Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144331.roa
File:                     AS144331.roa (raw, json)
Hash identifier:          +4cPUMiAx9Bn7Ao6IOl2W34Z/mLJ833PR4ogORqqgtQ=
Subject key identifier:   C6:21:F8:F8:41:08:EC:B4:6F:FE:91:CC:C5:E2:ED:57:F1:E8:3B:CC
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       55BCE673EFFB3E30999CB949116D2CFC2743A6D4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144331.roa
Signing time:             Tue 26 May 2026 02:35:24 +0000
ROA not before:           Tue 26 May 2026 02:30:24 +0000
ROA not after:            Tue 25 May 2027 02:35:24 +0000
asID:                     144331
IP address blocks:        240a:a691::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:bc:e6:73:ef:fb:3e:30:99:9c:b9:49:11:6d:2c:fc:27:43:a6:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:30:24 2026 GMT
            Not After : May 25 02:35:24 2027 GMT
        Subject: CN=C621F8F84108ECB46FFE91CCC5E2ED57F1E83BCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:da:2e:8f:42:d8:f3:1f:e7:f6:d8:a2:68:b6:
                    6d:c9:01:ff:42:6c:e7:84:64:86:79:09:41:83:ef:
                    ce:f7:24:89:ae:d6:7c:dc:aa:6a:f6:f5:c3:9b:af:
                    11:be:8f:8b:1c:69:30:73:de:8a:09:37:d5:5d:b1:
                    a9:34:96:e6:cf:77:0b:d5:90:6b:10:c5:81:ee:89:
                    c4:01:c2:74:66:5d:54:10:83:54:00:e0:78:90:69:
                    2c:1e:14:6e:9f:ba:11:08:2f:30:31:f5:4c:12:3c:
                    f6:97:13:59:ea:ea:31:89:62:dd:8d:c3:02:15:7f:
                    8b:86:14:1e:d1:0a:52:80:fb:e8:eb:32:55:d9:43:
                    0e:26:fe:8a:9f:54:73:72:c1:61:26:ef:c5:df:4c:
                    4a:d8:6a:49:39:eb:dd:b0:ea:7e:1c:29:18:fb:1f:
                    88:21:76:c6:3e:7b:4c:95:af:46:3a:d6:e0:93:46:
                    82:ae:30:12:2a:3f:b5:e7:b9:68:aa:39:da:65:0e:
                    cb:0a:1b:ae:fc:07:85:67:e2:0c:29:71:ce:ef:81:
                    d5:be:98:ec:99:77:44:59:ae:97:39:b0:d0:2f:9d:
                    84:86:cd:ae:14:00:b8:80:40:64:b2:77:9a:81:46:
                    44:53:fa:a1:05:1e:90:26:5a:a6:83:3b:33:ee:97:
                    74:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:21:F8:F8:41:08:EC:B4:6F:FE:91:CC:C5:E2:ED:57:F1:E8:3B:CC
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a691::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:13:76:3e:2e:98:be:8b:a3:c6:b7:9a:b4:fe:27:f4:a7:22:
         8d:e5:7e:54:f7:b5:b1:b2:f3:da:49:43:b8:37:18:78:05:51:
         f4:a1:3b:1e:f3:67:99:97:5e:93:7e:f2:c0:10:10:cd:37:3a:
         3b:ec:a5:fc:58:58:99:91:ff:ed:af:d0:bd:90:e4:2a:f8:8e:
         56:51:64:3a:b8:6b:e7:c6:1b:06:02:40:2f:c2:60:46:e8:b0:
         28:a9:43:14:7d:54:f0:64:27:c1:70:60:89:3e:37:a9:f2:09:
         c3:57:f7:c3:11:18:0e:67:fa:e8:66:29:f7:ef:4c:42:51:8a:
         fb:90:c2:c9:d9:07:a1:b1:de:a2:47:1a:42:4a:42:24:e8:0c:
         85:bf:1e:b9:a4:ef:a3:30:6f:e6:b4:24:f0:a8:c0:ee:76:c5:
         2d:47:0b:87:5a:2d:73:e5:0e:59:bf:26:98:d4:49:c8:34:aa:
         a1:b9:af:71:c4:30:23:15:8c:a8:78:9e:87:8c:b4:01:33:90:
         a8:a2:25:45:aa:e2:8d:88:87:2b:35:f7:6d:02:57:7b:8a:0a:
         98:64:26:05:b7:34:d0:7c:99:9d:df:6a:54:07:5d:12:af:f6:
         77:10:1d:0f:23:d1:20:a7:8f:65:7f:9d:e5:2e:62:a8:c9:70:
         4f:96:c1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:00 2026 by rpki-client