Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144617.roa
File:                     AS144617.roa (raw, json)
Hash identifier:          wM0dWXjYDCrBy3Ux1nT/NGT2we2hVmNbd71yZ/+9NCA=
Subject key identifier:   81:5D:AF:69:C7:CF:B7:0B:17:2D:EA:8A:D0:20:55:E4:82:86:51:FB
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7E9760F7D5E028BCA54E0BC92A0CBBACC65E6F1C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144617.roa
Signing time:             Fri 22 May 2026 06:28:08 +0000
ROA not before:           Fri 22 May 2026 06:23:08 +0000
ROA not after:            Fri 21 May 2027 06:28:08 +0000
asID:                     144617
IP address blocks:        240a:a7af::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:97:60:f7:d5:e0:28:bc:a5:4e:0b:c9:2a:0c:bb:ac:c6:5e:6f:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:23:08 2026 GMT
            Not After : May 21 06:28:08 2027 GMT
        Subject: CN=815DAF69C7CFB70B172DEA8AD02055E4828651FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bb:67:b2:d7:a3:31:e2:66:c1:c3:51:c1:77:
                    6e:98:3d:c7:3d:58:38:02:91:91:7d:2e:f1:2b:83:
                    da:9c:78:bd:4b:76:a7:b8:07:71:99:c6:34:95:a4:
                    97:b2:a8:96:81:59:e1:2f:cf:9f:89:94:46:e8:4e:
                    6b:25:a2:68:74:69:a2:23:df:ef:9d:33:08:d6:b8:
                    9f:33:4d:4c:b9:1d:e8:74:0d:72:d9:66:35:98:38:
                    d7:ca:fc:cb:2c:c7:7e:b5:1c:d3:cc:ea:8c:14:6f:
                    cb:57:18:bf:0e:1f:9f:db:3a:02:f8:da:e9:89:68:
                    ee:52:f7:cd:60:4e:34:f6:78:40:06:92:aa:bc:aa:
                    b8:a9:56:25:0d:1b:5a:e8:39:88:19:23:2f:bf:a2:
                    54:e5:a3:09:ea:ba:54:de:56:e1:3d:24:b2:05:5d:
                    7e:ee:84:cd:a7:c3:05:2d:d0:9c:e6:58:ed:e3:b3:
                    30:dd:94:0c:d3:c0:35:e7:34:d8:99:8b:15:2b:5c:
                    b0:af:60:20:16:3d:59:96:12:72:1f:64:cc:da:94:
                    65:3d:1e:2b:86:b2:89:a2:7a:e8:d3:17:36:c6:6f:
                    40:96:63:d0:6e:87:90:6b:1d:bb:63:0a:12:d2:ec:
                    c3:fd:62:9c:ba:fd:db:5f:d3:e7:a1:b9:2d:6c:63:
                    7b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5D:AF:69:C7:CF:B7:0B:17:2D:EA:8A:D0:20:55:E4:82:86:51:FB
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144617.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a7af::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:c2:02:d1:35:e9:6a:05:2d:db:e6:d8:6b:9a:f9:4e:6e:7a:
         28:dc:d7:9a:fd:c0:8b:bc:8f:bf:e1:7c:c2:ff:a8:3d:7a:5e:
         17:8c:48:81:be:13:01:ba:21:1d:fd:e8:0d:f6:3b:1b:e0:fc:
         39:f3:d0:dd:1b:17:a1:14:87:8d:63:18:c6:23:4c:06:c8:11:
         74:1e:2e:ea:ec:aa:be:db:4f:03:0a:13:7e:4b:a3:b4:83:db:
         12:77:b2:bf:57:2c:5c:b5:6c:60:8c:8e:6d:ef:a0:2f:dc:03:
         30:56:55:9b:3b:08:dc:7b:e6:17:99:25:98:8a:d9:96:4d:bd:
         45:ac:d7:1f:5e:62:f5:37:3b:31:a4:55:22:dd:1e:95:7b:14:
         14:c8:5d:2b:93:2e:f4:48:15:d7:28:2d:20:6f:6f:b9:59:96:
         31:34:c3:74:5f:08:54:48:ab:20:a4:82:65:6e:37:4f:1c:f6:
         b3:c2:89:08:07:e5:cc:8b:6f:0d:b8:4f:b2:9a:38:aa:a5:21:
         25:c7:e9:fc:a9:66:50:5e:2e:af:2a:5e:ef:03:8f:5e:a9:05:
         c4:62:76:79:18:df:1b:02:0b:55:7a:41:1e:56:e0:97:e3:92:
         c9:54:55:fe:1d:d8:39:7c:2b:71:e3:c7:17:98:1d:35:86:39:
         85:ad:0f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:26 2026 by rpki-client