Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144400.roa
File:                     AS144400.roa (raw, json)
Hash identifier:          B2a+p7rLLB3uipFyYmx19cLWLethDh6eP3Ze8JozYwE=
Subject key identifier:   CB:4C:26:3E:B4:54:1C:44:D9:02:33:86:E2:8D:FF:E9:A1:D3:8F:A2
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       036B9733BEC9536C266AFE7BDC14EED657935BBC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144400.roa
Signing time:             Tue 26 May 2026 06:12:37 +0000
ROA not before:           Tue 26 May 2026 06:07:37 +0000
ROA not after:            Tue 25 May 2027 06:12:37 +0000
asID:                     144400
IP address blocks:        240a:a6d6::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:6b:97:33:be:c9:53:6c:26:6a:fe:7b:dc:14:ee:d6:57:93:5b:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:07:37 2026 GMT
            Not After : May 25 06:12:37 2027 GMT
        Subject: CN=CB4C263EB4541C44D9023386E28DFFE9A1D38FA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:79:3e:66:1a:a0:b5:dc:16:57:c1:02:51:e6:
                    3e:d3:e6:1b:9b:80:c2:c0:f5:ed:55:fe:5a:95:75:
                    a5:20:3b:42:ce:ab:bd:8a:20:a1:94:c4:92:ab:29:
                    7e:69:54:23:5e:a9:12:8a:66:58:1d:13:59:a8:0b:
                    5e:2a:a3:e6:93:a8:b9:5e:01:03:cc:70:0c:ff:34:
                    9d:8c:a9:4f:e9:eb:ee:d0:e7:6a:c8:68:8e:b5:4d:
                    2e:28:3f:48:d2:99:24:51:7c:b5:7b:bf:3a:ce:4b:
                    be:86:61:80:12:e2:f2:0c:d7:a6:49:d2:05:9d:ac:
                    ca:23:fb:70:87:38:94:f2:47:51:ed:03:30:72:68:
                    76:0a:da:dd:4f:32:d0:70:7f:62:07:e3:4b:13:83:
                    18:a3:f3:a3:21:76:e4:48:10:bc:94:29:30:12:d3:
                    1d:20:19:7a:24:e4:54:3d:ca:ed:d0:ef:58:35:b0:
                    2b:3d:ce:b3:65:ce:76:a1:fb:a0:be:cd:fa:30:7f:
                    7f:82:27:8a:56:00:4d:8c:e8:4e:6f:e5:17:65:e2:
                    2e:ee:ae:6c:e3:22:9f:51:8b:6c:bb:0d:a7:9a:04:
                    ec:27:d9:52:90:a9:13:04:1b:6b:9b:e0:f2:a8:e8:
                    91:4c:81:35:72:52:61:a7:b2:34:42:a0:15:7b:21:
                    b7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:4C:26:3E:B4:54:1C:44:D9:02:33:86:E2:8D:FF:E9:A1:D3:8F:A2
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144400.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a6d6::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:e0:04:3a:e1:99:47:2f:a7:0f:92:f5:ad:2a:4d:6f:f1:48:
         95:42:8f:6e:b2:82:34:4f:46:6e:22:27:fc:72:be:1d:93:26:
         f9:cb:09:49:61:96:50:34:2e:74:23:8e:43:35:f8:da:d6:2c:
         0d:3c:2c:64:b2:5f:b6:32:f3:51:4a:fa:03:c2:94:c8:29:d0:
         fb:c6:50:37:c4:e3:ee:86:4e:b6:03:cf:c6:bb:53:0d:18:03:
         4f:b8:28:f5:66:f6:89:56:f7:40:8d:f8:a8:6c:7a:b7:f4:4e:
         00:f7:96:40:8a:aa:2a:e3:33:fb:2b:56:4d:17:04:09:f8:d5:
         93:f7:29:34:c3:a3:37:b8:53:68:a8:34:59:03:f3:14:4b:a7:
         ea:ac:7b:a4:7d:24:36:6b:27:f4:33:d8:b7:45:84:6c:8f:07:
         0b:7d:93:b4:5d:4f:95:3a:34:b6:54:9d:f4:e6:ef:df:4d:83:
         65:a4:ef:17:c6:98:7d:a9:3d:55:20:e2:d7:75:f9:0f:37:29:
         c6:9f:96:26:0e:59:e0:21:38:6a:53:44:3f:62:9c:1e:2e:bf:
         dd:5f:a4:bc:4d:f6:7e:7b:77:06:83:a5:df:a4:ce:c9:1b:a6:
         bd:88:6c:d3:16:b4:b7:31:c0:a5:21:b6:ec:72:f7:1d:dd:b7:
         71:da:21:8c
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUA2uXM77JU2wmav573BTu1leTW7wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjA3MzdaFw0yNzA1MjUwNjEyMzdaMDMxMTAvBgNV
BAMTKENCNEMyNjNFQjQ1NDFDNDREOTAyMzM4NkUyOERGRkU5QTFEMzhGQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIeT5mGqC13BZXwQJR5j7T5hub
gMLA9e1V/lqVdaUgO0LOq72KIKGUxJKrKX5pVCNeqRKKZlgdE1moC14qo+aTqLle
AQPMcAz/NJ2MqU/p6+7Q52rIaI61TS4oP0jSmSRRfLV7vzrOS76GYYAS4vIM16ZJ
0gWdrMoj+3CHOJTyR1HtAzByaHYK2t1PMtBwf2IH40sTgxij86MhduRIELyUKTAS
0x0gGXok5FQ9yu3Q71g1sCs9zrNlznah+6C+zfowf3+CJ4pWAE2M6E5v5Rdl4i7u
rmzjIp9Ri2y7DaeaBOwn2VKQqRMEG2ub4PKo6JFMgTVyUmGnsjRCoBV7IbdzAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUy0wmPrRUHETZAjOG4o3/6aHTj6IwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NDAwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqm1jANBgkqhkiG9w0BAQsFAAOCAQEAEeAE
OuGZRy+nD5L1rSpNb/FIlUKPbrKCNE9GbiIn/HK+HZMm+csJSWGWUDQudCOOQzX4
2tYsDTwsZLJftjLzUUr6A8KUyCnQ+8ZQN8Tj7oZOtgPPxrtTDRgDT7go9Wb2iVb3
QI34qGx6t/ROAPeWQIqqKuMz+ytWTRcECfjVk/cpNMOjN7hTaKg0WQPzFEun6qx7
pH0kNmsn9DPYt0WEbI8HC32TtF1PlTo0tlSd9Obv302DZaTvF8aYfak9VSDi13X5
Dzcpxp+WJg5Z4CE4alNEP2KcHi6/3V+kvE32fnt3BoOl36TOyRumvYhs0xa0tzHA
pSG27HL3Hd23cdohjA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:42 2026 by rpki-client