Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144354.roa
File:                     AS144354.roa (raw, json)
Hash identifier:          fRVD340lZIjNH83SBshbf5/fzp2TcfTtuhcQT1jzpaM=
Subject key identifier:   CC:92:6E:56:B4:EB:49:C4:18:0E:9D:60:2C:9B:9B:37:55:76:BC:9D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       45D14CB47A2D441B27E72CB92E5D427462B7BE66
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144354.roa
Signing time:             Fri 22 May 2026 02:47:55 +0000
ROA not before:           Fri 22 May 2026 02:42:55 +0000
ROA not after:            Fri 21 May 2027 02:47:55 +0000
asID:                     144354
IP address blocks:        240a:a6a8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d1:4c:b4:7a:2d:44:1b:27:e7:2c:b9:2e:5d:42:74:62:b7:be:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:42:55 2026 GMT
            Not After : May 21 02:47:55 2027 GMT
        Subject: CN=CC926E56B4EB49C4180E9D602C9B9B375576BC9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4f:09:24:36:e3:a6:01:76:5a:78:f9:6c:e2:
                    1b:0a:15:79:23:e5:5b:c6:03:05:7f:13:f5:29:56:
                    e0:37:c3:c8:1f:1b:45:8a:37:6d:86:72:97:78:03:
                    06:f8:b4:3f:aa:eb:b9:2e:7d:d0:8c:32:b7:19:7a:
                    30:53:df:b6:ea:ee:21:b4:06:9b:67:52:64:39:b1:
                    bb:6e:e7:22:08:f3:bd:40:da:c7:c7:34:5a:81:a4:
                    14:d1:a4:a8:78:8a:fe:3c:c2:67:7c:09:71:5d:8d:
                    d4:8f:5a:07:11:4d:d4:5c:b7:0a:ec:93:96:7a:33:
                    3e:9b:3e:b4:09:a2:fa:a4:e7:4c:f7:91:22:18:0c:
                    ce:0a:2d:f7:4b:06:dc:b1:d7:0d:ce:02:43:af:ed:
                    cf:8b:05:37:ac:4a:74:1f:41:da:f5:e8:41:bf:df:
                    18:02:db:ab:89:03:53:b9:66:d0:36:65:78:af:29:
                    d2:ad:36:9b:12:0f:24:82:db:c1:e2:1f:bf:00:c8:
                    fa:54:ef:67:d3:2a:48:11:09:c1:23:51:48:6f:22:
                    23:b4:9f:62:e4:fa:13:6b:2f:d9:ac:c5:bc:da:f4:
                    22:5e:cf:e7:1f:9a:1e:3d:15:87:b0:5f:a4:f0:5e:
                    86:94:79:df:ab:83:dc:16:ce:d7:66:3d:ff:da:bc:
                    d5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:92:6E:56:B4:EB:49:C4:18:0E:9D:60:2C:9B:9B:37:55:76:BC:9D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144354.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a6a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:94:2b:32:68:ed:97:d9:d5:b5:e8:5f:c3:a1:0e:14:52:91:
         06:9e:37:d1:87:96:71:27:65:f0:e0:b8:61:8f:87:52:b5:f0:
         4e:80:03:8d:dd:2a:e7:d8:37:85:ed:ef:e0:2e:92:f2:91:3d:
         51:39:38:0a:b5:11:54:4b:6b:5f:37:21:43:ba:c7:88:da:f7:
         c0:70:20:dd:10:4f:d5:c0:47:e5:62:b8:90:1e:a7:1d:f7:5d:
         37:2d:11:aa:82:2c:92:9c:cc:f3:4b:d8:ab:80:9e:51:f3:73:
         26:61:cd:6a:86:0a:4f:cf:65:fa:60:3f:46:4f:04:07:b2:72:
         cc:98:5a:6f:76:90:fe:34:a4:cd:c9:52:30:ae:41:21:a9:29:
         b6:05:37:57:24:62:eb:c8:d9:c9:d4:00:1b:ce:f0:23:62:3e:
         5c:58:f4:2f:2c:37:f1:fa:f8:bf:26:e3:2d:31:a7:21:4b:7d:
         6b:6a:ad:ab:48:e4:c8:59:7a:30:e5:a1:d6:69:1d:4b:27:19:
         e8:e5:42:82:90:23:70:1a:65:cc:eb:06:d8:f5:02:02:18:13:
         41:58:bc:f5:cf:6b:a3:ab:d9:d1:fb:5e:87:97:89:eb:e1:73:
         01:4b:2e:21:01:ff:4e:d2:2a:97:97:11:af:43:a6:7c:18:6f:
         4c:35:ba:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:53 2026 by rpki-client