Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144701.roa
File:                     AS144701.roa (raw, json)
Hash identifier:          DChyPBT9SYOjoTGwpkBI+oyXadAwtGMyHt2F7cM5f8Y=
Subject key identifier:   18:2E:D9:CA:1A:D8:32:D9:BC:46:7A:62:59:AE:29:C8:18:56:E6:38
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0172DB8E6EBA312655E26B9EEA184C44457EE2C6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144701.roa
Signing time:             Tue 26 May 2026 02:35:12 +0000
ROA not before:           Tue 26 May 2026 02:30:12 +0000
ROA not after:            Tue 25 May 2027 02:35:12 +0000
asID:                     144701
IP address blocks:        240a:a803::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:72:db:8e:6e:ba:31:26:55:e2:6b:9e:ea:18:4c:44:45:7e:e2:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:30:12 2026 GMT
            Not After : May 25 02:35:12 2027 GMT
        Subject: CN=182ED9CA1AD832D9BC467A6259AE29C81856E638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:39:23:25:98:34:30:d5:f3:b6:67:ff:8c:82:
                    40:f6:d5:4b:db:b3:83:dc:bf:b8:76:86:24:09:60:
                    6a:7b:1a:3d:eb:46:05:ad:c9:c5:cd:07:de:e9:cd:
                    f5:fe:71:61:e1:d7:c6:c0:fe:6d:aa:e7:0e:10:94:
                    d1:f8:77:b9:bf:ea:03:df:2a:fb:17:1a:45:d8:60:
                    11:d7:f1:fc:e5:e6:f7:27:f5:c6:65:ea:3b:32:e0:
                    84:5e:d0:0b:dd:31:6f:ec:10:39:ec:8d:a8:dc:0a:
                    b1:71:fa:13:f0:99:1c:64:43:14:93:5d:3a:63:7f:
                    71:44:a2:4d:13:89:66:d8:a4:1c:e9:45:28:01:ee:
                    15:ba:f6:48:c0:70:1f:9b:0b:69:7a:67:17:e0:50:
                    07:a8:aa:62:4c:06:01:28:69:af:e1:74:62:ad:80:
                    61:94:d9:e7:ce:59:04:41:de:18:2f:6a:03:87:d3:
                    9c:10:2a:96:69:85:0f:ce:e9:7a:4a:cc:2e:61:1d:
                    23:6f:64:f1:fe:e7:47:1c:f1:cd:83:d3:ef:93:4b:
                    c9:62:12:bf:50:dd:46:65:c4:a5:52:a5:77:d2:23:
                    0b:24:b1:63:e4:b7:33:88:44:76:1d:29:fe:cc:89:
                    ef:f8:cf:fa:04:4e:cd:32:2e:e3:71:19:bd:21:42:
                    32:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2E:D9:CA:1A:D8:32:D9:BC:46:7A:62:59:AE:29:C8:18:56:E6:38
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144701.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a803::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:b6:30:9e:5f:be:71:32:f2:4c:b2:ce:b6:58:a5:fa:ea:b4:
         8d:25:fa:b8:9e:a6:00:65:7f:94:e8:8c:60:ab:6f:2e:be:0a:
         c0:b9:d6:34:4c:31:82:b4:86:04:9e:58:53:2f:2c:7f:8c:90:
         93:5a:2a:16:31:3e:05:0d:1d:04:12:73:8f:fb:ca:e2:00:65:
         d4:b6:89:39:79:f7:37:db:51:84:fd:92:92:c8:a6:2b:61:c4:
         f2:75:8a:b0:2b:63:9f:9d:7b:f9:86:ca:ae:24:c9:d6:2d:92:
         e3:d5:b8:e5:1d:c5:7e:10:9a:fe:8d:89:1f:1d:64:dc:6a:d8:
         4a:16:71:da:44:bd:82:b2:ef:cd:12:20:5d:c1:5f:fe:ff:24:
         a1:2a:9f:e2:86:29:1d:1c:4c:a4:5a:c6:70:45:6f:d5:00:94:
         f9:bc:3f:42:96:5c:b7:32:a4:c6:d2:7b:54:30:18:82:2a:3e:
         88:67:71:3d:18:7b:8b:41:8e:3c:36:d8:90:a3:c2:43:ae:d1:
         d1:9e:84:43:80:8e:fa:30:ff:4c:27:dc:51:6b:ab:bf:6c:5e:
         46:7d:5b:c6:65:1f:ab:ee:72:21:3c:15:cf:ad:ee:6c:72:84:
         c3:d2:fa:0c:c7:a8:c3:e3:bc:9b:8f:60:89:ea:1d:08:13:16:
         78:ae:c3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:04 2026 by rpki-client