Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144364.roa
File:                     AS144364.roa (raw, json)
Hash identifier:          eywb2XG6tgsLNN+ix+7YkyoFId0pKUnP6shPJGZ+rTY=
Subject key identifier:   78:2D:1D:B4:A1:83:E6:36:71:24:C6:DA:0E:A3:F3:AE:C2:6F:5F:54
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       66D97B46326254230B4507408812F5B0238843E6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144364.roa
Signing time:             Tue 26 May 2026 02:35:13 +0000
ROA not before:           Tue 26 May 2026 02:30:13 +0000
ROA not after:            Tue 25 May 2027 02:35:13 +0000
asID:                     144364
IP address blocks:        240a:a6b2::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:d9:7b:46:32:62:54:23:0b:45:07:40:88:12:f5:b0:23:88:43:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:30:13 2026 GMT
            Not After : May 25 02:35:13 2027 GMT
        Subject: CN=782D1DB4A183E6367124C6DA0EA3F3AEC26F5F54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:98:31:81:f8:95:36:7f:dc:4a:8a:e5:ec:b9:
                    a5:55:d0:94:76:70:63:bb:9a:44:a1:17:25:e7:f5:
                    e6:64:16:9a:63:e8:b5:73:ec:67:4e:e9:c8:84:ac:
                    9c:4e:1e:72:26:9b:31:c2:3f:a1:f8:b2:85:2e:fe:
                    c0:b6:44:25:66:5c:2b:73:33:66:11:ba:d8:0c:3a:
                    07:90:0b:0c:79:8b:da:ca:f6:64:97:2c:8b:96:17:
                    c9:66:d6:e7:4b:9f:47:70:13:96:ed:66:53:34:86:
                    04:6b:df:81:1b:20:10:38:57:45:04:fb:a3:3e:f3:
                    34:64:92:83:d7:65:5c:64:2e:d4:f9:08:18:08:24:
                    40:1a:b4:5a:ec:82:6c:1b:12:1d:51:16:e6:9d:00:
                    a6:dc:de:b2:4d:0a:fb:02:b4:28:92:db:1b:ed:b1:
                    85:5c:43:f4:bc:e8:a1:ed:25:58:2f:e8:ca:9a:9b:
                    d0:42:53:76:aa:d3:f8:b4:0f:f6:ea:04:4f:99:1b:
                    c0:2b:bc:17:f8:14:4c:a7:55:65:f2:f3:67:f7:a0:
                    ab:5f:15:55:eb:03:6c:97:67:36:cc:36:d2:1d:d2:
                    ff:dc:48:e7:11:4c:12:23:55:92:40:f5:7c:dc:72:
                    c3:6c:af:71:ea:22:58:71:7a:94:06:4a:b6:b7:2f:
                    8a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:2D:1D:B4:A1:83:E6:36:71:24:C6:DA:0E:A3:F3:AE:C2:6F:5F:54
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144364.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a6b2::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:21:93:6e:a7:33:7a:f7:23:f7:07:4f:a6:aa:3b:3d:b7:cd:
         2e:74:d7:21:ed:0e:f5:ad:2e:b6:84:a2:36:d1:da:5a:8b:c9:
         f6:2e:e0:7a:7b:0c:ee:8b:ee:c7:d1:7f:38:ca:9a:96:aa:bd:
         7e:b8:26:f3:dc:7f:74:67:4e:77:3e:d6:c2:00:da:89:4c:8a:
         0a:32:8a:76:5d:a0:ea:3d:be:ab:6d:a1:ed:1b:43:5b:c4:4b:
         ba:45:a7:6d:fb:97:95:59:fc:13:a3:d2:be:05:95:af:8b:86:
         0f:b7:7f:e7:b6:6f:d6:0e:14:76:11:55:22:c3:70:33:e9:fc:
         c3:53:cf:21:69:cb:c2:99:c7:38:19:6a:57:71:27:38:95:5b:
         17:91:d2:0e:d9:32:d1:93:61:2b:3e:2c:0f:e3:57:1e:5e:26:
         fa:f8:99:fb:e2:4c:5b:3b:68:cc:09:68:a0:39:ec:b7:0b:c7:
         80:5a:79:2c:e3:af:fd:a1:83:aa:60:4f:65:8c:f9:3b:e2:a7:
         41:42:39:34:88:15:75:fa:01:f1:ae:8a:0e:cb:d2:d4:a7:b8:
         e1:2b:84:b3:ba:c2:5e:cd:86:16:a0:2c:e2:63:e7:0f:78:a2:
         11:5d:7f:c1:64:3f:a4:a6:9d:15:bf:31:ca:47:15:8e:22:6d:
         0c:9e:21:3b
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUZtl7RjJiVCMLRQdAiBL1sCOIQ+YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMjMwMTNaFw0yNzA1MjUwMjM1MTNaMDMxMTAvBgNV
BAMTKDc4MkQxREI0QTE4M0U2MzY3MTI0QzZEQTBFQTNGM0FFQzI2RjVGNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNmDGB+JU2f9xKiuXsuaVV0JR2
cGO7mkShFyXn9eZkFppj6LVz7GdO6ciErJxOHnImmzHCP6H4soUu/sC2RCVmXCtz
M2YRutgMOgeQCwx5i9rK9mSXLIuWF8lm1udLn0dwE5btZlM0hgRr34EbIBA4V0UE
+6M+8zRkkoPXZVxkLtT5CBgIJEAatFrsgmwbEh1RFuadAKbc3rJNCvsCtCiS2xvt
sYVcQ/S86KHtJVgv6Mqam9BCU3aq0/i0D/bqBE+ZG8ArvBf4FEynVWXy82f3oKtf
FVXrA2yXZzbMNtId0v/cSOcRTBIjVZJA9XzccsNsr3HqIlhxepQGSra3L4pDAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUeC0dtKGD5jZxJMbaDqPzrsJvX1QwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MzY0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqmsjANBgkqhkiG9w0BAQsFAAOCAQEAUyGT
bqczevcj9wdPpqo7PbfNLnTXIe0O9a0utoSiNtHaWovJ9i7gensM7ovux9F/OMqa
lqq9frgm89x/dGdOdz7WwgDaiUyKCjKKdl2g6j2+q22h7RtDW8RLukWnbfuXlVn8
E6PSvgWVr4uGD7d/57Zv1g4UdhFVIsNwM+n8w1PPIWnLwpnHOBlqV3EnOJVbF5HS
Dtky0ZNhKz4sD+NXHl4m+viZ++JMWztozAlooDnstwvHgFp5LOOv/aGDqmBPZYz5
O+KnQUI5NIgVdfoB8a6KDsvS1Ke44SuEs7rCXs2GFqAs4mPnD3iiEV1/wWQ/pKad
Fb8xykcVjiJtDJ4hOw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:26 2026 by rpki-client