Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144424.roa
File:                     AS144424.roa (raw, json)
Hash identifier:          3Ncpirr15zUb9WJBvBEwTx8Jj/nfDyXjJgiD+1K5BCk=
Subject key identifier:   8C:FD:DF:E1:EE:22:A1:24:C3:B3:5B:65:1C:4F:61:CD:AC:9A:F6:71
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2FB119A44C9B7A896306C20A7B342AD46C55ED11
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144424.roa
Signing time:             Fri 22 May 2026 07:41:08 +0000
ROA not before:           Fri 22 May 2026 07:36:08 +0000
ROA not after:            Fri 21 May 2027 07:41:08 +0000
asID:                     144424
IP address blocks:        240a:a6ee::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:b1:19:a4:4c:9b:7a:89:63:06:c2:0a:7b:34:2a:d4:6c:55:ed:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:36:08 2026 GMT
            Not After : May 21 07:41:08 2027 GMT
        Subject: CN=8CFDDFE1EE22A124C3B35B651C4F61CDAC9AF671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d3:de:1a:e0:59:15:85:ff:7b:12:99:dd:28:
                    25:c7:b5:8d:6b:a5:19:16:02:a9:82:f8:0d:29:a3:
                    e1:37:9e:44:8b:d2:80:4a:ab:2a:a5:94:7c:b6:59:
                    ee:2a:1b:11:7d:52:e1:02:c2:5f:2c:de:49:2d:d9:
                    da:27:c6:95:87:ae:82:18:88:2e:6e:47:5e:a2:3e:
                    59:8e:0f:4e:1d:41:6c:01:f6:2c:36:dd:49:bf:31:
                    d6:e4:2b:00:b3:c5:22:c3:2f:c2:3c:45:b9:9e:15:
                    10:4c:c8:64:4a:f9:af:e1:f8:ad:37:32:7f:4c:d9:
                    22:39:d4:c5:34:55:1c:20:6c:e0:3d:29:8f:5a:ba:
                    4b:b5:4e:2d:d4:c0:a7:01:f1:f9:28:b4:d6:98:da:
                    86:5f:3e:da:d6:1c:17:88:82:71:05:7d:ca:da:99:
                    6c:7e:62:43:85:d5:79:a7:ff:b2:a8:11:c9:9f:04:
                    20:6d:68:a4:51:b1:a8:26:97:07:36:a3:81:2e:72:
                    c3:61:dc:a2:b8:7c:18:3c:2a:63:68:f4:3b:45:d7:
                    30:d2:67:b5:78:c3:39:c9:1e:e0:2f:cb:48:f1:d7:
                    9d:9b:0d:5b:0f:f0:a8:85:4b:78:d8:e5:5c:88:65:
                    ce:a6:d1:f4:fb:db:09:f4:3b:15:b3:81:33:c1:e2:
                    68:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:FD:DF:E1:EE:22:A1:24:C3:B3:5B:65:1C:4F:61:CD:AC:9A:F6:71
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144424.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a6ee::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:6e:f9:86:6a:60:b3:20:a6:d4:a1:de:d4:f5:98:e5:49:dc:
         6d:9a:16:cd:6f:4e:5d:8d:01:46:50:ab:a6:92:3d:7b:7d:0a:
         60:03:ab:11:4e:45:c2:ec:87:b8:c3:02:e9:93:54:ec:8a:c7:
         32:40:01:c5:03:5f:1c:c0:31:b1:cd:72:ed:c8:90:01:a1:7f:
         a5:a5:2a:01:bc:96:56:75:36:52:9c:16:65:89:85:fc:cd:2e:
         5e:54:9a:be:09:22:f8:a4:64:bd:ca:ff:02:cc:fe:ab:f9:bb:
         34:53:56:7a:31:52:5c:e2:ef:45:d4:61:7b:92:f9:59:a7:a1:
         0d:77:f1:4c:a1:48:57:9b:19:dd:f1:7e:b5:3f:4f:e9:34:0c:
         da:a8:54:60:b6:7f:ce:cf:c0:5c:99:60:53:4e:64:ce:8a:ce:
         75:51:e9:fb:dd:03:11:47:44:05:bd:20:81:05:48:90:f4:13:
         f3:90:c5:1c:86:c4:4f:e0:d4:f2:a2:da:53:4c:db:d1:b9:de:
         ad:bb:50:3c:1c:89:07:ec:71:b3:93:23:37:0d:1d:69:62:87:
         ff:26:50:68:58:d2:7b:56:86:1f:e2:5d:af:aa:b2:cb:02:e8:
         33:53:84:e5:7b:aa:35:ee:45:ee:a5:e4:1b:5d:5e:75:bd:f9:
         72:08:b2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----