Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144612.roa
File:                     AS144612.roa (raw, json)
Hash identifier:          LPTG+0nD3ZoX3WigynRfCDaKW54c0c+fh3F/vv/fEUU=
Subject key identifier:   FE:0E:53:F9:07:93:29:61:69:B6:06:25:8C:CF:C6:E8:A1:49:24:61
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4491B5AFC67EB1E4518C825C8E7A41E27BF172A2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144612.roa
Signing time:             Mon 25 May 2026 01:51:33 +0000
ROA not before:           Mon 25 May 2026 01:46:33 +0000
ROA not after:            Mon 24 May 2027 01:51:33 +0000
asID:                     144612
IP address blocks:        240a:a7aa::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:91:b5:af:c6:7e:b1:e4:51:8c:82:5c:8e:7a:41:e2:7b:f1:72:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:33 2026 GMT
            Not After : May 24 01:51:33 2027 GMT
        Subject: CN=FE0E53F90793296169B606258CCFC6E8A1492461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:87:31:09:e1:86:57:59:10:e3:7c:48:64:5f:
                    0b:1d:7c:a7:61:98:b3:72:61:08:ce:bc:52:12:6a:
                    bb:4a:5c:ca:77:2e:80:75:34:b9:16:d7:e9:13:e0:
                    01:46:06:fa:b4:87:c0:7e:58:9b:53:88:e2:7a:35:
                    19:4c:57:0b:1f:c2:25:17:9e:57:94:67:55:8d:6e:
                    98:f4:5c:77:29:bb:d8:7a:8b:5d:2b:a0:60:73:1c:
                    f3:e2:50:cc:fe:fc:b2:1c:66:87:2c:64:61:67:ff:
                    90:69:be:01:a8:4b:0e:0d:b9:b2:62:84:b3:22:39:
                    89:0a:07:68:b6:cf:06:30:59:93:02:22:8e:78:3a:
                    bc:36:7a:9c:17:ab:1b:be:97:b6:74:24:a1:32:da:
                    26:1d:09:20:ae:3c:f7:f6:55:44:a5:f2:3c:e3:7f:
                    69:fd:e5:4d:74:7b:62:49:aa:e9:91:53:68:2a:d8:
                    f3:2c:f4:cf:c2:ab:15:ad:ee:a4:ac:be:62:03:36:
                    cb:5f:17:b3:2c:62:18:2f:3b:1b:d2:d9:4e:18:3f:
                    e7:7a:74:e2:3f:0e:e3:9a:a6:47:c0:3f:37:ef:3f:
                    21:63:56:ae:bd:77:da:84:96:57:61:84:f7:37:c1:
                    cd:12:8a:2d:ad:11:4d:5b:ec:e8:4d:53:8b:3b:d6:
                    55:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:0E:53:F9:07:93:29:61:69:B6:06:25:8C:CF:C6:E8:A1:49:24:61
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144612.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a7aa::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:46:09:bc:0d:8c:f8:ad:42:90:dc:d3:8a:95:b6:aa:5f:a0:
         9e:1c:bc:73:19:6d:66:3e:91:a0:8a:72:bc:9a:55:14:2f:12:
         d3:87:09:c6:e9:f0:1c:54:18:fb:49:e7:97:aa:1b:69:76:31:
         9f:41:e9:04:1d:fc:2f:d1:b5:e1:51:fd:15:dc:3c:23:c6:1c:
         8c:03:8d:ab:83:69:8b:51:4e:37:cc:91:6f:89:9b:ec:f0:69:
         e2:87:5a:a4:1c:a4:33:33:73:4e:23:a5:42:55:fa:98:be:af:
         dd:e4:67:a8:1a:19:1d:6d:a9:bf:d3:f3:b3:dd:09:69:c0:6e:
         02:03:cb:44:d8:af:19:ce:90:50:61:e6:da:45:22:50:c7:4a:
         b1:2b:ea:e8:5e:c2:00:e1:52:21:06:98:1d:bd:fb:4c:72:9f:
         66:77:fe:47:f0:88:e7:e3:b9:45:3c:e7:64:2b:02:e4:7c:5b:
         0e:8b:e3:1c:8f:97:74:67:6b:68:19:99:0a:71:9b:18:cb:c3:
         a5:e6:d5:32:64:66:b6:02:8f:bc:9c:54:ab:89:05:35:7b:e5:
         55:e8:41:a0:ba:23:86:0e:b5:19:97:19:fd:a2:43:36:df:98:
         01:48:61:3d:d0:43:1c:39:04:6a:8a:e6:18:a0:b1:5c:ae:9f:
         fb:a2:19:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:36 2026 by rpki-client