Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144555.roa
File:                     AS144555.roa (raw, json)
Hash identifier:          w7Bt4rji/qjdUUeQlN2vkUVcmJpJcbY50CJE+BA6r7c=
Subject key identifier:   72:86:44:EF:B7:E0:D8:BA:68:0A:FC:9F:B0:23:E5:DE:84:A5:40:3C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       291E384E2CB250534B1A60C7948D55D816C950EB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144555.roa
Signing time:             Fri 22 May 2026 07:32:35 +0000
ROA not before:           Fri 22 May 2026 07:27:35 +0000
ROA not after:            Fri 21 May 2027 07:32:35 +0000
asID:                     144555
IP address blocks:        240a:a771::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:1e:38:4e:2c:b2:50:53:4b:1a:60:c7:94:8d:55:d8:16:c9:50:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:35 2026 GMT
            Not After : May 21 07:32:35 2027 GMT
        Subject: CN=728644EFB7E0D8BA680AFC9FB023E5DE84A5403C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d1:1c:08:2e:84:9e:3f:eb:73:2e:19:15:4f:
                    77:bf:f4:1d:67:13:73:85:92:be:b0:37:17:25:00:
                    5b:87:66:49:8d:39:82:b7:dd:bc:81:aa:09:b9:ad:
                    98:19:46:b5:b0:34:03:30:16:9d:d6:7c:0f:36:61:
                    16:8e:ac:89:7c:6b:b0:cc:e4:ac:f4:70:95:11:4f:
                    44:69:72:2e:12:26:42:af:58:1a:2a:89:d3:49:bb:
                    85:09:5e:dc:74:ab:93:ce:50:61:bf:6a:61:1c:ee:
                    9b:f6:ce:15:1a:12:3d:12:cb:97:74:9a:a8:dc:34:
                    66:1f:14:8d:25:10:5e:86:e3:ed:66:42:84:2c:e3:
                    aa:f0:e4:a2:be:b4:2e:8c:db:8a:1e:17:a9:bd:d1:
                    19:8d:2c:3f:e3:f3:98:f6:d1:fe:50:34:10:6c:0b:
                    13:04:6a:6a:7e:ae:4d:ba:ce:45:6a:2c:86:74:c5:
                    78:20:03:ae:30:6e:af:c1:80:56:ed:97:ec:35:4f:
                    ae:82:94:19:c1:44:7f:88:72:4f:fa:11:dc:54:d3:
                    f6:9c:ff:76:13:3f:49:b9:b4:b4:e6:1e:06:49:7b:
                    88:9b:be:c5:87:9a:8c:b7:15:2e:00:c6:71:10:0f:
                    00:cd:25:7c:cc:ea:6a:c5:83:e6:48:67:6d:d2:d8:
                    13:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:86:44:EF:B7:E0:D8:BA:68:0A:FC:9F:B0:23:E5:DE:84:A5:40:3C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144555.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a771::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:4d:28:32:10:2d:d1:72:a6:50:34:64:0d:24:ed:8a:7a:d4:
         af:a9:d7:e1:bf:3f:00:8b:5e:d0:2b:04:d5:fd:47:2f:14:ed:
         d4:0d:37:2a:8c:b5:8a:5c:cb:24:5f:51:1c:f6:83:85:e0:8c:
         7d:5d:00:38:7f:9e:af:22:1c:7b:a8:0e:12:43:c4:7e:d7:0f:
         67:16:19:68:4f:82:4e:ca:ef:db:fd:31:a6:c2:87:03:c2:28:
         f4:0d:5f:da:e3:c5:67:70:22:2a:ae:11:d3:9c:f8:7e:04:c4:
         d6:0e:53:0f:b0:d8:c3:45:62:ee:69:2f:26:56:2d:6d:fc:a5:
         36:99:d8:97:f4:29:0c:34:bc:87:8d:c6:d1:1e:87:cb:73:26:
         f9:39:fb:e7:9e:92:f1:d5:86:68:2e:eb:14:38:c9:71:85:2d:
         fc:91:c2:a2:c6:8d:4d:4f:30:21:bd:79:32:f1:86:af:6e:76:
         6c:f7:5c:5c:2e:68:b4:91:2c:18:bf:58:26:93:1e:0d:d4:5d:
         97:36:09:ad:94:87:33:4f:34:a4:68:30:52:31:f7:bc:4e:1b:
         64:b1:04:94:1d:80:3c:25:0a:86:aa:be:88:b8:f9:db:43:81:
         63:9b:54:58:66:cf:0c:e2:7e:55:8e:51:db:e0:7d:f2:f5:fb:
         6e:54:7d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----