Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144482.roa
File:                     AS144482.roa (raw, json)
Hash identifier:          9gkz3ePDl44GcShloQyXIz+kBfxbpOxVXgKuQoMl8aM=
Subject key identifier:   E3:6C:D1:BC:72:B3:2B:E8:E2:35:46:F2:EF:0C:F8:F7:D3:00:31:7C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1F9763698688D4AF366E5F048D0A2ECDD91867BA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144482.roa
Signing time:             Tue 26 May 2026 02:35:17 +0000
ROA not before:           Tue 26 May 2026 02:30:17 +0000
ROA not after:            Tue 25 May 2027 02:35:17 +0000
asID:                     144482
IP address blocks:        240a:a728::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:97:63:69:86:88:d4:af:36:6e:5f:04:8d:0a:2e:cd:d9:18:67:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:30:17 2026 GMT
            Not After : May 25 02:35:17 2027 GMT
        Subject: CN=E36CD1BC72B32BE8E23546F2EF0CF8F7D300317C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bf:ae:44:dc:eb:91:de:63:fc:0f:b8:ac:61:
                    13:74:9d:0c:38:12:04:07:77:37:97:35:aa:91:51:
                    a6:92:92:8d:38:7e:a7:77:94:4b:ba:6e:a2:98:f8:
                    60:ec:9e:3b:9d:08:52:3f:fc:06:47:2d:61:2b:d3:
                    bf:cd:9a:57:1b:44:82:ae:7b:e1:d7:fb:f5:ed:47:
                    c0:1b:3f:3a:76:a9:d3:5b:f7:dd:ec:3c:91:7d:fb:
                    67:13:76:cb:a1:bb:25:e9:3b:98:36:13:58:30:28:
                    f4:7b:5f:2a:cb:e9:45:bd:53:6b:dd:fb:78:53:7e:
                    9e:13:23:b2:fc:b9:5b:9d:26:34:94:d2:4b:8f:c6:
                    b3:75:2c:73:02:d6:8f:64:b6:6b:4f:01:d2:ae:f5:
                    38:1b:b5:03:67:7f:75:c5:d4:b8:a3:89:10:18:a8:
                    c1:1a:4b:7c:aa:e7:c6:29:50:9e:e0:d5:d1:e8:24:
                    30:36:6b:6c:dc:ea:d2:9c:89:3a:70:2f:f8:d8:17:
                    2d:a0:8f:9c:71:47:00:1e:9f:e3:ac:e6:f0:e8:d8:
                    9e:9a:0b:ae:e8:b1:c7:4e:38:0f:8d:a8:17:76:5b:
                    39:7c:ab:06:34:a8:74:6d:cc:31:72:d1:f5:01:42:
                    a0:c5:c8:f9:52:5b:4f:d3:05:a2:64:e7:24:c9:f1:
                    fa:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:6C:D1:BC:72:B3:2B:E8:E2:35:46:F2:EF:0C:F8:F7:D3:00:31:7C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144482.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a728::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:78:73:fe:89:8c:bd:5c:27:bc:7d:31:ea:04:91:c5:bc:cd:
         39:d9:00:08:f5:4b:ae:e9:e8:87:96:f5:ae:fe:96:0f:1b:9d:
         5d:fa:5e:a6:38:a2:bf:45:31:22:3a:ac:5a:2a:b6:6e:ab:55:
         4e:6b:44:8a:1b:65:e6:53:39:cc:5d:c1:48:33:2f:d7:a6:ec:
         f3:58:64:a6:39:63:27:65:d3:88:79:2a:fa:61:0c:ac:9b:1a:
         78:1a:d0:d9:8f:ae:a3:82:85:de:2c:5b:e8:87:ab:3d:4f:0d:
         5f:fc:42:54:9c:aa:ed:29:5e:12:b9:89:7c:0b:0d:a2:36:5a:
         fa:e8:41:d2:4f:b8:b8:4e:9c:32:96:7e:9e:8c:46:71:0f:bb:
         10:3b:9b:36:11:5b:26:50:0d:e4:58:9f:a6:91:0e:f5:7f:c5:
         82:14:3e:f7:81:03:ff:fa:dd:fd:27:17:05:1b:7b:81:c2:17:
         f8:9b:42:26:83:e1:52:b9:da:06:ec:14:8c:6d:d2:a7:a9:84:
         f6:4b:b4:f4:3c:6c:c3:e5:dd:10:0c:db:1a:3d:96:ce:23:48:
         b9:7d:da:47:2d:7e:d2:0d:09:e5:5c:b1:3e:04:45:a7:9a:69:
         f2:e6:cd:05:6e:a3:6c:13:63:d2:61:a0:22:82:76:91:1c:dd:
         a1:dc:b1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:58 2026 by rpki-client