Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144546.roa
File:                     AS144546.roa (raw, json)
Hash identifier:          NRXkYLqCgf6/zgQaaRq7TDrxHBDl8HFV0gasGVRL2DM=
Subject key identifier:   94:58:B4:C7:C1:79:D1:82:2B:1D:55:A6:ED:75:B5:47:0C:36:28:04
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2AF811DE6F432389C330A2B160F17DCF5A0FED08
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144546.roa
Signing time:             Mon 25 May 2026 01:38:06 +0000
ROA not before:           Mon 25 May 2026 01:33:06 +0000
ROA not after:            Mon 24 May 2027 01:38:06 +0000
asID:                     144546
IP address blocks:        240a:a768::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f8:11:de:6f:43:23:89:c3:30:a2:b1:60:f1:7d:cf:5a:0f:ed:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:06 2026 GMT
            Not After : May 24 01:38:06 2027 GMT
        Subject: CN=9458B4C7C179D1822B1D55A6ED75B5470C362804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:92:e4:44:b3:95:e4:11:96:d1:9e:11:49:2e:
                    71:c7:6a:92:8b:b5:3c:3c:82:06:00:1e:e0:c2:68:
                    f1:f3:42:bc:dd:52:a8:ab:e1:db:9d:16:de:5c:b4:
                    9e:8d:af:28:bd:52:09:7f:7b:7a:e4:a6:32:64:34:
                    7a:a6:26:a5:51:8b:7a:e4:38:21:fd:d4:89:21:55:
                    06:48:8c:f6:ed:7e:be:10:91:09:f2:22:ac:0c:45:
                    0e:43:2b:64:8d:3d:c4:64:eb:11:e4:4d:c3:d8:f7:
                    38:28:b8:6b:17:17:f5:bf:8a:8a:da:d7:5f:de:d1:
                    8b:9e:d6:12:fc:29:d5:50:7e:59:96:76:e3:4f:b5:
                    93:d8:88:7a:ae:22:4a:bb:c4:62:44:cd:24:db:e6:
                    e3:b0:67:96:02:09:9f:bf:a4:22:43:51:88:9b:7d:
                    2a:cc:0f:5e:df:06:25:a3:03:60:bc:a3:e8:b7:9c:
                    7b:08:0d:d3:76:5a:2c:50:fd:05:20:68:31:f5:2c:
                    61:0b:ca:24:78:cb:b9:59:30:f6:24:9e:eb:47:c4:
                    57:f7:b3:08:b0:1b:18:f8:ff:ad:c7:99:4d:65:06:
                    c4:b9:23:87:f4:79:a9:a8:e9:4f:6a:c9:fb:80:e3:
                    0b:bf:bb:b3:1c:d4:81:21:0c:62:9e:66:9a:4d:33:
                    01:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:58:B4:C7:C1:79:D1:82:2B:1D:55:A6:ED:75:B5:47:0C:36:28:04
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144546.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a768::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:7c:ca:af:11:b9:5b:c3:2f:11:f2:c8:33:12:d8:49:ab:2d:
         46:de:a9:4f:5a:4a:11:88:42:e2:b3:4e:a0:1b:75:f4:ab:f5:
         9a:42:71:7a:a6:92:4a:81:3f:fd:90:0d:e3:65:5d:69:05:cb:
         47:5c:82:21:b7:2d:07:6a:d9:32:df:64:c8:8b:d4:d3:1d:21:
         33:ed:8d:88:59:56:d3:8f:45:7d:3b:ab:5b:90:e7:96:92:75:
         f9:30:da:b1:bd:73:f3:e3:1f:c0:15:2c:45:6b:8c:a6:9f:38:
         34:0b:6f:c9:ea:93:06:b9:0e:e1:02:16:8e:f8:f9:7a:fb:5f:
         ae:c7:b5:ea:5d:2b:ba:1f:49:56:29:7e:a7:ff:af:06:db:fd:
         36:ae:30:0a:d0:c0:18:bd:b6:4a:4f:2a:e6:5d:cd:9d:a7:8a:
         7d:ee:a9:7a:a1:33:04:a8:47:ef:f8:d5:fd:17:95:71:ea:45:
         68:31:bf:69:ae:59:70:15:e4:c0:24:e3:cf:57:b4:77:a8:b9:
         d8:cf:5c:1b:fb:ae:34:91:b1:a3:3f:0b:6e:72:a4:97:30:57:
         20:ac:d0:54:e4:39:ec:72:92:d9:83:4e:40:01:1f:b9:78:7b:
         c5:57:e5:9d:05:e9:e1:93:9c:73:3d:12:1f:1f:c8:68:12:88:
         74:26:7a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:33 2026 by rpki-client