Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144561.roa
File:                     AS144561.roa (raw, json)
Hash identifier:          DD5ZYuNa/vOzQ/rvWsu8FnaXoqHx64wRlbf5U1Fp/U4=
Subject key identifier:   A0:F6:0D:B6:F7:F9:0B:C9:36:DD:2D:A6:B2:52:DB:81:A5:DC:D4:4B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5B162741E50B3437D91ABC8189DF6D90914AEC4A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144561.roa
Signing time:             Tue 26 May 2026 02:34:50 +0000
ROA not before:           Tue 26 May 2026 02:29:50 +0000
ROA not after:            Tue 25 May 2027 02:34:50 +0000
asID:                     144561
IP address blocks:        240a:a777::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:16:27:41:e5:0b:34:37:d9:1a:bc:81:89:df:6d:90:91:4a:ec:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:29:50 2026 GMT
            Not After : May 25 02:34:50 2027 GMT
        Subject: CN=A0F60DB6F7F90BC936DD2DA6B252DB81A5DCD44B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c8:b7:6c:81:6d:d5:aa:59:ec:5e:54:20:d2:
                    5c:e2:a7:f2:ac:88:35:cc:6e:6c:de:89:ad:ca:88:
                    60:7c:20:cb:fc:54:27:91:f3:21:7f:db:34:8f:cb:
                    50:40:f8:91:08:ce:8f:4e:73:9a:40:ef:9f:66:a3:
                    66:1e:ed:8a:1c:e4:7c:a3:f3:ae:62:36:20:bb:f6:
                    c7:33:7c:52:75:89:1d:ae:64:f7:2f:cf:98:c6:d1:
                    8e:5b:e8:1b:23:1a:57:6d:6b:70:54:3d:bf:f3:4d:
                    d2:47:44:81:51:f6:0d:b6:8f:61:b5:04:c8:97:bf:
                    fc:50:f1:92:a9:ea:00:1c:74:d9:ec:a4:67:60:ac:
                    92:2b:16:8f:8a:0f:2e:ea:82:92:e1:5c:3a:32:94:
                    ce:ce:e8:a5:b6:32:7e:73:5b:2c:f1:05:7e:27:1e:
                    c4:f9:3c:3f:c8:93:8a:8c:e6:72:c4:c7:77:3c:1d:
                    45:64:14:a3:e7:bd:97:ef:c4:9d:a9:33:2a:82:20:
                    e8:b8:e3:0d:36:92:b8:1f:88:39:39:cc:3e:d0:96:
                    bc:c5:73:e4:89:ff:47:33:c4:47:53:f9:36:2f:77:
                    b5:30:7b:c5:a6:0b:11:73:6d:92:90:51:60:67:2a:
                    b2:17:95:07:8a:e0:50:2c:28:43:01:80:be:7b:2f:
                    b6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F6:0D:B6:F7:F9:0B:C9:36:DD:2D:A6:B2:52:DB:81:A5:DC:D4:4B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144561.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a777::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:92:93:07:89:56:14:16:0a:8f:a2:60:9e:63:0e:ce:94:14:
         c3:00:ea:b5:13:2e:bc:3b:9e:d3:80:43:d4:66:d4:22:58:4a:
         56:9c:36:ec:9f:b7:2f:7c:14:d1:50:f3:cf:37:c8:cb:3c:9a:
         cb:79:20:26:a9:6e:82:0f:79:1e:16:f9:fe:64:50:e4:6a:ab:
         ea:84:ea:21:16:1b:2a:70:61:4e:08:a5:13:ac:1d:b3:27:ff:
         1d:3d:2c:19:ff:c0:99:87:7b:14:e8:ac:63:f0:9f:2f:bc:93:
         b6:88:88:12:a9:17:16:d4:5a:08:06:f9:5c:23:6e:29:74:f2:
         4f:6e:ff:0e:78:8d:41:37:f8:c1:31:9c:9d:10:d8:da:b6:b1:
         0c:35:11:f3:f7:5e:4b:fe:ef:1a:33:85:51:e9:48:96:01:97:
         75:00:6a:71:55:e7:bd:36:44:f6:c0:41:75:be:45:1c:a3:8c:
         b8:b5:3d:1b:b2:53:98:f2:ce:8b:02:2d:4f:26:ea:0c:56:97:
         c5:f9:b1:0a:8f:b6:35:3e:a6:10:b1:f2:9a:7e:93:51:21:cc:
         2f:05:4d:3e:d0:52:97:e1:8c:b3:5c:ed:74:18:86:f4:9b:ee:
         d9:7d:dd:a2:f6:77:fa:bd:87:32:23:cd:11:6e:c1:05:75:f1:
         74:1c:bd:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----