Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144607.roa
File:                     AS144607.roa (raw, json)
Hash identifier:          6FQ55ocE07FqM68G1/WE6xuzKDQpGrFnTHAcGaJ7b0M=
Subject key identifier:   4C:80:78:7A:DB:20:72:3F:21:F5:B8:2D:F3:5B:F1:A5:D4:31:46:0C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       37FE563ADB134D17840C8A3DC0F6E65B182F9F36
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144607.roa
Signing time:             Tue 26 May 2026 02:35:05 +0000
ROA not before:           Tue 26 May 2026 02:30:05 +0000
ROA not after:            Tue 25 May 2027 02:35:05 +0000
asID:                     144607
IP address blocks:        240a:a7a5::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:fe:56:3a:db:13:4d:17:84:0c:8a:3d:c0:f6:e6:5b:18:2f:9f:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:30:05 2026 GMT
            Not After : May 25 02:35:05 2027 GMT
        Subject: CN=4C80787ADB20723F21F5B82DF35BF1A5D431460C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b6:21:35:a4:e6:1a:c0:a0:3b:ca:ce:c0:f8:
                    5d:1c:1e:62:76:1b:8a:72:86:65:c0:79:a8:c8:58:
                    61:fb:f9:99:45:b7:39:00:7a:c2:b6:ef:db:12:56:
                    40:93:5f:45:b5:e2:0e:c2:7b:0c:ee:d6:df:4f:b8:
                    ca:3c:3f:7d:77:4b:5a:5f:40:c7:38:8c:55:a4:f0:
                    da:a1:e6:cf:1c:3a:05:c8:e1:da:5d:87:53:18:2a:
                    32:fd:e6:d8:f9:e3:10:02:68:3f:73:6c:bd:92:79:
                    5c:74:42:08:de:1c:b1:4e:ef:ae:7c:85:d0:fd:ca:
                    7c:82:94:d7:c0:1e:56:22:2e:0b:e9:3f:5b:00:56:
                    da:84:28:af:5d:b5:82:84:84:52:09:01:02:19:57:
                    2b:db:a9:28:6b:36:a5:66:7f:bb:40:69:7f:f0:3a:
                    01:63:af:8f:27:e6:5d:11:90:5b:72:52:b0:5c:7d:
                    2f:7e:af:0a:fc:f5:dc:bf:26:2f:ce:95:1b:a6:c2:
                    f2:db:1e:f4:fb:2b:f8:17:c5:83:b1:95:2e:6c:f1:
                    cb:e1:20:91:c9:df:71:90:93:04:f2:5e:cf:8c:58:
                    5b:03:e0:18:59:fa:5a:6d:ec:02:db:ac:25:2c:98:
                    47:f3:95:5c:cf:27:d1:95:bb:9c:af:1d:78:70:ef:
                    65:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:80:78:7A:DB:20:72:3F:21:F5:B8:2D:F3:5B:F1:A5:D4:31:46:0C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144607.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a7a5::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:cc:bf:b2:d2:c6:5b:28:eb:25:27:9a:92:51:39:3e:1b:39:
         4d:3d:39:60:c8:66:5c:2b:40:4c:eb:d0:85:97:74:47:44:b0:
         7d:ff:ea:5e:6f:70:22:05:c9:19:35:d2:66:fe:1b:8e:49:8d:
         26:47:59:c7:16:2c:b3:02:c1:ca:42:c3:27:a1:b1:36:75:9a:
         e4:b6:c3:dc:84:61:7e:e7:25:62:6f:35:47:f0:c1:46:d0:4c:
         78:59:b3:76:5f:50:f7:5e:af:77:cc:a6:96:56:93:4e:38:d8:
         8f:89:17:4e:e3:09:a0:43:52:c3:6a:f7:0b:c9:dc:1c:31:9e:
         e7:18:3b:a7:4e:7b:1d:43:f0:ee:69:48:4b:d1:82:19:76:a3:
         b3:e8:a4:da:62:9f:32:73:7c:c5:b8:4b:0c:14:93:ef:d4:fe:
         df:47:33:13:69:b8:d3:8b:ac:96:9b:b3:0c:36:36:42:ea:af:
         c3:18:c0:80:35:01:e9:fd:09:70:4c:c1:ef:03:dd:c8:b7:25:
         f4:ac:c9:5d:1a:26:94:22:40:c7:f5:55:36:b2:77:98:96:0c:
         aa:3b:5d:7f:79:7b:2f:21:11:9e:89:1b:fa:75:b1:9d:83:e9:
         29:6e:e8:2b:b0:60:0f:63:d4:4a:5c:a7:b7:34:47:db:9b:44:
         4d:03:31:ea
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUN/5WOtsTTReEDIo9wPbmWxgvnzYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMjMwMDVaFw0yNzA1MjUwMjM1MDVaMDMxMTAvBgNV
BAMTKDRDODA3ODdBREIyMDcyM0YyMUY1QjgyREYzNUJGMUE1RDQzMTQ2MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCtiE1pOYawKA7ys7A+F0cHmJ2
G4pyhmXAeajIWGH7+ZlFtzkAesK279sSVkCTX0W14g7Cewzu1t9PuMo8P313S1pf
QMc4jFWk8Nqh5s8cOgXI4dpdh1MYKjL95tj54xACaD9zbL2SeVx0QgjeHLFO7658
hdD9ynyClNfAHlYiLgvpP1sAVtqEKK9dtYKEhFIJAQIZVyvbqShrNqVmf7tAaX/w
OgFjr48n5l0RkFtyUrBcfS9+rwr89dy/Ji/OlRumwvLbHvT7K/gXxYOxlS5s8cvh
IJHJ33GQkwTyXs+MWFsD4BhZ+lpt7ALbrCUsmEfzlVzPJ9GVu5yvHXhw72V9AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUTIB4etsgcj8h9bgt81vxpdQxRgwwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NjA3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqnpTANBgkqhkiG9w0BAQsFAAOCAQEABMy/
stLGWyjrJSeaklE5Phs5TT05YMhmXCtATOvQhZd0R0Swff/qXm9wIgXJGTXSZv4b
jkmNJkdZxxYsswLBykLDJ6GxNnWa5LbD3IRhfuclYm81R/DBRtBMeFmzdl9Q916v
d8ymllaTTjjYj4kXTuMJoENSw2r3C8ncHDGe5xg7p057HUPw7mlIS9GCGXajs+ik
2mKfMnN8xbhLDBST79T+30czE2m404uslpuzDDY2QuqvwxjAgDUB6f0JcEzB7wPd
yLcl9KzJXRomlCJAx/VVNrJ3mJYMqjtdf3l7LyERnokb+nWxnYPpKW7oK7BgD2PU
SlyntzRH25tETQMx6g==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:34 2026 by rpki-client