Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144583.roa
File:                     AS144583.roa (raw, json)
Hash identifier:          /34J0cBN8dvDk/Vq/TGCVIXwmU5TVa8ligJKgJpxkSw=
Subject key identifier:   D3:96:11:59:C2:8D:BB:94:16:B9:FC:EE:7B:38:33:8F:64:65:82:6F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5153DB15E119C395FB4F41F67D591628DB34CD2E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144583.roa
Signing time:             Tue 26 May 2026 01:13:18 +0000
ROA not before:           Tue 26 May 2026 01:08:18 +0000
ROA not after:            Tue 25 May 2027 01:13:18 +0000
asID:                     144583
IP address blocks:        240a:a78d::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:53:db:15:e1:19:c3:95:fb:4f:41:f6:7d:59:16:28:db:34:cd:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:08:18 2026 GMT
            Not After : May 25 01:13:18 2027 GMT
        Subject: CN=D3961159C28DBB9416B9FCEE7B38338F6465826F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:11:b2:80:12:5e:cd:0b:1e:7b:82:7a:89:52:
                    84:d5:88:5d:98:a8:19:2c:2f:4e:d0:ef:55:cb:a0:
                    ad:12:dd:b0:09:22:ed:25:16:a1:4a:22:93:84:bd:
                    b2:92:04:5f:1f:0e:da:84:6f:54:e5:9c:f1:e8:bf:
                    1d:bf:7d:44:97:79:df:f1:9b:37:ac:de:c7:e7:5e:
                    cb:c1:88:eb:2e:d0:dd:04:77:da:54:45:db:86:02:
                    6b:c5:63:85:7d:bc:cc:18:1f:4f:89:47:26:f3:54:
                    c5:75:c4:57:45:0c:94:d4:60:2d:36:10:a2:76:45:
                    2d:a1:a7:db:a7:d3:56:ff:4c:9f:f1:49:c8:c5:5f:
                    f8:d0:81:22:db:a7:a9:c7:9e:67:ef:e8:b3:0d:3b:
                    a8:85:84:a3:14:47:7b:84:07:81:b0:31:64:9b:41:
                    08:4b:53:35:9d:18:3e:70:94:e8:ef:8a:0e:db:a7:
                    a2:e6:e5:42:2f:96:3e:b4:63:58:10:ac:2b:7a:9e:
                    98:19:7f:18:fb:6c:1e:3a:19:f3:74:a7:04:f1:c0:
                    c5:f0:8e:e4:e6:12:d0:ec:8d:44:83:33:c9:7d:c2:
                    ee:19:4b:0a:bb:86:b4:92:93:e0:1b:ac:c3:67:9f:
                    20:d8:0f:8e:d5:9f:ed:a4:15:99:54:f7:6b:37:9c:
                    3b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:96:11:59:C2:8D:BB:94:16:B9:FC:EE:7B:38:33:8F:64:65:82:6F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144583.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a78d::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:e3:fd:a8:a6:40:02:80:5f:fa:2d:3c:fa:c2:f4:c4:3b:70:
         b0:6d:b7:c1:87:19:78:8a:86:73:7a:33:84:be:1c:c1:e0:37:
         83:66:ef:27:bd:78:09:ea:f2:ea:12:db:44:53:23:8b:f8:73:
         6d:b7:a4:a8:ec:bf:4b:2f:43:68:cb:f9:63:97:28:eb:a6:85:
         d2:8a:95:68:3c:9c:9c:93:6b:d8:ea:4d:4f:b9:61:b0:5f:11:
         10:44:27:32:c1:e2:50:f7:64:6f:ac:3f:cf:f6:42:97:4d:47:
         67:34:e2:1f:44:4f:d2:33:d1:bd:ed:e5:ef:6d:b3:d1:bd:3c:
         0f:21:30:fc:82:5c:14:7f:1a:1c:8c:c8:be:63:65:6b:7e:a9:
         8c:09:f3:c4:be:aa:7c:41:d2:2a:22:58:43:a9:4d:d8:57:bf:
         8a:25:a1:09:4d:fd:e9:53:d3:9a:53:63:f0:d8:78:ea:1d:b4:
         b5:b3:a6:30:c8:ac:61:24:4e:94:5f:d9:74:a7:93:eb:e9:ce:
         df:f8:d5:80:3d:a8:d6:00:6a:54:a5:0d:1c:e1:77:fa:2b:f7:
         28:60:6e:3f:a8:56:eb:ad:5b:57:e8:0b:4c:98:5e:7e:89:b1:
         14:bc:25:8e:a7:d3:ec:4c:ff:fd:5a:30:26:a3:b5:df:23:d4:
         b4:12:a1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----