Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144318.roa
File:                     AS144318.roa (raw, json)
Hash identifier:          +nCbi2HUJela42ekvr3WqB2/UUL5yTZi9jamRMz4gSE=
Subject key identifier:   9B:25:C5:5F:91:86:57:51:CB:E5:7A:5A:B7:CB:53:23:84:11:E9:65
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       74C92CF5D3CF088F150340089F631EEB6FC9290F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144318.roa
Signing time:             Fri 22 May 2026 07:24:34 +0000
ROA not before:           Fri 22 May 2026 07:19:34 +0000
ROA not after:            Fri 21 May 2027 07:24:34 +0000
asID:                     144318
IP address blocks:        240a:a684::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c9:2c:f5:d3:cf:08:8f:15:03:40:08:9f:63:1e:eb:6f:c9:29:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:19:34 2026 GMT
            Not After : May 21 07:24:34 2027 GMT
        Subject: CN=9B25C55F91865751CBE57A5AB7CB53238411E965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9c:94:ca:84:00:b4:a4:6b:53:62:3a:bb:17:
                    0d:97:ba:18:b9:77:be:6a:fe:b3:45:03:d6:0e:91:
                    13:1a:ed:e2:0b:00:11:89:35:93:56:9c:c5:af:72:
                    6f:2c:8f:43:9b:4f:30:b0:d2:e1:dc:6a:fa:70:da:
                    54:6d:f9:16:e6:17:33:6f:ba:a4:6c:14:db:70:05:
                    d6:68:02:e2:17:2b:06:60:b3:84:53:2a:36:e5:7c:
                    86:50:c6:59:92:9c:90:89:6d:bf:b3:88:f9:6c:bd:
                    73:c3:b7:5c:3d:f6:c0:25:22:ca:4e:5e:93:e4:e4:
                    c2:ef:ad:96:86:d4:81:1f:22:e1:91:0b:68:ff:7f:
                    3c:1d:b7:f0:76:b1:48:a2:b8:8b:2a:33:0c:86:31:
                    f4:48:73:5e:f8:06:a2:5d:da:28:8b:10:b9:eb:2d:
                    69:e8:49:f5:57:44:38:c3:50:f9:ea:fd:21:a5:79:
                    a7:21:ec:d9:c3:5c:05:45:6a:90:43:53:bc:8c:89:
                    4c:90:6f:1e:7e:07:ed:c1:0d:92:fd:17:ab:9b:f9:
                    b9:04:d4:c4:af:7f:51:4a:67:89:6f:3c:a4:2f:37:
                    a3:c7:46:24:d0:99:35:d4:69:5a:e6:1f:99:11:ee:
                    92:93:6a:8d:9e:7d:3f:51:14:d3:70:27:70:be:5e:
                    ca:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:25:C5:5F:91:86:57:51:CB:E5:7A:5A:B7:CB:53:23:84:11:E9:65
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144318.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a684::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:d1:a4:91:1e:12:03:70:f5:5a:c2:bf:f9:99:f2:1d:52:de:
         a1:7c:32:b7:f6:dd:9b:8c:21:87:3c:f2:e1:80:c6:8e:00:b7:
         47:58:f7:5b:70:c8:c0:49:a3:64:df:9d:fc:76:e9:c7:68:f5:
         12:21:10:07:20:c3:4c:f6:60:93:90:35:d1:0e:e6:73:46:a7:
         80:da:42:c9:84:83:24:6f:a4:9a:4b:e9:bb:ce:39:a9:46:75:
         55:46:d8:5b:5f:df:ec:5b:56:59:ae:8e:f2:de:5b:78:99:7a:
         b8:77:bc:1d:b8:38:44:86:07:6a:09:88:3a:6c:0d:c5:41:f8:
         85:09:86:e8:ab:82:df:92:7c:31:84:88:8a:62:49:f0:39:35:
         c4:d6:fd:e3:de:27:a2:60:90:9f:bd:da:84:cd:7f:fb:64:82:
         70:d9:46:66:f8:8b:3b:9b:4c:86:6f:04:6a:27:f8:a1:d1:fd:
         7a:92:54:83:8a:fc:13:b4:8a:33:63:85:3a:a3:36:82:0b:8f:
         f1:2c:34:8a:18:a8:50:29:c9:c0:2f:39:20:5d:e3:03:ca:5f:
         88:c2:39:99:cb:ba:15:ac:f4:62:ac:3e:3d:8a:ce:06:fd:99:
         88:f4:25:fe:bd:d8:3e:a3:af:5f:8a:32:d5:3b:b0:52:22:cd:
         d3:61:c7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----