Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144712.roa
File:                     AS144712.roa (raw, json)
Hash identifier:          ofDyeMpSdP2R+2nCIxDLtA6Oe9YX+A+aNMxSRFx22tI=
Subject key identifier:   A4:A8:E5:F8:38:F7:D3:F5:DA:B3:0B:03:A9:73:E3:0C:28:13:1B:D9
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       58B2DB6D8F16C87792BB835479CCC6DAEB5C0800
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144712.roa
Signing time:             Mon 25 May 2026 01:51:22 +0000
ROA not before:           Mon 25 May 2026 01:46:22 +0000
ROA not after:            Mon 24 May 2027 01:51:22 +0000
asID:                     144712
IP address blocks:        240a:a80e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b2:db:6d:8f:16:c8:77:92:bb:83:54:79:cc:c6:da:eb:5c:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:22 2026 GMT
            Not After : May 24 01:51:22 2027 GMT
        Subject: CN=A4A8E5F838F7D3F5DAB30B03A973E30C28131BD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9b:e1:2a:f9:57:ab:c1:df:ae:13:e9:0b:52:
                    e3:73:c5:40:88:a9:da:d1:46:ee:81:24:13:06:be:
                    ad:09:72:5a:58:c4:e3:8e:d0:6a:90:70:72:4b:5e:
                    b3:bf:5f:8b:9f:ee:25:df:c1:64:4c:f3:a2:b8:15:
                    f8:58:8c:22:36:7d:e7:73:6e:02:4d:7b:37:fd:3f:
                    a7:82:71:6a:36:2a:ec:f3:0e:d6:c1:8f:03:14:b2:
                    91:5f:e6:28:d7:6f:56:d3:5e:d0:c7:88:d6:56:34:
                    e5:ab:9f:31:9d:a5:30:d1:df:6c:35:11:0e:ab:21:
                    b6:aa:29:b7:e7:22:7b:c8:9b:68:ba:50:3d:51:ce:
                    d6:4c:e7:13:13:9a:af:e1:7f:7b:52:ad:3d:16:c1:
                    97:e3:c9:e4:6c:14:f7:81:9b:e4:c1:09:25:b6:99:
                    f8:07:87:41:fe:91:cf:b2:26:19:b8:a7:c9:b6:2d:
                    ce:71:df:aa:3b:fa:f7:22:6c:7b:c1:06:1f:f9:b9:
                    72:f3:06:e7:0c:5f:cb:77:c7:4e:52:42:39:88:cd:
                    01:10:63:01:77:5c:de:f5:27:14:13:73:00:59:a9:
                    e9:48:c0:df:8d:46:d7:a0:e5:09:3f:6f:9e:f3:c7:
                    40:0e:b5:57:5f:22:82:1f:5d:39:c5:a3:b5:5c:96:
                    de:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A8:E5:F8:38:F7:D3:F5:DA:B3:0B:03:A9:73:E3:0C:28:13:1B:D9
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144712.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a80e::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:99:d0:75:39:11:11:4d:ee:79:cb:28:aa:fc:c9:66:13:85:
         25:b6:09:0d:95:78:72:61:74:e7:42:fb:26:33:65:1e:07:9e:
         a2:86:b5:78:e9:e9:ae:ff:99:c5:41:b5:c9:fc:e6:57:4c:a9:
         4d:65:1a:f4:8a:b6:87:6c:f7:9f:e2:c8:d2:2b:e4:b8:17:f6:
         28:97:9b:6d:eb:f0:e2:4e:f0:d0:61:37:b3:bc:d0:39:8a:79:
         ed:77:62:18:5c:3f:60:b3:fd:ef:d5:45:56:40:3a:a0:1f:f4:
         9c:8b:df:4a:d7:2a:d7:ff:cd:1a:39:47:0b:c9:e3:27:44:74:
         5d:e2:db:5b:48:20:c6:da:03:b8:1a:d6:22:0c:55:87:19:21:
         fd:10:e8:4e:c9:3a:e0:56:55:a8:b5:ff:0e:6b:48:bb:16:75:
         3f:34:9d:f8:16:57:ef:34:5f:f4:4a:1e:5d:9d:98:bc:62:48:
         a1:1d:58:66:ab:12:aa:e9:1e:5b:ab:a7:77:ab:f9:dc:80:33:
         6d:d5:e2:78:c7:87:ef:f8:82:14:2a:ba:4c:2c:39:3d:5c:d8:
         37:5a:7c:9c:c8:da:fb:b7:f7:63:97:95:34:ad:77:a7:ad:f1:
         f6:ea:9e:a8:98:50:fa:64:b3:c9:de:0a:af:75:fa:27:17:e4:
         4f:f7:16:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----