Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144492.roa
File:                     AS144492.roa (raw, json)
Hash identifier:          1+Psl57WqXALjUt+rCdzStc7fmAtJ8UoZZbhX42URDc=
Subject key identifier:   C6:A0:33:36:B3:63:F4:32:83:E8:F2:0A:7B:2A:57:7F:B6:47:30:A0
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1082C2BB9633B2787BD22B42A9DC8BC4B139697A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144492.roa
Signing time:             Mon 25 May 2026 03:19:08 +0000
ROA not before:           Mon 25 May 2026 03:14:08 +0000
ROA not after:            Mon 24 May 2027 03:19:08 +0000
asID:                     144492
IP address blocks:        240a:a732::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:82:c2:bb:96:33:b2:78:7b:d2:2b:42:a9:dc:8b:c4:b1:39:69:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:08 2026 GMT
            Not After : May 24 03:19:08 2027 GMT
        Subject: CN=C6A03336B363F43283E8F20A7B2A577FB64730A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bd:49:39:8f:0a:8f:88:38:63:e3:bf:1b:fe:
                    da:08:8f:03:cd:3a:a4:f4:35:dc:b5:ad:23:95:f0:
                    48:52:e9:19:5d:18:2a:02:38:69:d9:8d:da:65:4d:
                    67:f1:79:75:2f:4f:96:bc:69:61:45:d6:95:b2:66:
                    90:e6:e4:22:d1:e9:73:52:c3:57:f2:0d:d2:dd:b7:
                    3a:d4:0a:ae:ac:12:e9:87:b4:c9:9b:ab:40:e3:71:
                    4e:88:77:a8:f5:74:43:6a:d6:48:f6:88:89:c1:59:
                    11:0f:ce:ec:24:ce:ab:d6:6d:fd:2b:3a:46:9b:ff:
                    f0:d1:a7:97:e1:ab:07:e0:e5:ce:ee:4f:eb:97:06:
                    c1:9b:fc:54:6b:87:e3:9f:1e:76:ff:33:e5:25:1c:
                    ad:52:be:77:3d:e8:32:47:45:cb:1b:ce:07:a3:a4:
                    1b:54:52:5a:fc:70:c2:5a:6a:2b:ea:50:76:00:10:
                    2a:02:42:cd:f1:69:0e:75:6a:17:36:17:dd:d7:de:
                    ef:41:f9:83:b4:7c:07:75:a9:b4:15:43:8f:91:27:
                    4a:7e:cf:b5:17:53:a1:39:c2:e4:41:6d:91:f7:b2:
                    04:e6:2d:9d:ca:c3:41:1b:74:b8:f8:8c:2b:d1:a9:
                    d9:30:09:a6:b4:11:72:5b:dd:35:f9:a2:0b:33:77:
                    fb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A0:33:36:B3:63:F4:32:83:E8:F2:0A:7B:2A:57:7F:B6:47:30:A0
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144492.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a732::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:71:c0:83:19:77:ee:d8:9b:85:fa:b6:3e:44:d6:c6:2f:c3:
         0e:6a:1f:f3:a1:33:3b:ba:fe:5b:b2:89:0d:f7:b3:1d:42:ab:
         a9:91:a4:bd:e0:58:ed:2e:fd:5f:b1:27:1d:2a:c6:c3:4f:53:
         54:39:00:17:d0:7c:39:64:66:48:00:09:86:ab:51:3e:c7:5b:
         3f:4d:69:49:74:11:df:74:68:e6:e6:34:b0:ab:db:dc:bd:08:
         96:5d:84:78:01:88:ea:d8:1e:5e:ba:c8:80:48:4a:44:04:d1:
         28:4b:0d:4f:44:de:7e:a9:29:df:77:4c:35:17:c1:1f:de:69:
         55:58:0e:75:6c:fc:7f:1d:1c:5f:1a:46:a7:2f:2d:55:cb:99:
         cc:41:bf:ac:d7:73:15:87:f1:ed:ea:03:7e:cc:db:8d:52:ab:
         66:8d:61:08:59:f5:f1:c4:01:f2:ad:48:81:de:e8:d9:75:0d:
         a5:ce:de:4a:c0:e1:14:76:8e:7a:f1:82:64:ce:63:9c:cb:42:
         6f:5a:6e:9a:6a:42:bf:b8:b7:11:ab:76:47:29:75:0b:e6:04:
         f8:50:d3:f7:49:64:f5:66:7f:fb:33:7e:87:3e:8f:d1:c4:87:
         f1:24:43:3a:a2:2f:bc:55:49:47:27:55:e5:25:c2:ce:dc:c6:
         46:6e:08:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:20 2026 by rpki-client