Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144722.roa
File:                     AS144722.roa (raw, json)
Hash identifier:          ad+ZKxC/xz1HzygEPILne5+b67qBNna5gr1KZgInwTo=
Subject key identifier:   7A:81:B5:AA:1A:DA:D0:0A:4C:DF:26:17:D0:8A:82:E7:1A:D2:FE:62
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3FABCFE149BE9E39E1BD67CD1B5C55E3483225C6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144722.roa
Signing time:             Mon 25 May 2026 01:20:12 +0000
ROA not before:           Mon 25 May 2026 01:15:12 +0000
ROA not after:            Mon 24 May 2027 01:20:12 +0000
asID:                     144722
IP address blocks:        240a:a818::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ab:cf:e1:49:be:9e:39:e1:bd:67:cd:1b:5c:55:e3:48:32:25:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:15:12 2026 GMT
            Not After : May 24 01:20:12 2027 GMT
        Subject: CN=7A81B5AA1ADAD00A4CDF2617D08A82E71AD2FE62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2a:f5:00:30:05:82:37:e4:03:e2:c7:02:a3:
                    b2:d0:fd:0d:82:ca:86:77:3b:54:a8:cd:40:a1:20:
                    d4:a8:11:10:97:5f:7e:e0:a7:08:52:76:7c:0a:e4:
                    4d:08:f2:4f:a2:76:f8:eb:fb:e9:a7:41:e3:de:f1:
                    7d:32:5e:14:54:24:03:c3:05:aa:d7:7b:85:63:f7:
                    c4:ed:8e:a6:99:cf:34:aa:d4:a3:3c:3b:8d:b6:73:
                    96:cd:7a:e0:42:ff:93:51:66:9e:d1:3a:3f:dd:3b:
                    c0:bb:b1:9d:fa:4d:07:c0:78:f2:a5:c4:49:3a:62:
                    17:84:6a:e6:c9:ea:64:59:0f:3a:30:2f:c4:b4:9d:
                    88:3a:ee:ff:b0:52:38:51:ce:67:91:a3:0c:34:09:
                    7b:cb:c6:28:70:ff:18:9a:44:f7:ce:bb:d9:c9:90:
                    5f:d4:c8:88:45:08:c1:d5:1a:b4:c2:c7:98:ef:d9:
                    ea:b1:78:8c:fe:db:5f:4f:53:ab:79:70:3b:e0:e6:
                    b3:98:37:01:09:1f:5d:39:fd:40:40:53:0d:0e:ea:
                    f1:37:5b:75:92:8d:8b:b0:d6:a6:7e:ea:a5:76:4d:
                    fb:31:82:2b:51:24:df:2f:bd:c4:50:87:45:83:de:
                    6c:3c:30:35:ff:31:f0:ee:e8:97:3e:d8:99:64:ab:
                    59:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:81:B5:AA:1A:DA:D0:0A:4C:DF:26:17:D0:8A:82:E7:1A:D2:FE:62
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144722.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a818::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:36:40:ac:a3:bf:49:5e:63:ae:3f:1c:9b:e1:81:b7:24:3f:
         1f:00:14:c2:bc:4a:84:05:a9:42:28:d0:72:99:53:88:e8:29:
         7c:81:2e:36:29:07:ea:fe:3b:92:04:2d:92:b2:0c:99:a9:ec:
         f8:e6:5f:8a:e5:2e:46:e2:db:06:95:4f:0a:d8:05:bf:62:04:
         cb:2d:e2:c3:8f:17:0f:60:e0:85:9d:05:7e:59:2d:ec:ce:e4:
         8b:ab:b8:0e:96:c3:ff:4e:c7:69:10:65:1a:19:45:63:55:c1:
         b9:fa:75:2d:e9:31:27:09:78:30:1b:64:86:9a:45:3f:e4:c3:
         9f:87:e8:f1:8b:ee:ce:30:d4:16:3f:59:04:95:f9:99:aa:d1:
         5a:ed:b0:fe:ef:a0:49:87:32:47:92:95:06:8d:ef:c8:0d:67:
         de:67:d9:87:24:25:0e:3f:b3:a0:e1:e2:d2:df:ed:b2:65:d9:
         59:3a:89:a5:a1:2e:ed:ce:e2:42:e3:f0:e1:91:eb:b5:81:33:
         41:19:fa:ff:4c:bd:be:e3:79:68:93:c9:51:2f:6c:24:fb:3d:
         15:21:34:d3:fe:2b:51:46:c5:88:e0:4c:e9:35:86:4c:d1:6e:
         be:b1:39:6a:d9:8d:e3:f5:08:72:65:8e:d3:53:e0:34:38:0e:
         83:6f:32:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:17 2026 by rpki-client