Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144340.roa
File:                     AS144340.roa (raw, json)
Hash identifier:          P7XigNalLV932U+0onCyCsvdDo3uNUOqcryrArMYcro=
Subject key identifier:   BB:F3:C8:A7:68:18:38:F7:4D:BF:47:90:56:11:72:D9:3F:9E:42:D5
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       03BBC97594500E1301383C70AFA3537BF9E02A85
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144340.roa
Signing time:             Mon 25 May 2026 01:38:41 +0000
ROA not before:           Mon 25 May 2026 01:33:41 +0000
ROA not after:            Mon 24 May 2027 01:38:41 +0000
asID:                     144340
IP address blocks:        240a:a69a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:bb:c9:75:94:50:0e:13:01:38:3c:70:af:a3:53:7b:f9:e0:2a:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:41 2026 GMT
            Not After : May 24 01:38:41 2027 GMT
        Subject: CN=BBF3C8A7681838F74DBF4790561172D93F9E42D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:37:78:a7:0c:b9:99:c7:b3:71:10:73:24:6e:
                    58:62:35:ab:10:28:9a:33:73:4b:24:03:5d:67:47:
                    39:c8:45:4e:17:5c:a4:d6:f6:cc:c4:c5:4e:d3:82:
                    02:41:8e:ed:b4:e0:d3:98:e5:47:96:92:e6:70:24:
                    1b:3d:28:5c:e4:69:f9:2e:d7:19:17:67:f3:a7:f4:
                    ed:fb:ee:1f:40:3c:9d:74:b5:ab:ec:3e:b8:fe:46:
                    1b:62:17:74:67:1c:d9:bc:03:e8:56:f4:ea:29:e7:
                    ee:45:a8:a2:5a:1c:d4:64:0e:37:e9:05:ae:78:ee:
                    f4:86:01:6d:bf:f9:9c:98:52:3a:1c:67:e8:c3:68:
                    da:b5:6f:f2:f2:34:de:44:30:a3:0e:72:b3:ae:42:
                    7b:d3:8e:52:c2:81:08:e5:b8:9a:84:e7:c1:b3:48:
                    d1:cb:a1:f1:d2:70:d9:98:67:77:08:e6:02:ee:c1:
                    1c:43:91:18:89:e0:e1:87:53:81:a6:9a:08:15:bd:
                    8c:33:69:4f:41:95:b4:0d:d8:7d:72:3d:f8:bc:0a:
                    60:52:44:c2:f1:4b:50:c2:ee:f0:35:2d:24:0f:48:
                    60:00:91:fa:f5:09:0b:01:60:09:c3:ea:ad:ea:00:
                    30:87:9d:9d:23:54:7e:2a:83:75:b1:e0:72:1e:70:
                    8e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F3:C8:A7:68:18:38:F7:4D:BF:47:90:56:11:72:D9:3F:9E:42:D5
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144340.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a69a::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:de:44:79:33:2c:87:cc:8a:2a:2b:27:db:f5:8b:e9:4b:bc:
         49:8d:ae:0d:b9:08:67:ca:6a:ce:35:75:b0:a7:ac:b5:53:c0:
         8e:24:74:c8:f9:ac:2e:ad:05:6f:04:89:a0:9c:4d:fa:9c:9f:
         21:17:67:e8:6e:11:a0:c6:3d:7b:a5:58:13:78:d1:df:2a:95:
         12:fe:47:1c:db:37:df:17:d4:0a:33:81:fe:53:d5:2b:f7:85:
         6d:78:96:97:bf:9b:84:24:e5:46:d6:b7:45:c5:fc:d7:99:04:
         71:24:55:96:5c:27:4e:d6:dd:81:f4:a7:82:6b:43:3b:8a:21:
         f8:c1:36:05:6e:36:13:5b:d4:09:8f:ac:52:05:5d:53:2f:3f:
         1e:0b:93:c3:52:74:c8:0d:62:04:35:93:ee:c8:18:89:ae:76:
         70:05:47:88:13:f4:d8:1e:76:1d:49:53:77:f7:dc:00:74:2d:
         29:60:15:b3:99:bd:56:50:ef:dc:c2:d9:ab:30:1a:72:77:73:
         16:21:6f:fd:05:89:1f:e1:78:36:33:42:a2:16:dc:84:aa:da:
         ae:49:8a:a9:c7:73:dc:35:4f:f7:6e:de:3f:10:73:96:f1:76:
         cc:0d:bf:2b:e7:6c:a0:24:3f:b0:f8:06:16:dd:3c:84:f7:74:
         75:6f:62:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:30 2026 by rpki-client