Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144536.roa
File:                     AS144536.roa (raw, json)
Hash identifier:          Y8usMz1ZjpV3xkeVTOKnjALpLYO3EWGXej+nblxO+Ng=
Subject key identifier:   DE:EF:0A:7F:B0:FB:A7:FA:7F:41:06:98:ED:30:9E:F9:45:6C:8D:17
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       12E86358EF7004857BD6C24FA0E5C3BC78065B2D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144536.roa
Signing time:             Mon 25 May 2026 01:20:00 +0000
ROA not before:           Mon 25 May 2026 01:15:00 +0000
ROA not after:            Mon 24 May 2027 01:20:00 +0000
asID:                     144536
IP address blocks:        240a:a75e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e8:63:58:ef:70:04:85:7b:d6:c2:4f:a0:e5:c3:bc:78:06:5b:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:15:00 2026 GMT
            Not After : May 24 01:20:00 2027 GMT
        Subject: CN=DEEF0A7FB0FBA7FA7F410698ED309EF9456C8D17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:83:96:22:0a:a9:f9:d2:96:ce:98:d5:f1:a9:
                    7f:b2:7d:8a:36:d7:8e:d6:f1:d2:f9:71:32:b1:8c:
                    1f:f9:8f:f9:b8:df:25:69:92:47:2f:51:99:a7:cf:
                    a9:dd:2d:c1:7a:6d:75:b5:65:36:30:21:75:10:8e:
                    2e:ef:8a:15:34:01:1a:91:87:3a:a7:c4:8c:00:83:
                    94:62:6c:bc:b7:6d:08:d2:55:7a:12:3c:1e:41:46:
                    30:27:51:ee:17:a6:53:e0:68:17:5e:47:6d:8c:35:
                    a3:5c:2a:67:6a:c5:2e:99:cc:7e:eb:a3:8f:2c:4d:
                    be:0a:68:07:9e:d8:2c:d7:e0:14:ac:71:51:9e:18:
                    82:2e:91:76:66:8e:3b:47:d1:fc:51:be:88:ff:49:
                    ae:e2:eb:9b:bb:62:ac:45:aa:56:59:79:1d:e0:84:
                    61:5a:ad:18:dd:19:6e:2a:c8:21:81:09:d9:d3:d8:
                    c0:57:fe:9c:0b:b9:01:92:ff:14:0a:8f:ca:12:3f:
                    e0:57:8c:55:d4:c5:a2:2a:6c:d1:c0:79:6d:8d:f2:
                    9d:5c:85:97:ed:7a:ee:05:87:e3:ad:6b:6c:05:98:
                    d4:66:b6:aa:6b:57:02:28:fd:a1:0e:5d:0d:7c:43:
                    2a:7b:ef:de:4c:c3:1c:16:1a:b4:fb:f2:29:e7:a7:
                    0d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:EF:0A:7F:B0:FB:A7:FA:7F:41:06:98:ED:30:9E:F9:45:6C:8D:17
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a75e::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:41:cf:19:b0:e5:e7:9f:48:3d:dc:d5:fb:91:86:75:75:4a:
         d8:d6:2b:c5:d9:22:7b:6b:91:31:b4:c3:4a:65:e9:ed:d9:6b:
         b8:d8:80:e6:3d:1a:4c:d9:81:3c:f7:72:83:37:dc:46:b9:6e:
         44:07:3a:74:19:a4:1e:62:5a:c5:88:42:6c:16:4c:18:33:71:
         94:d4:aa:92:aa:7d:e3:c5:f5:ea:d6:f1:7a:e9:e6:df:66:82:
         83:fb:c3:03:ea:1b:1d:7b:2e:60:55:ca:1d:97:34:e1:07:54:
         a0:5c:71:4c:9d:17:4f:f2:a8:84:b3:82:b9:68:e2:d8:f2:b1:
         b0:a1:77:ef:c9:e9:5f:01:b8:05:98:23:bc:5c:ab:71:cf:58:
         5a:6f:d8:35:ef:d2:d2:d9:92:05:f0:f2:3b:b4:ce:ce:2e:0a:
         d4:e0:6b:9a:f7:75:68:2e:ca:26:cf:b2:6c:09:af:d3:8c:3d:
         45:02:88:ce:eb:3a:7d:ee:be:82:96:29:7d:f2:29:6e:df:65:
         35:c7:c9:e0:7f:18:64:78:0c:8a:cf:1e:5b:66:bd:73:0f:8d:
         e8:bf:50:cb:3f:30:fc:7e:f3:ab:55:99:77:3c:65:d4:dc:83:
         e6:fa:71:ea:88:86:8d:cd:f6:88:7f:9f:cd:a7:bc:6e:2e:b2:
         d8:6c:0e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:35 2026 by rpki-client