Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144363.roa
File:                     AS144363.roa (raw, json)
Hash identifier:          WM9qbod725KmZOImgMRmrBwazUqIQ0gXhElCY2Lvy4c=
Subject key identifier:   71:85:A2:86:B9:CF:22:62:E4:44:3F:0E:5B:8B:A8:09:5F:76:36:FA
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5815B2736F3E532F76DB45D8A74503461E3A1FA8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144363.roa
Signing time:             Fri 22 May 2026 07:24:58 +0000
ROA not before:           Fri 22 May 2026 07:19:58 +0000
ROA not after:            Fri 21 May 2027 07:24:58 +0000
asID:                     144363
IP address blocks:        240a:a6b1::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:15:b2:73:6f:3e:53:2f:76:db:45:d8:a7:45:03:46:1e:3a:1f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:19:58 2026 GMT
            Not After : May 21 07:24:58 2027 GMT
        Subject: CN=7185A286B9CF2262E4443F0E5B8BA8095F7636FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7e:a5:1c:3e:8a:4c:74:ec:e9:c6:00:7b:be:
                    4e:e6:91:f3:36:fc:3a:aa:02:45:98:29:5d:c2:b1:
                    ff:7b:0e:d4:c6:a1:47:23:bc:d8:1a:45:d6:fa:3f:
                    10:5e:3b:d4:9c:4a:cf:9d:d8:9f:31:86:61:30:e0:
                    4c:43:95:ce:63:11:61:a7:91:13:6b:0b:18:4b:5c:
                    55:92:48:ca:e9:2e:0b:70:59:28:ac:24:90:25:4f:
                    1d:a2:41:2b:73:e1:ee:ae:82:12:a2:8e:4e:94:0b:
                    54:0f:60:85:15:1c:fb:c2:5c:f9:d3:0c:d7:62:69:
                    7f:a7:ba:21:10:c6:45:de:82:ea:f2:e1:f1:b3:84:
                    a3:e8:80:b8:13:43:dd:19:b7:2a:1b:07:4c:95:cf:
                    13:e7:06:be:23:ae:33:d5:55:c1:f3:81:1f:2f:70:
                    1b:11:db:20:0e:20:f2:0a:8f:7d:cc:f2:38:94:a0:
                    40:e6:23:82:26:32:16:5b:e9:8d:eb:46:92:fc:22:
                    69:b6:70:c9:c2:46:71:76:50:30:a6:4a:e5:5b:56:
                    48:ca:6c:1b:40:9d:e6:08:17:1a:53:59:52:a1:ce:
                    a7:6a:05:10:3e:26:fd:9e:67:e5:27:26:7b:1a:31:
                    3b:4e:89:9a:ed:33:ef:29:95:4b:37:bf:d7:f4:26:
                    92:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:85:A2:86:B9:CF:22:62:E4:44:3F:0E:5B:8B:A8:09:5F:76:36:FA
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144363.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a6b1::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:f4:58:ce:41:c5:f8:d7:d3:4a:60:2b:3a:59:15:a8:ff:47:
         fa:88:83:80:b1:37:05:40:c6:14:eb:fb:a1:3b:93:72:14:6c:
         c2:2c:3f:37:cb:e7:5a:b3:f7:53:9e:2b:bb:4e:da:e2:36:7e:
         fe:30:2e:1a:2c:b1:0e:23:69:26:77:54:5c:bf:20:6e:77:35:
         c6:2a:a0:64:a2:68:28:72:22:f4:c3:47:48:d9:4f:a0:9f:88:
         93:ff:b2:65:e7:9d:2d:31:be:7d:65:0c:ee:79:06:25:49:cd:
         28:cc:45:f6:8b:33:09:b6:9b:f4:c2:6a:ac:76:57:f8:ab:d9:
         44:6a:11:26:be:4d:59:dc:ff:a6:85:81:fa:1c:dd:0b:9d:b0:
         27:3f:d7:3f:3c:7e:d7:03:29:f7:20:d7:57:a7:bd:b1:7a:d8:
         c7:d5:e2:22:cb:e1:21:e6:c3:60:67:92:84:1a:62:41:86:eb:
         0e:fe:04:e7:30:62:4b:c8:64:f0:33:fc:2f:0f:78:d5:62:ea:
         6b:d0:bc:39:c6:65:a5:15:5d:da:c1:42:57:a6:db:d7:d8:52:
         65:86:b4:f1:71:5d:0c:26:ba:31:1b:5b:68:fa:a6:2d:c9:fb:
         fa:67:e6:7f:24:e5:06:75:f0:df:fa:67:68:83:bd:24:c4:5f:
         7e:29:cf:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----