Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144508.roa
File:                     AS144508.roa (raw, json)
Hash identifier:          jNohaBAvg/5EdiGhqTcGYNQrj9OIj9Ms76q0b1MkKe8=
Subject key identifier:   F9:4E:A5:CA:FD:BC:14:72:EA:9B:11:6A:D7:52:E8:A4:C0:F3:12:32
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       19233F2B34C1A9378B55F2DC9CBE129EABA24C8C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144508.roa
Signing time:             Fri 22 May 2026 07:08:45 +0000
ROA not before:           Fri 22 May 2026 07:03:45 +0000
ROA not after:            Fri 21 May 2027 07:08:45 +0000
asID:                     144508
IP address blocks:        240a:a742::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:23:3f:2b:34:c1:a9:37:8b:55:f2:dc:9c:be:12:9e:ab:a2:4c:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:03:45 2026 GMT
            Not After : May 21 07:08:45 2027 GMT
        Subject: CN=F94EA5CAFDBC1472EA9B116AD752E8A4C0F31232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fc:3c:ff:08:8b:2e:8a:35:1a:f7:f1:35:0b:
                    ad:02:54:48:ff:49:a3:53:e0:21:db:10:f0:7a:3f:
                    ab:3b:77:d9:56:9e:1a:0a:54:86:0f:11:31:eb:07:
                    15:32:12:e8:53:34:ae:48:d7:81:fc:7b:e3:0e:96:
                    e2:40:be:99:4f:5c:06:39:2d:ed:29:c2:ba:06:b7:
                    9b:f6:c5:0c:b1:72:88:24:36:a6:c6:69:fc:47:29:
                    d7:32:c8:3a:0c:92:08:40:98:94:7f:20:2a:cb:2b:
                    bf:53:03:8c:d7:97:2b:e7:c3:b7:9a:a5:96:a8:6b:
                    36:cd:46:61:70:2d:11:66:fa:9d:1b:db:98:05:f6:
                    0b:6c:f9:a5:a2:b8:8b:43:f2:b7:4f:7b:26:c2:5b:
                    26:01:dc:b9:84:ae:af:a1:ad:dd:52:e6:63:b3:70:
                    1a:db:a5:85:12:dc:a4:2d:9e:91:77:6a:ce:0b:35:
                    c8:b4:b8:34:f9:38:95:45:5d:a3:d6:53:10:25:76:
                    9f:3c:0d:9c:09:c9:d1:39:f8:49:38:ab:1a:91:db:
                    eb:8a:17:2c:36:e2:bf:d5:7b:62:11:5f:be:0b:ea:
                    4f:9f:68:3e:82:36:54:39:fd:9f:ab:c1:06:b8:d7:
                    b7:01:b2:5e:6e:3d:70:78:00:72:3f:30:18:00:d0:
                    30:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:4E:A5:CA:FD:BC:14:72:EA:9B:11:6A:D7:52:E8:A4:C0:F3:12:32
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144508.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a742::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:19:d5:2c:c9:81:76:94:1d:26:8b:b0:7f:1d:fa:4f:b2:54:
         47:02:a9:18:79:d2:1c:76:3e:46:2e:11:76:ca:ce:f5:38:cf:
         c9:86:6e:93:30:cd:da:96:8b:ce:c9:9c:75:0c:25:21:7d:36:
         9e:fa:e5:f7:8e:6e:08:4a:e3:b6:3a:44:37:75:5e:98:6a:d9:
         1e:1b:1e:a6:ad:a5:dc:19:47:d0:ce:01:14:c2:7b:fc:9d:6e:
         f9:0d:c5:cc:bc:db:fb:26:c9:58:6f:69:8f:3d:e4:f7:13:87:
         02:04:37:63:01:02:b8:5d:a3:d0:06:5d:d3:fe:4c:5b:99:5d:
         14:a5:4d:8c:df:6f:86:79:99:d7:29:6c:4f:4d:a4:b9:ac:e5:
         84:b2:b1:87:88:f7:af:fc:82:f7:d8:e2:f8:b6:9d:5d:59:5e:
         b7:90:47:fd:64:c1:51:78:80:6d:3d:ba:b1:a1:12:c5:fd:7d:
         4f:2c:b9:db:74:9f:b7:1c:4e:dd:3c:8f:fa:97:6e:0a:f4:3c:
         ee:50:d7:dc:b4:59:69:8b:c5:4e:4e:b9:73:06:ee:4f:83:e1:
         f7:1f:43:db:36:6d:93:1a:85:7d:ee:96:88:35:ad:c8:bd:c1:
         0e:12:63:78:ac:80:f5:54:ac:b1:b7:90:ec:30:a2:27:44:49:
         7c:ae:65:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----