Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144637.roa
File:                     AS144637.roa (raw, json)
Hash identifier:          tcRiUEeI8grN4VdtiexcGJmlaHYLDPbscicHlYdZ38A=
Subject key identifier:   DD:E5:60:06:26:44:7C:26:62:C3:DE:63:57:77:63:B0:C5:73:84:A4
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3AB5CE945043045FE94DB6C684AD6DCE22EA1AF8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144637.roa
Signing time:             Tue 26 May 2026 06:30:23 +0000
ROA not before:           Tue 26 May 2026 06:25:23 +0000
ROA not after:            Tue 25 May 2027 06:30:23 +0000
asID:                     144637
IP address blocks:        240a:a7c3::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:b5:ce:94:50:43:04:5f:e9:4d:b6:c6:84:ad:6d:ce:22:ea:1a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:23 2026 GMT
            Not After : May 25 06:30:23 2027 GMT
        Subject: CN=DDE5600626447C2662C3DE63577763B0C57384A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ab:15:4d:10:64:18:82:ab:f5:d3:c2:79:1e:
                    ce:e9:58:d6:69:23:90:61:97:86:31:cf:57:11:83:
                    0d:e8:3d:51:13:8c:02:a2:66:c9:90:0a:94:c6:96:
                    91:66:0d:73:79:05:09:24:ea:8c:ca:85:df:24:d3:
                    65:ff:93:54:83:52:9f:18:69:78:44:45:bf:9f:54:
                    fc:54:84:a2:5d:7f:21:d6:ef:35:2c:7f:36:7c:72:
                    c1:ee:57:1e:6c:24:72:d9:1e:3b:15:aa:f9:4c:9a:
                    f8:82:a1:58:6b:4f:8d:39:92:65:a0:73:67:32:1d:
                    31:2f:4d:f7:0a:2b:79:16:f3:82:7c:a9:4c:ec:0e:
                    1a:91:dd:74:a2:38:f7:e9:c6:f1:c7:a2:3a:b5:10:
                    41:f7:83:f3:d4:4a:50:1f:f3:00:10:93:4c:b0:f3:
                    57:7f:f8:63:9e:c8:1e:37:44:b7:0a:58:ff:ce:79:
                    8d:0c:f6:b1:15:d2:dd:0e:33:e7:3d:73:ac:dc:37:
                    78:73:e1:46:4a:07:9c:3f:88:b3:65:36:71:f6:89:
                    2e:24:2d:b1:cd:92:ae:7e:4d:a6:21:b9:7c:7c:9e:
                    11:2a:be:bf:dd:4e:70:59:f0:1f:a7:9c:8d:45:2d:
                    96:e2:c1:a4:00:d1:f7:2e:f5:2f:87:a5:59:45:fc:
                    37:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E5:60:06:26:44:7C:26:62:C3:DE:63:57:77:63:B0:C5:73:84:A4
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a7c3::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:b2:3d:ff:4f:35:32:55:10:dc:87:2f:6e:63:56:91:ce:11:
         3f:5e:85:a2:af:90:6b:ff:dd:fe:e5:b4:50:58:a3:25:29:65:
         64:47:8a:1a:9f:c3:27:09:aa:fb:6c:fc:cc:99:c0:9a:10:4c:
         e1:33:d3:f6:6c:43:1a:17:8c:85:0e:c8:5e:a9:8b:39:b8:4b:
         b4:08:5e:51:7f:18:e0:44:ab:b6:1b:0c:d6:5f:d3:ba:a6:f7:
         39:4d:fb:84:88:95:54:48:3f:4b:28:90:4b:96:b9:a1:3a:68:
         af:5e:92:dd:9e:9f:82:e2:9c:42:0f:a8:f6:ec:ac:c1:4c:b8:
         1c:b1:e8:d8:dd:28:ed:dd:c9:ef:a2:c1:3f:e4:8d:f9:92:20:
         84:af:d0:29:88:e0:3e:83:08:0a:82:dc:78:ca:0f:1f:66:b2:
         80:c5:d9:91:96:b0:b7:03:84:ca:31:16:de:34:e0:5c:1a:d2:
         d5:28:e9:7c:9e:36:b7:11:ca:38:a7:1b:c7:3a:5d:69:2b:2e:
         53:af:6f:15:0e:2f:80:a8:c5:2b:80:7e:39:4a:4e:37:47:c6:
         da:e1:e1:b8:4d:51:61:40:80:18:89:4a:0c:c0:c0:6d:34:45:
         9c:2e:58:66:bc:05:e1:0d:24:1c:97:4f:2c:46:89:fc:c6:21:
         e8:88:f4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:31 2026 by rpki-client