Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144484.roa
File:                     AS144484.roa (raw, json)
Hash identifier:          ctQ9DwJdtmEzXrGbPENHYHAaLBDm0F3rTs9MrBeE1AM=
Subject key identifier:   B0:D1:DA:A8:DF:79:13:FD:16:B6:A7:E7:B8:0A:6E:13:96:9E:5A:F7
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2496233D9BFD96E1564D9B9453EE29A997CE04FD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144484.roa
Signing time:             Fri 22 May 2026 02:47:59 +0000
ROA not before:           Fri 22 May 2026 02:42:59 +0000
ROA not after:            Fri 21 May 2027 02:47:59 +0000
asID:                     144484
IP address blocks:        240a:a72a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:96:23:3d:9b:fd:96:e1:56:4d:9b:94:53:ee:29:a9:97:ce:04:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:42:59 2026 GMT
            Not After : May 21 02:47:59 2027 GMT
        Subject: CN=B0D1DAA8DF7913FD16B6A7E7B80A6E13969E5AF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:86:09:e9:ec:e1:7d:7c:a9:fc:3b:23:83:cb:
                    e2:18:9b:27:9d:db:ec:db:b1:ce:1e:fa:71:f6:3f:
                    f2:17:6d:28:f8:2a:89:68:6d:f5:a9:16:00:6d:76:
                    59:2a:68:ab:b4:0e:a2:64:8e:65:81:bb:f5:a3:08:
                    11:06:95:e4:78:ef:d4:6f:99:d3:e0:5c:3b:d7:ba:
                    d4:e9:c1:ba:67:65:4f:46:bc:85:05:2f:87:ed:40:
                    78:0f:11:4b:aa:05:c6:4c:26:e6:44:c9:d6:7f:9d:
                    a5:c0:35:9c:34:95:d8:ce:80:e4:96:36:a9:69:5b:
                    82:5e:e2:ea:9e:82:2a:68:50:c9:3f:5f:ec:a5:ab:
                    35:05:42:97:6e:95:cf:bc:f6:3b:7a:9c:41:ac:87:
                    01:6b:05:ea:17:1b:66:50:8a:c0:66:f0:6f:2d:81:
                    83:c5:ff:9c:cc:bd:f8:fb:d6:9c:53:cd:cd:77:1a:
                    f2:87:4f:61:cf:f9:b9:57:86:3d:db:e3:61:b8:70:
                    b8:d9:f1:53:49:2e:0a:3e:27:b1:41:2f:83:ce:ed:
                    29:9c:ba:b2:73:60:d5:b3:02:8a:2e:a1:f2:8f:0f:
                    77:3c:6f:11:d1:c9:8e:db:98:6a:8d:c6:f8:97:a6:
                    a4:6b:69:90:16:1b:8f:98:c2:20:a9:1c:09:ae:dc:
                    74:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D1:DA:A8:DF:79:13:FD:16:B6:A7:E7:B8:0A:6E:13:96:9E:5A:F7
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144484.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a72a::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:6b:53:94:81:b3:1b:14:4b:77:74:ff:4f:99:42:e0:4d:29:
         f2:dd:b4:68:fd:10:c2:4f:9e:a2:26:82:8e:14:34:49:77:91:
         3a:b9:7c:d0:34:72:dd:5a:31:1a:37:11:e2:88:48:30:ac:f1:
         c9:f7:d7:61:61:29:06:dd:d8:c3:f3:ee:4d:9f:25:db:d7:bb:
         88:b7:ad:80:fa:2d:12:34:6b:cc:ce:d0:3a:51:62:76:f7:b8:
         dd:fc:f9:6f:56:6b:6d:d5:76:d0:2f:a6:d9:c9:d1:2f:85:43:
         53:9a:9d:c5:cd:b3:b9:e9:3c:c2:58:f9:db:2f:1d:6a:f9:45:
         a7:07:25:7a:12:14:6c:57:b6:6d:40:5d:df:06:e1:9a:06:b0:
         c3:2b:84:d3:bb:c2:e4:32:e0:ff:2d:8a:a5:fc:41:cd:6c:ac:
         41:be:4f:be:b3:07:52:31:11:40:24:b0:2b:1b:1b:c4:f2:a0:
         d8:5f:17:78:f1:78:f9:ed:93:da:b3:4d:07:df:f4:ce:0c:9b:
         37:29:eb:52:a5:65:67:76:f5:20:59:57:79:e1:c7:21:61:db:
         23:b1:f7:39:f3:69:87:79:0f:dc:d5:c0:10:0b:74:d3:f1:58:
         af:8b:b9:58:e1:c7:e0:0a:2d:32:be:21:a4:8d:a3:9e:11:4a:
         41:29:83:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:46 2026 by rpki-client