Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144526.roa
File:                     AS144526.roa (raw, json)
Hash identifier:          tpFrrXMlzDiwaC/7xN57ioegZxVA6/xwG2zgcI1+TcI=
Subject key identifier:   ED:C6:A4:9A:51:2F:C5:AB:F4:AD:BC:F6:74:EA:D0:5E:9D:D4:0E:88
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       78217F6840F539E8E6EFC18B0B1ECFA85BA03B4C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144526.roa
Signing time:             Fri 22 May 2026 04:08:30 +0000
ROA not before:           Fri 22 May 2026 04:03:30 +0000
ROA not after:            Fri 21 May 2027 04:08:30 +0000
asID:                     144526
IP address blocks:        240a:a754::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:21:7f:68:40:f5:39:e8:e6:ef:c1:8b:0b:1e:cf:a8:5b:a0:3b:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:03:30 2026 GMT
            Not After : May 21 04:08:30 2027 GMT
        Subject: CN=EDC6A49A512FC5ABF4ADBCF674EAD05E9DD40E88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:de:e0:4c:eb:0f:e1:68:7c:d5:7f:ab:42:82:
                    09:8a:33:a3:7d:69:0f:9b:17:b8:39:94:ba:8a:ec:
                    78:17:f3:fa:1c:e4:31:23:fe:8b:d0:79:4c:9f:3c:
                    e8:4e:71:01:3a:85:78:87:2d:ef:c2:76:3f:12:4c:
                    39:e8:7f:2a:7a:2f:f3:4d:c2:f0:48:13:fa:30:66:
                    0f:9e:29:6d:7e:30:bf:ad:90:54:da:18:18:21:0f:
                    c5:f8:7b:02:26:89:01:4b:ee:6a:4f:4b:63:e3:e9:
                    64:59:6c:77:6a:03:c6:37:82:1c:42:11:21:a5:85:
                    02:02:28:de:ac:e8:db:b9:30:6b:8f:44:dd:82:a1:
                    72:23:95:17:ba:d7:06:72:92:6d:02:81:bb:03:1d:
                    92:d8:29:e0:64:ef:13:34:38:ca:0d:8c:89:5b:d0:
                    3f:14:d3:c0:09:8c:81:28:d2:84:4e:d7:c3:3b:12:
                    9f:e8:c6:6d:20:2c:af:ad:fb:d6:87:d0:ce:5b:f8:
                    d4:fa:94:01:9b:91:35:2b:cf:9a:47:a0:13:54:00:
                    6f:f7:69:1e:31:31:3d:02:11:41:b4:12:8c:c6:f7:
                    a2:bc:c4:a0:75:64:23:0f:27:c2:3d:e5:28:97:8f:
                    1d:a6:38:7d:40:b4:59:0f:d4:0b:7b:2b:5f:29:2f:
                    63:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C6:A4:9A:51:2F:C5:AB:F4:AD:BC:F6:74:EA:D0:5E:9D:D4:0E:88
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144526.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a754::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:a1:63:db:2f:2d:14:e6:de:10:79:b1:a5:87:23:43:d4:0e:
         87:cf:c8:a5:1c:cb:58:5e:a1:6a:f8:1b:2e:d5:aa:f1:0f:f2:
         f0:7a:e0:f7:cf:d5:ad:8a:6e:fa:35:58:2d:03:8c:ae:19:07:
         23:79:6e:36:8e:cf:54:55:18:99:f2:de:3c:29:c2:d4:2f:45:
         50:92:cd:f8:60:34:e8:13:5b:a5:e6:28:ab:0c:6d:3e:c3:1c:
         d6:cc:85:c2:04:d1:28:bd:b1:4c:32:60:7e:8c:59:d4:4d:34:
         c1:11:c4:30:3b:2b:53:13:a8:a7:22:fe:7a:18:9b:0e:5c:b8:
         a9:58:c8:cc:3c:07:84:42:28:f7:c1:86:fa:f1:1b:e1:c5:e4:
         b5:91:d4:12:c0:10:c4:4d:13:a2:09:bd:d4:17:ab:8a:cd:5e:
         7c:99:32:5c:9d:fc:e3:b0:03:00:b9:4e:2d:a3:03:cb:d9:5d:
         36:f3:3f:45:a0:59:03:a8:b9:8a:b1:75:a1:d4:e4:0a:57:32:
         68:d9:ba:70:e1:e2:9e:d2:5a:8a:33:a4:7b:14:0f:f1:e4:ae:
         76:b5:e2:48:e9:01:3d:5e:21:2e:8f:62:e6:c4:25:94:7c:ff:
         11:d3:d7:e7:ea:80:3a:21:78:ee:b4:12:57:71:92:78:99:08:
         8a:f1:3a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----