Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144547.roa
File:                     AS144547.roa (raw, json)
Hash identifier:          ZBnrW0WIs7H7XQKqQcgnTqdfJ7Cuwn3LDDuB2l54gLo=
Subject key identifier:   86:8F:E1:E2:22:48:4B:02:65:13:AC:1A:2F:D6:89:2B:52:8C:88:8A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       24B65DBB187E8CDFEA7814A23609386706C0CDE6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144547.roa
Signing time:             Fri 22 May 2026 06:27:39 +0000
ROA not before:           Fri 22 May 2026 06:22:39 +0000
ROA not after:            Fri 21 May 2027 06:27:39 +0000
asID:                     144547
IP address blocks:        240a:a769::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:b6:5d:bb:18:7e:8c:df:ea:78:14:a2:36:09:38:67:06:c0:cd:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:22:39 2026 GMT
            Not After : May 21 06:27:39 2027 GMT
        Subject: CN=868FE1E222484B026513AC1A2FD6892B528C888A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ae:7b:76:8e:29:a1:ca:82:dc:18:30:08:2d:
                    dd:8d:98:5e:cc:03:49:41:f1:28:22:c5:e5:c1:69:
                    85:54:26:51:d3:e5:bb:f3:fc:ce:1e:fd:80:fb:33:
                    11:48:bc:04:68:c6:7c:eb:66:48:1e:35:80:73:fb:
                    d8:5a:94:39:f7:a3:63:1b:31:5a:4f:18:9c:f5:ee:
                    fb:7d:89:c1:02:6a:52:9d:01:b5:cc:54:47:c6:f8:
                    06:e9:7c:db:09:c1:74:72:2b:b0:47:af:b1:45:ad:
                    f6:59:a7:88:d9:2e:5d:74:6f:2c:88:0b:f4:8c:7f:
                    12:e4:89:81:52:5f:69:12:b1:3a:d0:fa:68:44:11:
                    09:ad:e4:5c:f5:b7:e3:0c:c8:65:30:9d:a2:70:53:
                    df:42:e4:6b:7e:c7:a6:f1:91:95:6d:36:5a:5d:74:
                    08:b5:ae:a7:7d:c2:c0:f2:d1:f2:86:af:ba:95:23:
                    df:90:a3:e8:a2:7b:aa:71:aa:fd:c4:30:8c:b8:43:
                    e9:4a:70:c8:e3:bd:4d:b4:de:24:a1:1a:8d:b6:a0:
                    2e:ce:98:e9:57:83:04:69:ee:fb:22:5a:7f:99:56:
                    b8:73:46:ba:4f:b8:47:c6:f4:f2:13:f6:58:81:1d:
                    71:ea:f8:db:34:b2:76:51:d6:14:48:71:29:e7:1a:
                    ca:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8F:E1:E2:22:48:4B:02:65:13:AC:1A:2F:D6:89:2B:52:8C:88:8A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144547.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a769::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:90:16:5b:23:aa:3b:ca:38:14:c2:a4:89:3c:bc:db:0f:0f:
         e4:b8:84:e0:4b:f6:b7:69:65:7a:93:53:ef:24:c5:ff:ef:0e:
         2f:80:80:39:9d:a6:3b:5c:d7:ed:58:21:05:e5:20:ee:d4:46:
         ec:79:0e:ea:a3:f5:19:8e:c2:ed:8a:ca:af:b0:5a:36:a4:bd:
         1a:22:8f:b2:64:81:68:bc:25:0a:d7:99:90:e1:61:7c:61:ab:
         e3:03:1c:1a:e4:7d:ac:9b:d0:14:9f:c9:62:77:3b:49:24:91:
         1f:67:7f:af:2a:53:2b:d5:e0:30:0b:f2:4c:9f:b7:dd:f2:0f:
         98:38:6b:16:4e:dd:5c:c3:9a:58:3b:61:2c:ff:dd:45:8b:6e:
         56:51:f7:7a:32:dd:b5:78:02:94:80:8b:9c:b3:a5:f5:61:b0:
         8c:ad:4c:3f:3e:a9:99:26:de:e5:c7:64:67:8f:c1:f7:71:f9:
         c1:02:0d:8e:3d:9a:81:9b:a3:4c:5f:d1:25:90:64:30:6b:56:
         43:92:1f:37:25:38:b2:3d:7c:9b:fa:93:66:42:20:31:61:f5:
         9a:5f:f7:fe:19:df:72:45:30:19:31:1b:7f:4a:a7:13:7f:dc:
         ba:72:5f:88:f2:88:3e:45:44:40:79:f2:ea:b8:05:9e:76:b3:
         3f:4d:d1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:55 2026 by rpki-client