Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144327.roa
File:                     AS144327.roa (raw, json)
Hash identifier:          QywNf84D4wjxLfIsdCMBQ1evjUrKCYrIj4/uzexL/UI=
Subject key identifier:   C7:69:55:87:C6:46:CD:A6:14:3C:F7:B0:26:DD:9C:BB:5E:D4:52:4D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       27822B44FAB522BB856685F51FB5E66F625E86DB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144327.roa
Signing time:             Mon 25 May 2026 01:51:18 +0000
ROA not before:           Mon 25 May 2026 01:46:18 +0000
ROA not after:            Mon 24 May 2027 01:51:18 +0000
asID:                     144327
IP address blocks:        240a:a68d::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:82:2b:44:fa:b5:22:bb:85:66:85:f5:1f:b5:e6:6f:62:5e:86:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:18 2026 GMT
            Not After : May 24 01:51:18 2027 GMT
        Subject: CN=C7695587C646CDA6143CF7B026DD9CBB5ED4524D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a2:3a:b8:7f:73:69:e2:02:22:ab:c9:d2:85:
                    ed:1a:1c:44:8d:aa:59:85:54:5c:32:d4:06:4c:67:
                    ce:0e:07:8c:d9:9c:e8:e7:41:18:93:39:16:7c:36:
                    52:de:7f:44:d5:7e:63:66:be:52:c5:58:24:a4:97:
                    08:dd:d5:99:74:8b:63:ee:13:71:59:72:ae:e7:b8:
                    f0:5d:2b:56:a9:22:7f:7d:51:e1:46:f2:bf:48:78:
                    f6:78:c2:76:20:cd:06:da:3e:8f:15:cd:8c:e3:6b:
                    d4:6a:ce:fc:b8:89:89:5b:c7:96:c6:89:7c:ad:06:
                    42:7d:be:b2:07:f6:f1:e7:81:3b:36:e1:64:f8:24:
                    20:9a:0c:88:c7:27:c9:3d:04:1a:ea:74:80:02:3e:
                    a4:62:bc:17:c8:c3:b2:13:3b:6c:5e:30:c2:1b:e9:
                    ea:a9:ff:94:8b:66:90:d0:a3:92:3d:ff:08:6e:c8:
                    cd:e8:15:17:81:15:da:6e:89:ec:48:44:bd:d4:f0:
                    cf:8d:81:78:cb:5a:15:3d:19:04:24:64:68:af:1b:
                    08:6a:e3:e5:a3:cf:f0:e1:90:e7:2d:e0:9f:b6:66:
                    b9:82:72:c9:e2:57:ca:99:ec:86:df:b5:e4:0f:ef:
                    7c:34:ed:de:4b:43:bb:a3:37:6e:33:67:62:65:02:
                    58:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:69:55:87:C6:46:CD:A6:14:3C:F7:B0:26:DD:9C:BB:5E:D4:52:4D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144327.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a68d::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:7e:0d:cf:bf:ee:de:11:c7:14:fe:9b:b5:b2:aa:05:5e:ee:
         c7:85:ca:7d:f7:85:64:99:84:0a:c1:ee:d8:1c:1f:df:bd:fd:
         85:b8:c9:c7:9f:82:a4:e6:31:56:ed:ec:9a:46:2e:33:a3:f2:
         79:5e:1d:5f:53:21:8a:d4:e6:03:65:0a:1e:c6:60:88:1b:b2:
         62:43:5b:3f:58:42:e4:6e:da:53:27:69:c3:7b:d2:13:e5:30:
         d1:08:63:0d:05:e2:8f:40:27:c2:59:af:2b:ee:c0:b4:4e:f1:
         6a:b5:dd:25:f8:a1:ad:03:55:df:17:ff:1a:77:1d:6f:92:d8:
         d8:84:2f:64:e2:6e:45:ac:23:3b:5a:af:8e:41:a2:57:85:97:
         1f:bf:c6:70:bc:6f:e9:78:f1:09:e6:db:7d:f7:25:b5:6d:cf:
         87:eb:3b:5b:6a:03:b0:bb:f5:c7:e9:90:60:62:36:78:46:d6:
         57:17:54:3f:09:40:57:ed:f8:03:e7:a3:14:91:f5:59:8c:91:
         1e:67:45:ce:8b:48:cb:04:2f:a7:af:53:73:5a:cf:86:8a:54:
         aa:80:98:e8:3c:46:eb:b1:33:9c:f2:c8:b1:9e:84:2c:67:1d:
         81:b3:8a:06:16:20:23:81:db:52:d8:d4:c7:7e:18:07:35:e2:
         92:34:d6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:14 2026 by rpki-client