:73:82:
         fa:aa:6d:fa:19:08:ec:1e:ee:26:96:55:f9:3c:e6:0d:52:a4:
         f7:3d:79:74:8e:c5:bf:ca:88:a6:9e:9a:84:17:7a:b8:dd:96:
         70:94:3e:ef:e1:14:f8:eb:71:02:63:4b:a6:6a:80:9f:0c:52:
         8c:ac:b1:09:77:e7:63:48:13:0b:3b:c8:84:6e:2a:7f:f5:0c:
         13:dd:5a:15:84:2b:aa:0e:29:30:d1:6c:39:48:06:8d:cf:8b:
         95:8f:7b:36:b5:64:e1:32:70:31:2d:af:f1:f8:7a:27:df:a4:
         75:59:60:e8:13:f1:56:e6:1d:73:2f:72:d6:a5:78:ae:b9:78:
         84:fc:8c:c3:a4:bc:a9:2b:76:93:2a:63:66:fe:89:12:73:4d:
         50:17:a3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:46 2026 by rpki-client