Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144440.roa
File:                     AS144440.roa (raw, json)
Hash identifier:          5dW4iBmZCnFBwbKRk4rHjZ+zGoH+QROPCGb8u3dfcjk=
Subject key identifier:   C1:0B:27:25:45:0C:C0:EA:6E:5A:15:7F:82:B0:C5:5B:F3:E5:70:19
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       71D9F88ED0A25FFDAE7FC1AD2E33E9D1EAD99712
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144440.roa
Signing time:             Fri 22 May 2026 04:26:41 +0000
ROA not before:           Fri 22 May 2026 04:21:41 +0000
ROA not after:            Fri 21 May 2027 04:26:41 +0000
asID:                     144440
IP address blocks:        240a:a6fe::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:d9:f8:8e:d0:a2:5f:fd:ae:7f:c1:ad:2e:33:e9:d1:ea:d9:97:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:21:41 2026 GMT
            Not After : May 21 04:26:41 2027 GMT
        Subject: CN=C10B2725450CC0EA6E5A157F82B0C55BF3E57019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:34:50:f1:26:dd:d6:6a:57:2d:39:78:a3:92:
                    95:9e:da:ef:66:4b:0d:10:41:7b:5d:19:f7:fe:bc:
                    0f:b4:69:8f:df:59:32:b2:6f:de:80:d6:ca:55:2f:
                    06:94:70:ec:26:be:93:e4:85:7c:2f:da:12:38:6e:
                    d2:da:2b:79:da:d4:95:7a:4e:05:4b:cc:2d:e7:72:
                    d2:f7:d6:14:2d:0c:36:be:66:66:64:ab:c5:65:ba:
                    5d:9c:f4:ee:31:16:7b:a6:ad:d5:a7:db:ba:09:2a:
                    26:c4:24:9b:39:67:88:17:ca:59:4f:ae:f4:e5:dd:
                    d2:b6:ee:b3:29:39:3a:9c:dc:08:d6:6a:84:71:cf:
                    d3:60:2d:b1:05:93:bc:65:20:cd:b8:e6:92:35:87:
                    e3:53:a6:75:a6:cd:d4:48:52:da:3d:57:f5:5a:2f:
                    74:2e:4a:c9:0c:fd:a5:c4:df:dd:ca:80:82:be:2d:
                    52:ee:b6:4f:11:2f:6e:21:3f:7f:c4:d4:43:30:10:
                    41:d3:e6:8a:e9:42:5b:9e:ab:11:0c:ad:ad:1e:cc:
                    81:77:8c:a3:0f:14:6d:93:24:cc:e0:62:63:2e:5e:
                    31:45:45:1b:80:af:81:44:c7:89:03:a3:0d:4a:e4:
                    df:b5:b1:b2:29:da:d2:3e:4e:80:16:bc:f1:8b:98:
                    8f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:0B:27:25:45:0C:C0:EA:6E:5A:15:7F:82:B0:C5:5B:F3:E5:70:19
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144440.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a6fe::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:c9:ce:7a:33:c8:7b:76:5f:a7:cc:6a:bb:fc:18:d0:e1:43:
         d4:56:9a:6b:b0:05:17:66:64:f3:c2:df:bf:31:ea:ad:18:4f:
         03:10:f3:65:33:17:70:a3:62:8e:c4:6e:3e:36:20:98:aa:99:
         ea:f5:2a:e5:82:b4:c4:dc:68:34:c4:15:b3:1a:00:c0:89:09:
         6f:d8:ed:20:6d:cc:21:ec:41:54:b2:63:61:59:be:ef:1f:e2:
         1d:4d:1f:68:2d:5c:c7:5c:3d:7e:da:67:f4:63:15:a7:53:c3:
         a3:89:78:ad:b3:73:4f:a4:21:35:3e:f2:92:08:1e:52:a1:43:
         87:61:30:a6:64:cf:a3:e5:d1:b2:0a:55:63:f2:9f:01:0b:b0:
         05:0e:a7:ff:9e:ab:01:46:62:ca:db:e3:f5:ba:46:d5:63:5e:
         13:a3:d8:0f:66:e6:55:18:72:d9:03:aa:0c:b4:3b:06:cc:74:
         a1:4d:2d:21:d3:3f:50:8c:1f:22:11:c3:64:72:ae:00:57:e5:
         6a:3f:a8:e9:05:78:0e:e7:18:08:88:03:02:1d:f1:12:20:5a:
         58:09:e2:9e:b0:5d:0a:3d:a1:41:2d:f6:60:5f:26:4e:ad:a6:
         8d:79:79:a8:78:f5:a7:e5:c7:a8:75:94:33:52:e3:27:41:f1:
         5d:84:f7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:09 2026 by rpki-client