Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144649.roa
File:                     AS144649.roa (raw, json)
Hash identifier:          saws1k07Ubro8hZE2ycj3K+L7bQspKwLAD5M+Nc1kVE=
Subject key identifier:   BA:F8:0C:40:1C:FE:25:E8:5F:A8:84:A2:C9:07:03:1F:DA:46:6E:D5
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6E24D30338AECCE1084BE44F98C2F19D553F5816
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144649.roa
Signing time:             Tue 26 May 2026 03:17:01 +0000
ROA not before:           Tue 26 May 2026 03:12:01 +0000
ROA not after:            Tue 25 May 2027 03:17:01 +0000
asID:                     144649
IP address blocks:        240a:a7cf::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:24:d3:03:38:ae:cc:e1:08:4b:e4:4f:98:c2:f1:9d:55:3f:58:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:12:01 2026 GMT
            Not After : May 25 03:17:01 2027 GMT
        Subject: CN=BAF80C401CFE25E85FA884A2C907031FDA466ED5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cf:d2:95:ed:2f:f6:0f:05:a9:b6:0d:13:83:
                    4b:10:80:b6:6f:45:a3:d4:8e:8f:65:22:21:1b:6e:
                    81:4f:fa:dc:14:2e:37:0a:4d:ab:80:53:fa:06:d5:
                    31:81:f1:b2:c6:47:bd:65:ea:97:44:a4:73:90:9c:
                    26:e6:a9:a8:78:61:51:7f:6a:83:3a:87:44:b9:e4:
                    f5:f0:77:8e:16:ba:6c:e0:2b:c8:9f:53:be:a3:35:
                    b7:f9:c6:93:cf:24:9d:c2:87:1f:6e:35:64:31:06:
                    28:4d:43:57:f2:c1:5a:12:c1:41:0d:b5:c5:dd:27:
                    f6:74:40:b5:81:f4:98:55:67:ce:ea:a8:b8:93:b4:
                    41:31:cf:2c:2b:a5:31:19:53:fd:e9:85:a3:df:cc:
                    7d:0b:37:21:c7:87:ae:45:df:23:44:f1:65:8a:91:
                    26:f6:f6:50:12:a4:99:f9:03:bb:fd:65:8e:dd:0d:
                    0a:f3:bc:f4:cd:77:5e:87:34:7f:21:d1:32:8e:7e:
                    31:e8:93:b0:51:4f:0e:5e:da:e6:22:bd:ce:8c:a8:
                    6a:ce:24:47:41:df:e8:c3:4b:74:f7:00:7f:5f:fa:
                    bc:c9:2b:c3:d2:30:b2:dc:33:19:e3:9f:b7:ce:15:
                    ce:97:49:61:40:e0:7f:80:97:26:43:6b:28:cc:d5:
                    9e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F8:0C:40:1C:FE:25:E8:5F:A8:84:A2:C9:07:03:1F:DA:46:6E:D5
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144649.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a7cf::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:01:45:17:66:14:02:a7:7c:28:6a:44:58:44:63:f3:7f:af:
         84:f8:a3:ef:97:62:22:14:92:29:0b:f8:ee:7a:aa:f8:ca:64:
         e4:f4:5c:50:ca:20:f4:bd:ee:ee:b3:53:b3:47:a7:71:cd:a8:
         7c:99:0d:f6:94:b0:95:d7:ba:d5:7c:ce:cf:65:0b:9d:9d:6e:
         5a:f5:7c:d1:88:ac:9b:34:82:31:bd:29:7d:48:97:5d:25:0b:
         45:ef:a0:b3:43:e4:6b:97:f9:eb:46:92:99:cc:8e:b5:ac:dd:
         62:3b:dc:9c:1e:55:97:ba:b4:3f:33:ea:10:f4:22:49:eb:9f:
         89:d2:0e:34:52:ba:0a:c7:8f:4e:80:aa:12:98:5f:1b:b9:fd:
         a5:f5:f4:2f:97:dc:05:07:50:74:13:6a:fe:b1:7d:06:4e:5d:
         37:42:7b:84:45:1b:85:04:b9:85:2a:63:17:12:67:5a:6c:73:
         4e:a7:5d:53:d9:f9:c3:58:a1:16:fb:56:03:ef:a3:1a:4f:c6:
         dd:88:19:72:97:bc:71:b8:79:a1:c6:f6:45:9b:32:6d:35:ec:
         90:fe:3c:91:2d:51:3d:8d:a7:59:77:00:fe:2b:ab:10:8c:37:
         44:24:4e:f9:b5:1d:3f:17:78:67:e0:05:aa:51:8e:c2:53:d8:
         42:f4:2f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----