Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144688.roa
File:                     AS144688.roa (raw, json)
Hash identifier:          XMJASeaw7gH0EylHhTmLd3k267oShXwpEq3bbGM+Y3s=
Subject key identifier:   C7:34:B0:5B:42:6B:71:60:6D:C7:DA:93:08:83:E2:43:83:86:5A:84
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3B2272E340A0578142D7802584E2EFCB66F0BEE6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144688.roa
Signing time:             Tue 26 May 2026 01:13:02 +0000
ROA not before:           Tue 26 May 2026 01:08:02 +0000
ROA not after:            Tue 25 May 2027 01:13:02 +0000
asID:                     144688
IP address blocks:        240a:a7f6::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:22:72:e3:40:a0:57:81:42:d7:80:25:84:e2:ef:cb:66:f0:be:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:08:02 2026 GMT
            Not After : May 25 01:13:02 2027 GMT
        Subject: CN=C734B05B426B71606DC7DA930883E24383865A84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:61:d7:ef:86:9a:64:aa:2a:e7:2c:6b:ef:d4:
                    ce:49:af:0f:6b:84:58:e2:94:ea:8b:ca:1e:c0:86:
                    d2:6e:23:9b:96:d8:d9:3f:62:26:23:76:64:a0:01:
                    6a:36:ba:1a:54:07:bf:5e:b7:71:d5:f1:95:cb:54:
                    81:85:fa:86:6a:b3:9a:27:e2:60:5a:d7:b4:7b:b2:
                    a5:db:02:35:9b:76:5f:16:71:dc:99:8a:31:60:64:
                    42:8b:04:d1:6f:9b:12:0e:d8:9c:9e:46:54:94:06:
                    be:9c:42:cf:ed:ab:90:e5:c5:c7:ca:92:72:62:17:
                    01:e6:4b:ac:3e:97:f5:61:7d:aa:97:23:90:eb:02:
                    8f:98:f6:ce:6d:25:72:38:ab:41:9c:da:c8:d4:6f:
                    1b:c7:bb:a0:d5:91:e5:e4:e2:5e:69:4f:73:f1:b8:
                    c3:71:33:28:59:a2:1d:3a:0f:90:3f:4b:03:97:38:
                    d9:a7:b1:7c:3f:24:fc:62:de:21:56:6f:45:4b:96:
                    11:04:6f:0f:c3:3d:13:09:c0:9e:b7:74:ab:4f:ab:
                    d7:65:df:32:de:b1:36:74:9e:88:44:a0:7e:18:0e:
                    0c:32:33:49:06:fb:38:1d:4d:13:92:4d:77:4f:69:
                    af:e0:7c:ba:0b:0e:98:75:12:ff:a7:99:f2:ba:70:
                    76:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:34:B0:5B:42:6B:71:60:6D:C7:DA:93:08:83:E2:43:83:86:5A:84
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144688.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a7f6::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:15:10:8b:d7:03:6d:3a:4d:2d:2a:47:c1:c7:4f:0e:b4:66:
         13:ab:9b:08:1e:41:31:cf:e2:d2:5d:a1:73:e4:bc:aa:14:64:
         9d:02:61:22:08:5d:0f:44:23:9e:35:dd:20:40:57:3e:b0:59:
         6b:11:dd:ba:62:a4:4d:5d:98:81:fe:6e:0b:ac:24:7f:f8:a8:
         5b:c8:c6:31:af:36:bb:f3:d7:ae:2e:0d:f1:1d:ea:d7:a8:3a:
         a2:f5:b2:cd:e1:51:7a:02:92:dd:aa:a8:8f:a9:cd:3c:81:dc:
         0f:b4:ee:46:6c:38:0a:98:99:35:91:10:39:97:9c:2f:9a:89:
         a7:ec:6e:73:a1:21:4d:58:e6:6f:ce:7e:be:0e:54:97:bb:17:
         c2:87:ec:96:9e:b3:54:82:36:da:21:e1:47:9e:1e:4a:d4:d5:
         80:ba:e9:9f:a7:ce:06:75:aa:1f:b4:e9:ea:8a:2e:f6:46:ab:
         78:2e:95:99:c6:cc:b2:7a:6c:29:74:c4:79:25:31:11:3e:f0:
         28:1c:6a:f5:c7:6f:0b:92:01:97:87:13:cd:f7:bb:7c:34:79:
         25:55:ba:6a:9f:38:eb:2e:66:fd:31:1c:2e:a5:02:4b:67:a9:
         8c:df:85:e4:45:c7:ac:78:aa:31:20:44:8c:55:15:cd:34:bd:
         14:15:a3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----