Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144714.roa
File:                     AS144714.roa (raw, json)
Hash identifier:          ars5Zx1HNmWcQXjRojh/j9vvxMrro35jTMCjgdWFw8Q=
Subject key identifier:   C1:86:3C:5E:1F:4F:3D:9C:6F:DB:31:7F:3E:F2:81:28:B7:08:6D:1E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       34ED18918383E0AACAE67705370EB531B6486067
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144714.roa
Signing time:             Mon 25 May 2026 02:22:51 +0000
ROA not before:           Mon 25 May 2026 02:17:51 +0000
ROA not after:            Mon 24 May 2027 02:22:51 +0000
asID:                     144714
IP address blocks:        240a:a810::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ed:18:91:83:83:e0:aa:ca:e6:77:05:37:0e:b5:31:b6:48:60:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 02:17:51 2026 GMT
            Not After : May 24 02:22:51 2027 GMT
        Subject: CN=C1863C5E1F4F3D9C6FDB317F3EF28128B7086D1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:81:8a:87:9d:d3:47:c4:e3:ca:b3:70:60:d2:
                    00:ad:e9:74:d0:11:98:e1:8e:24:95:41:d7:c2:8e:
                    d5:49:9e:02:9a:8b:41:53:b9:29:f6:29:3e:9e:b8:
                    b8:7d:da:0e:9d:65:1d:e8:4c:49:63:90:1c:a2:a2:
                    0e:3d:27:8f:88:26:4b:b8:69:8c:10:c9:72:7f:9a:
                    ce:96:b6:db:fd:ae:45:5c:ef:15:3a:4e:ce:2a:da:
                    16:f7:f7:7a:a1:4d:b8:73:9e:00:73:02:f6:99:bf:
                    69:86:6e:a5:c0:97:e9:51:fa:fd:46:b4:38:ec:5c:
                    51:8a:12:91:3a:80:2b:46:99:af:13:5b:1b:3f:6c:
                    28:94:31:46:b3:ce:88:59:f5:bf:74:30:4d:c0:ee:
                    bd:8e:e2:88:9c:35:d8:43:ff:f4:d8:44:dd:c5:da:
                    82:b2:e8:f7:63:a1:44:63:30:54:f9:33:29:30:d1:
                    eb:d4:07:3e:43:d3:09:e1:7f:f4:d8:d8:4f:f1:11:
                    17:63:af:f1:52:d4:58:3e:88:c6:1a:87:d9:35:f2:
                    e2:ec:04:19:7b:0e:9b:97:06:d2:3a:41:dc:50:30:
                    26:46:56:f9:90:dc:42:24:03:83:47:dd:99:16:a9:
                    53:85:04:c9:76:47:37:21:6c:cf:70:a5:84:22:74:
                    b5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:86:3C:5E:1F:4F:3D:9C:6F:DB:31:7F:3E:F2:81:28:B7:08:6D:1E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144714.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a810::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:6b:03:be:e0:e5:06:55:94:7a:09:1d:b2:0c:c5:59:4b:38:
         01:7c:c9:81:ae:d1:49:05:31:96:d4:fd:a3:01:3d:10:d7:1d:
         a9:52:40:a3:73:4d:e8:00:80:ae:66:af:79:9c:0b:a6:13:2e:
         f3:14:75:d0:4b:1c:32:46:3f:2d:c4:1d:56:0b:ab:7e:dc:02:
         ad:be:ab:59:25:1b:90:94:fc:73:fb:79:a8:74:b5:77:3c:0d:
         35:47:bd:de:25:43:86:6b:3e:1b:e5:32:8c:e8:f5:2d:9a:98:
         3c:54:87:7d:01:e9:9b:19:c4:47:2f:76:95:67:b4:50:d1:0c:
         1b:84:83:93:bb:06:a5:69:81:f5:e0:15:f5:26:82:5b:06:e1:
         ba:9a:86:64:97:30:3c:61:f0:19:48:b0:cc:e5:c0:0f:17:22:
         09:30:8d:5f:c3:40:7c:19:84:cf:9b:78:2b:cc:d1:75:0a:9d:
         d7:67:46:79:88:5c:bd:f7:3f:96:f4:57:6d:05:a6:30:bb:a3:
         55:37:50:5c:60:b2:9a:f7:b6:a7:8b:a3:bb:18:a6:ba:c7:e3:
         ff:d0:5b:2a:bf:b1:f1:a0:b8:19:f5:ea:8c:46:29:dd:b9:84:
         52:61:b3:31:9c:95:b2:3c:82:b9:1e:30:04:84:cb:a0:15:cc:
         bd:9b:85:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:12 2026 by rpki-client