Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144530.roa
File:                     AS144530.roa (raw, json)
Hash identifier:          NQhaaBN3jdBu7gSIdr2O8LO34Wkv36tGGQpDxv/WUFw=
Subject key identifier:   39:F1:61:9F:A7:9F:13:92:59:28:52:07:9E:09:5A:CA:6B:DF:57:29
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       108790CF3606A990E3B92643E89FCAD702E5C4AF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144530.roa
Signing time:             Mon 25 May 2026 01:51:24 +0000
ROA not before:           Mon 25 May 2026 01:46:24 +0000
ROA not after:            Mon 24 May 2027 01:51:24 +0000
asID:                     144530
IP address blocks:        240a:a758::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:87:90:cf:36:06:a9:90:e3:b9:26:43:e8:9f:ca:d7:02:e5:c4:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:24 2026 GMT
            Not After : May 24 01:51:24 2027 GMT
        Subject: CN=39F1619FA79F1392592852079E095ACA6BDF5729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:04:34:c9:17:9c:54:91:9e:26:7b:14:d8:4d:
                    0a:bc:b3:81:ec:93:fe:9e:bc:c5:a4:45:69:a3:60:
                    7c:bb:3a:63:14:a9:cc:a5:76:c9:cc:e8:59:11:b4:
                    0c:d4:77:d6:ee:7b:a4:95:e4:ec:1f:11:b4:ac:2a:
                    0b:f9:52:05:dc:f5:5c:74:ac:27:e4:af:2f:88:8a:
                    30:b6:91:d8:66:c9:a9:92:78:15:87:ee:46:14:fa:
                    2c:8b:41:fb:b2:43:f3:98:9b:b4:3a:22:fb:5e:5d:
                    3d:44:c9:29:dc:2b:4e:3b:83:1b:33:c5:48:ca:ee:
                    41:ed:ce:fe:ae:3e:97:f1:7d:9b:b5:1f:1e:ae:b2:
                    92:a9:81:1b:b7:49:68:a3:ac:bc:68:a6:ba:52:ba:
                    78:2b:1c:88:8c:4b:22:90:2f:96:a9:c4:45:4c:54:
                    52:0e:e3:e4:04:1d:5f:83:4f:f3:67:8f:2c:db:c1:
                    6f:af:2a:f3:93:64:3e:3e:c1:ff:88:c6:eb:92:ba:
                    63:c0:df:fa:7a:67:e1:9f:38:8a:51:77:33:a4:ea:
                    27:f3:1c:4e:48:e9:cb:e8:ee:aa:08:20:20:c9:19:
                    74:e8:a3:c4:67:e1:53:4c:a0:24:02:ec:4a:4c:23:
                    d2:1d:80:05:d2:a9:87:dc:b8:0d:ac:0a:a0:b1:f1:
                    51:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F1:61:9F:A7:9F:13:92:59:28:52:07:9E:09:5A:CA:6B:DF:57:29
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a758::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:be:de:bb:c4:10:bc:bf:76:96:2e:51:77:55:3d:c8:25:50:
         e5:c0:62:c9:37:83:8a:33:d8:63:76:57:2d:87:50:67:e5:65:
         b4:49:46:a0:4a:67:06:1e:dc:ea:03:13:32:60:d0:71:23:08:
         00:c6:11:fe:5b:ae:45:64:24:0a:47:b5:6a:32:92:c4:56:00:
         bf:a8:ef:89:fc:f8:f6:fa:10:23:ab:df:a9:33:9d:ec:6a:33:
         d0:45:7f:42:af:b3:80:f8:3c:81:34:3e:3b:76:45:e2:f8:63:
         23:35:d1:f4:c6:a3:42:eb:ce:b8:56:5d:53:4b:fe:7b:90:7b:
         08:df:37:0b:e6:a8:c7:29:a3:00:2d:c1:9f:01:7a:54:7a:ad:
         32:42:6d:e3:12:55:71:86:15:5f:c0:c1:a9:4c:5e:e2:f6:5b:
         23:a9:be:ff:8d:46:ac:a9:ff:0a:26:72:f8:fd:5a:c8:43:81:
         26:5c:f6:67:f6:ba:26:fa:96:e7:5a:92:66:e9:d1:de:88:12:
         13:77:b8:be:73:15:c1:d6:8b:d8:00:66:95:e2:01:57:6d:d9:
         a9:a2:36:3a:c7:d9:ca:20:01:73:7c:eb:a0:10:b7:9c:dc:f8:
         bd:67:d6:63:28:c3:82:00:d4:2f:a7:dc:8d:75:e6:ec:ac:1a:
         cd:5c:1d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----