Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144716.roa
File:                     AS144716.roa (raw, json)
Hash identifier:          IMSr+uxS+vkRbPdB6yRVhCjX3XZBUF9p+63Q/BuNmGQ=
Subject key identifier:   E8:55:39:8A:19:B7:BA:24:B2:99:52:2A:50:A7:41:24:A9:1D:47:CD
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       58F9270B6A243430174D877C8FAB6EC5F89DF430
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144716.roa
Signing time:             Fri 22 May 2026 06:58:14 +0000
ROA not before:           Fri 22 May 2026 06:53:14 +0000
ROA not after:            Fri 21 May 2027 06:58:14 +0000
asID:                     144716
IP address blocks:        240a:a812::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:f9:27:0b:6a:24:34:30:17:4d:87:7c:8f:ab:6e:c5:f8:9d:f4:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:14 2026 GMT
            Not After : May 21 06:58:14 2027 GMT
        Subject: CN=E855398A19B7BA24B299522A50A74124A91D47CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ec:63:90:9e:46:58:29:6b:4f:81:40:95:a4:
                    bd:48:84:82:3a:3d:e1:09:31:3c:97:6e:99:02:8a:
                    7b:47:4c:07:ed:ec:53:d3:91:18:e5:11:da:93:df:
                    99:4b:2c:58:48:a4:a0:58:70:40:60:73:ed:53:bb:
                    6f:1f:57:e4:97:f4:51:c1:14:90:48:14:a2:aa:bf:
                    61:31:b3:87:3d:0a:ec:dd:f5:59:22:dc:13:d8:34:
                    a6:4b:30:8b:37:3e:46:07:9c:13:c2:a9:d6:6b:95:
                    fc:18:82:71:cc:4b:dc:c1:3e:91:96:85:ba:ab:fa:
                    a4:28:20:03:62:9f:ef:5f:ab:ba:9a:35:b7:9f:e4:
                    50:0f:1a:f1:8a:a5:d2:b7:53:74:12:a7:d5:51:b3:
                    1a:4c:bd:49:e7:64:09:3f:b1:25:6d:70:5d:bc:fb:
                    fc:2a:b7:11:98:2e:28:be:47:4d:d4:a7:43:f5:ee:
                    db:08:f5:f7:b3:07:9a:e2:98:58:59:f4:cd:0a:5a:
                    0e:49:9f:1c:54:73:20:c5:14:7b:40:4e:f6:ac:9c:
                    53:10:2d:9d:58:11:be:29:15:36:9d:a2:28:f9:58:
                    ca:6c:0c:43:70:34:b7:c8:ad:6a:9d:87:de:3f:fb:
                    fa:f5:d5:75:0e:ca:76:bd:4b:ea:e7:37:3c:31:68:
                    5d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:55:39:8A:19:B7:BA:24:B2:99:52:2A:50:A7:41:24:A9:1D:47:CD
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144716.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a812::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:9a:4a:a2:dc:6d:1e:8c:ad:3c:f3:4a:27:bf:d4:19:52:e7:
         d9:0f:c5:f6:c7:2e:8f:81:6c:6e:01:95:f0:fd:36:85:10:17:
         d9:c8:e8:f9:67:e1:01:18:51:15:6e:bf:c1:de:79:88:53:44:
         65:0d:b5:96:f8:8d:a3:da:b7:85:e7:c7:48:1c:69:26:92:b2:
         22:4f:55:91:13:0c:0c:a8:9e:5c:86:ae:a1:ca:27:39:d1:66:
         61:a7:c0:49:82:3e:66:79:f7:49:a9:09:b8:72:a4:f4:18:ca:
         17:1b:e0:08:54:b1:85:9e:dd:37:96:91:99:dd:29:98:2b:b7:
         23:97:18:4c:25:6e:5b:30:1b:4b:ab:83:d3:16:86:f8:c0:94:
         8d:4d:fb:fd:8e:fe:ad:3b:e2:3a:a6:40:46:ef:5b:41:9f:48:
         89:07:e2:45:97:92:2c:fa:31:26:8d:67:aa:6b:09:35:a0:90:
         ad:67:36:d3:63:0a:44:8c:23:a6:58:8a:cb:6e:9a:74:17:6d:
         78:bf:23:19:15:22:7d:29:09:14:28:21:bf:7f:4a:4a:97:74:
         ed:b8:00:f3:2b:c1:1e:c4:cf:92:5f:69:51:1e:c0:3d:46:65:
         08:b2:a3:89:8e:df:f7:e0:b3:cc:07:81:32:31:5d:e0:47:f5:
         8c:4d:a3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----