Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144358.roa
File:                     AS144358.roa (raw, json)
Hash identifier:          G/sX/nGG6Dce5m9nmXkMJL5VPTb43j+jtzuPgrMC/as=
Subject key identifier:   CB:4B:A9:7F:56:AA:9E:ED:AC:91:E2:3E:D6:DC:07:8E:B1:5B:C0:1F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4FA21F9AB9DE6228206C773B5FE6DC7CCDE0499C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144358.roa
Signing time:             Mon 25 May 2026 02:22:28 +0000
ROA not before:           Mon 25 May 2026 02:17:28 +0000
ROA not after:            Mon 24 May 2027 02:22:28 +0000
asID:                     144358
IP address blocks:        240a:a6ac::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:a2:1f:9a:b9:de:62:28:20:6c:77:3b:5f:e6:dc:7c:cd:e0:49:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 02:17:28 2026 GMT
            Not After : May 24 02:22:28 2027 GMT
        Subject: CN=CB4BA97F56AA9EEDAC91E23ED6DC078EB15BC01F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:08:af:32:22:38:9d:d6:60:bd:43:0e:ac:48:
                    28:aa:5b:33:c1:05:b3:89:b1:eb:f8:8d:ab:7c:d4:
                    c6:38:3f:6b:90:16:52:44:86:b1:69:03:ec:e0:e4:
                    db:d0:99:4b:c4:c4:6d:e9:ad:6b:4a:a6:46:ba:06:
                    99:d8:6d:b0:27:4e:01:2d:d3:24:01:65:4c:14:5d:
                    78:8d:da:c8:85:70:ec:82:19:1d:5f:cb:40:02:ba:
                    06:97:51:8d:40:62:46:1d:c7:ea:b5:f7:4d:15:86:
                    cf:e7:15:64:9b:f6:78:71:13:bd:7b:62:fa:a5:6e:
                    56:6b:f1:f1:d1:7c:7b:99:e5:a7:cd:e1:4f:20:37:
                    85:8c:52:18:fc:93:fe:1f:d7:53:fe:a0:d7:37:b1:
                    14:1e:15:ac:a4:a3:85:da:dc:6b:5b:9a:0c:45:82:
                    43:9e:ea:e6:81:d5:f3:b7:37:25:a8:aa:81:17:b6:
                    41:7a:92:9c:99:62:ad:bc:74:e6:8f:84:f3:9f:86:
                    49:fd:5d:0f:24:1a:0d:a7:57:44:c2:98:89:bd:e0:
                    d4:e3:f0:92:a6:d5:e7:dd:0d:01:c4:18:65:f7:53:
                    60:5c:fd:56:94:da:b8:97:e3:ad:8f:db:69:4a:b8:
                    e3:fa:1e:35:23:71:99:54:38:c6:de:fb:8f:bc:dd:
                    68:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:4B:A9:7F:56:AA:9E:ED:AC:91:E2:3E:D6:DC:07:8E:B1:5B:C0:1F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144358.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a6ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:ec:db:ca:26:58:2d:71:3f:ff:85:c9:e7:62:ec:9d:5d:95:
         ad:66:5b:37:c6:14:ed:02:6e:aa:fb:9d:93:df:76:51:91:fe:
         7f:ea:33:ab:0e:3d:96:ca:c4:e9:24:8e:ef:f0:65:cd:f2:95:
         e0:95:70:a2:4a:c6:2e:6e:8a:2b:70:14:33:e0:35:c8:65:0b:
         d0:a4:26:84:34:93:b1:77:ec:6a:5c:a1:7e:3a:cc:00:9f:85:
         be:17:01:67:db:fe:bc:85:58:2f:09:bb:cf:d6:b7:7b:81:1a:
         57:38:d3:1e:3c:f5:50:ef:e4:22:2d:be:50:77:b6:c6:e3:d0:
         f8:8c:ae:2b:c9:b9:08:6d:24:c5:09:7b:23:5f:05:78:d1:a9:
         ba:3a:b3:9a:b7:a4:a1:dc:59:a3:0c:90:82:e8:d7:41:12:10:
         26:c9:88:e1:87:14:c9:1e:57:31:da:da:c0:6c:a3:e6:c4:1b:
         db:32:26:fa:78:f5:c1:16:c2:19:22:84:4a:bc:36:a1:dd:94:
         d8:bc:c4:58:4a:d4:0f:60:11:63:ca:4e:13:cd:dc:e9:49:6b:
         f3:30:0c:d4:30:f7:1c:f1:58:48:1c:46:ba:cd:bb:f0:f6:3a:
         6f:0a:75:f7:9b:cf:1f:49:53:8d:17:ab:37:2e:cf:1c:cc:77:
         bb:88:7f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----