Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144718.roa
File:                     AS144718.roa (raw, json)
Hash identifier:          w6KxC4c5JSbzxMDpoIH+s4gZEmE7KJ2D8KL7q8tPTHA=
Subject key identifier:   76:61:3F:1F:84:97:D4:C3:3C:11:A0:80:B1:83:90:03:1D:87:0C:DB
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       17E9E818BCCD126CF917B7B509325E665D6F04BE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144718.roa
Signing time:             Tue 26 May 2026 03:16:36 +0000
ROA not before:           Tue 26 May 2026 03:11:36 +0000
ROA not after:            Tue 25 May 2027 03:16:36 +0000
asID:                     144718
IP address blocks:        240a:a814::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e9:e8:18:bc:cd:12:6c:f9:17:b7:b5:09:32:5e:66:5d:6f:04:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:11:36 2026 GMT
            Not After : May 25 03:16:36 2027 GMT
        Subject: CN=76613F1F8497D4C33C11A080B18390031D870CDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6a:fd:fa:ba:84:ca:3d:ed:a8:1c:ef:fd:d3:
                    51:0a:eb:f3:21:45:ad:ec:71:17:3f:50:97:f1:a5:
                    30:54:80:08:a7:51:c2:dd:cc:3e:a5:c6:ee:87:45:
                    c0:e6:44:59:d5:f7:42:f6:53:e8:9a:41:8e:00:1b:
                    68:ac:89:9d:e4:bd:ef:fc:49:41:29:c3:a6:c0:1e:
                    00:74:44:38:79:53:0d:78:66:cf:b0:f8:c7:1e:aa:
                    47:ba:1d:ff:96:5a:8e:78:4a:2b:20:e5:da:7a:40:
                    f6:a5:ff:d7:df:d7:ff:21:3d:82:75:7d:22:6e:25:
                    88:c5:93:d0:6a:6c:3e:ee:dc:91:75:6a:34:22:1f:
                    58:88:33:ed:e0:3d:db:5a:b2:3f:1a:94:bf:f4:ff:
                    82:b3:f8:96:ba:61:cb:3f:0c:c8:fb:43:9f:8a:bd:
                    83:96:4f:10:b2:8d:97:d5:53:1f:69:52:f8:6d:23:
                    83:29:fe:e9:59:be:bc:d4:5c:29:c7:64:9a:1e:88:
                    0f:b6:64:18:1e:cb:5d:2e:1c:84:7f:44:75:7e:69:
                    d8:99:db:4a:da:37:71:ea:a0:d6:b9:ff:ce:02:96:
                    5d:8d:d7:b2:3e:94:5b:34:e7:ac:a2:e4:68:d8:12:
                    42:d2:ed:97:30:13:57:7e:e5:e5:e3:0a:e1:79:ec:
                    96:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:61:3F:1F:84:97:D4:C3:3C:11:A0:80:B1:83:90:03:1D:87:0C:DB
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144718.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a814::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:94:2d:72:4a:64:3a:33:c8:ed:91:35:95:74:02:c3:c1:10:
         84:89:5c:a3:22:8e:19:fa:d8:e0:71:0e:6d:db:0a:8f:ba:63:
         14:de:0d:61:e2:0f:fb:c1:67:81:5d:81:54:69:29:1e:8b:16:
         67:07:8b:8f:db:d8:89:ea:4e:04:63:98:9e:6c:6a:30:97:fb:
         e3:6a:61:2a:16:5e:11:d2:1b:99:06:5f:b1:7b:e1:b0:7a:b1:
         e8:d7:4b:a9:18:11:ff:52:29:8e:35:92:06:43:00:7e:cc:63:
         03:6a:c5:c1:fe:e6:18:c6:c7:68:52:70:50:80:67:c2:3c:60:
         c8:21:97:17:24:7c:5b:ba:4d:39:cb:f9:5c:fc:2e:cd:0f:69:
         48:ec:25:9a:dd:6a:5d:71:1b:6a:38:9f:53:5d:5f:52:b9:43:
         cb:ec:5f:9b:b5:2d:f9:d5:8d:7d:a4:a6:60:39:68:83:30:e9:
         e5:10:a3:a6:af:3c:b6:a8:7d:77:0b:2a:d8:b2:b0:ac:b4:d8:
         c2:ca:99:95:98:e1:05:9c:b2:34:1b:42:18:1a:be:1c:02:d5:
         f8:49:c6:7a:16:af:89:cf:c9:29:32:5a:5c:f0:ff:5d:09:6b:
         c0:68:2d:5b:85:e6:26:18:da:ef:52:0a:46:53:4d:0b:33:dd:
         17:e5:55:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:22 2026 by rpki-client