Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144489.roa
File:                     AS144489.roa (raw, json)
Hash identifier:          uxixI1ZxNcnhFabNQ+KSysaakRzDU/J3UQODbGtL3KY=
Subject key identifier:   9A:34:ED:85:8A:46:62:2D:B4:A4:53:BE:E4:F9:0F:FE:16:CB:98:B0
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1731CD851C17A364888D9CF23CE201C25FC63F75
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144489.roa
Signing time:             Fri 22 May 2026 06:46:12 +0000
ROA not before:           Fri 22 May 2026 06:41:12 +0000
ROA not after:            Fri 21 May 2027 06:46:12 +0000
asID:                     144489
IP address blocks:        240a:a72f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:31:cd:85:1c:17:a3:64:88:8d:9c:f2:3c:e2:01:c2:5f:c6:3f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:12 2026 GMT
            Not After : May 21 06:46:12 2027 GMT
        Subject: CN=9A34ED858A46622DB4A453BEE4F90FFE16CB98B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a2:c0:a2:db:d8:41:4f:30:c4:fd:61:06:30:
                    50:14:a1:e7:97:bd:83:6c:c1:e3:eb:3b:4e:a6:cd:
                    4d:bc:dd:71:d4:c4:f6:c1:89:c3:dd:7f:26:e1:ed:
                    65:fc:98:65:3e:5a:a5:dc:51:f5:3d:ea:68:3f:bb:
                    af:50:fb:b5:4a:a2:36:ab:c1:f8:dc:89:25:6f:e5:
                    fd:9b:7d:0e:73:7e:1c:fa:a2:99:45:91:99:b5:4b:
                    d3:d9:89:5f:3e:4c:05:de:6c:74:89:47:d4:b3:6f:
                    71:50:c9:c6:1a:b3:95:a9:ef:01:4b:e6:a1:2f:f8:
                    b5:e8:7a:92:eb:ef:85:5f:d8:84:5a:44:bd:d8:97:
                    c4:94:a2:81:23:64:27:da:2a:0e:fd:3f:3b:a7:5d:
                    6e:12:6a:ed:83:8d:c5:b2:ff:2e:bc:e4:de:64:74:
                    1b:f1:e9:36:44:d4:ab:ca:b4:08:80:b5:e0:0a:76:
                    35:fc:03:7a:cb:91:79:28:e3:0f:75:fa:aa:b4:d1:
                    c8:83:bf:f0:a1:19:ac:21:1b:49:4f:7e:9d:48:3b:
                    67:cb:1f:56:9a:e8:e3:01:32:ea:d2:61:9a:0e:12:
                    86:43:51:a2:fc:c5:2d:40:61:7d:62:1d:0a:88:cb:
                    d9:65:52:8f:ca:39:73:37:32:d0:4f:dc:bb:7c:c5:
                    ab:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:34:ED:85:8A:46:62:2D:B4:A4:53:BE:E4:F9:0F:FE:16:CB:98:B0
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144489.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a72f::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:d3:d5:fe:8f:d0:f2:c5:ee:06:08:86:b8:38:d0:2e:03:4f:
         5f:28:c0:c6:6a:c0:90:8b:dd:19:19:e9:07:b1:a9:b5:b5:ac:
         db:38:46:37:2a:15:ae:10:65:5f:6c:79:6d:d9:96:69:5c:9d:
         c9:5e:d9:c2:3e:65:cb:66:24:c0:1c:a4:cc:ef:84:d8:36:c6:
         8c:ed:97:bc:de:d0:48:09:82:c2:af:bb:f4:85:c1:6b:2b:cc:
         bc:35:ee:c0:b9:69:1b:97:74:be:01:f1:32:ec:0a:12:11:22:
         bb:0f:be:18:17:63:ab:22:23:b8:77:65:c1:bc:76:c5:f8:c3:
         30:b3:79:c1:58:39:4c:6b:4e:df:11:c7:16:88:cc:3b:d3:ac:
         1f:c8:20:87:b3:f7:9a:86:39:c3:9f:7d:91:4c:80:3b:bf:61:
         bf:46:c2:1b:e9:a6:60:71:d0:5e:75:5d:d6:a1:1e:9d:25:13:
         84:c3:07:96:07:c0:8e:e8:e2:65:74:ea:17:9f:e7:8f:1d:d8:
         4e:f0:14:31:04:a0:be:5c:ef:1e:15:8d:1a:cb:5f:27:10:d2:
         e5:91:9a:52:ad:b2:9e:33:bd:fb:ba:a9:a7:e8:6d:8b:29:96:
         6a:16:c1:d9:36:cb:a1:3a:8a:61:77:7e:45:05:7c:d0:8b:e2:
         b7:fe:82:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----