Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144577.roa
File:                     AS144577.roa (raw, json)
Hash identifier:          dFu7r/IDmrHYIJV/qvIV1Ak09pXxiwdjZ9x+S8g47Sk=
Subject key identifier:   C8:39:B0:74:CA:59:1E:1E:E6:A8:36:BD:DA:DE:F0:0E:1E:17:1E:DB
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       243F6F4B97D57D9B63324D900BD03D5DA0ED9E61
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144577.roa
Signing time:             Fri 22 May 2026 02:47:27 +0000
ROA not before:           Fri 22 May 2026 02:42:27 +0000
ROA not after:            Fri 21 May 2027 02:47:27 +0000
asID:                     144577
IP address blocks:        240a:a787::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:3f:6f:4b:97:d5:7d:9b:63:32:4d:90:0b:d0:3d:5d:a0:ed:9e:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:42:27 2026 GMT
            Not After : May 21 02:47:27 2027 GMT
        Subject: CN=C839B074CA591E1EE6A836BDDADEF00E1E171EDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5d:95:92:1f:3c:34:cd:c2:b4:4c:b1:69:8a:
                    b3:17:b5:52:84:08:56:fb:e3:1b:47:8f:f4:c7:12:
                    85:e7:d3:ab:30:c1:77:9f:f3:11:9a:12:f0:26:c2:
                    74:19:89:39:99:a8:ad:d2:63:a3:0d:90:c5:9c:d6:
                    82:be:bb:61:b6:aa:2d:8c:a3:28:3a:d1:22:68:5a:
                    47:e6:42:0e:a1:22:f2:37:65:71:b8:c8:de:8f:f2:
                    ce:a5:16:4c:93:8b:f2:60:a7:85:3d:d4:a5:2f:48:
                    56:18:63:65:a5:a1:02:c0:20:c4:f4:b0:02:ee:b6:
                    7d:96:51:c0:98:6b:8b:f2:2a:e5:76:c7:de:81:0c:
                    32:9b:d0:db:88:d2:a3:ad:07:36:65:f6:ed:5e:3b:
                    a6:c2:0a:9c:6f:b4:39:5d:02:e0:3f:95:c9:70:be:
                    11:e0:80:2d:79:21:a2:57:33:a1:20:01:38:14:8f:
                    c7:21:50:b3:c7:8c:73:7d:c2:74:0f:8a:08:25:1e:
                    57:36:69:f0:6a:bf:2a:a3:52:00:5e:33:f1:e0:83:
                    5f:de:99:d3:3b:81:61:96:23:40:84:22:e3:87:ef:
                    ba:f4:06:fd:79:6a:38:d6:58:12:ec:0f:6c:55:f7:
                    80:7c:06:4c:67:70:6a:61:cf:28:52:8b:d7:48:66:
                    03:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:39:B0:74:CA:59:1E:1E:E6:A8:36:BD:DA:DE:F0:0E:1E:17:1E:DB
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144577.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a787::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:71:da:7f:ec:b1:f4:40:8b:a3:e4:4d:4d:0c:f9:eb:68:62:
         bf:ff:d8:d5:c9:5b:74:07:79:56:c2:e8:5c:34:bb:75:a0:00:
         b7:e6:99:55:1d:73:07:fe:03:b2:ce:7b:d8:6e:8c:59:70:35:
         38:14:c5:fc:8a:c1:d1:f6:85:ee:10:1e:65:35:9f:73:21:68:
         49:a8:99:4a:73:54:fc:08:47:ba:e5:5f:c4:de:a9:4f:50:00:
         04:a1:74:38:af:8e:67:0a:3b:ab:03:b0:9d:4f:91:4c:97:f6:
         e8:ed:64:23:b1:bc:a4:d6:31:92:d5:86:bb:7d:39:e0:8e:77:
         b9:df:5e:fd:35:2d:45:12:eb:de:5f:9d:0a:44:05:6b:df:40:
         16:3e:54:4d:50:22:43:ba:8e:18:59:32:09:0c:ac:71:13:67:
         5f:84:94:5f:9a:1f:43:f0:e5:41:cb:6b:8b:37:35:f9:a4:2f:
         76:c3:1c:26:d2:78:b5:62:bb:01:d7:d9:2d:c9:06:72:be:e2:
         b1:f3:07:83:c3:56:9d:b0:66:72:38:2d:ec:59:73:55:18:91:
         d8:f4:17:b3:b0:30:5d:b3:2a:6a:01:7e:a7:5c:c2:fb:1d:f4:
         55:46:17:81:18:14:6e:71:5c:96:64:0e:14:ee:b8:b5:3a:b2:
         5e:2a:0d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:30 2026 by rpki-client