Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144730.roa
File:                     AS144730.roa (raw, json)
Hash identifier:          F3gal0CpT0wdnA/AWcgnC7V+UwOlALhyLNplxlGTH4I=
Subject key identifier:   97:84:A3:C6:95:76:C2:83:B0:C7:50:34:8C:C5:BD:C3:3F:B4:94:35
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6F7DC32D58E449AAA4ED6D0F49CD9B82B66E873B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144730.roa
Signing time:             Fri 22 May 2026 01:50:44 +0000
ROA not before:           Fri 22 May 2026 01:45:44 +0000
ROA not after:            Fri 21 May 2027 01:50:44 +0000
asID:                     144730
IP address blocks:        240a:a820::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:7d:c3:2d:58:e4:49:aa:a4:ed:6d:0f:49:cd:9b:82:b6:6e:87:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:44 2026 GMT
            Not After : May 21 01:50:44 2027 GMT
        Subject: CN=9784A3C69576C283B0C750348CC5BDC33FB49435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a2:7e:b6:11:69:0d:f4:59:97:05:16:bb:90:
                    26:ef:2f:b2:7b:45:8c:2d:c8:38:91:9e:8a:fa:93:
                    b5:e8:d5:d4:0d:8b:ee:c7:9f:63:e7:65:e4:66:49:
                    de:10:68:3b:58:0f:32:ed:6b:cb:69:6e:80:d0:24:
                    ba:8f:9f:44:f4:1d:dd:23:85:4a:7e:30:18:45:df:
                    38:03:63:e2:b3:9b:6d:f8:29:19:e2:1e:17:1d:f5:
                    15:9b:07:3b:20:68:fe:0b:a3:4c:9c:d7:bf:ae:ed:
                    eb:f0:86:fa:78:9c:58:dc:a7:87:9d:d8:30:f4:ef:
                    10:2d:1f:65:1b:92:6c:75:87:6c:a3:9d:6c:ab:36:
                    22:ad:a7:02:fc:0d:a7:0b:76:63:f5:49:84:a6:14:
                    53:f0:77:fa:b5:49:57:57:62:13:a8:25:7f:9c:c5:
                    9e:4f:8d:58:c1:0f:88:88:2a:07:f8:f6:27:43:e4:
                    3d:dc:f3:5b:72:d0:96:5d:3e:42:bf:0c:c3:74:c1:
                    d0:72:fb:ca:e3:65:86:bf:a3:d6:d2:ae:b3:fe:94:
                    40:1b:18:0f:13:06:7c:4c:64:2a:9f:f4:33:f5:f4:
                    c9:bb:38:b3:e0:c0:74:9b:6d:cb:36:ac:ba:b0:5c:
                    a8:9d:fb:83:c3:88:b9:58:b9:12:4f:4e:8b:65:5f:
                    d0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:84:A3:C6:95:76:C2:83:B0:C7:50:34:8C:C5:BD:C3:3F:B4:94:35
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a820::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:0d:ad:7a:c8:6d:c6:d0:a1:c0:d6:c2:39:8c:f3:fe:0a:9b:
         d2:d7:60:27:da:48:24:fd:71:9f:45:32:a1:28:1f:ef:87:fe:
         1d:eb:f1:9e:56:ce:94:11:f2:ea:fb:39:f4:0d:0d:a5:e1:9a:
         85:82:73:da:87:bd:2f:09:e5:32:6e:58:73:f3:02:8c:25:50:
         9d:87:d7:72:c4:10:93:c8:78:8d:3c:87:33:26:5a:6c:35:1e:
         71:55:22:92:67:5e:42:f7:bf:c7:64:d1:f1:de:28:03:68:7e:
         53:19:b1:93:3c:9f:00:d7:16:d2:e3:e0:8b:d5:8e:9d:d5:92:
         5d:fd:b1:93:49:87:ef:87:a8:bf:3c:4e:4e:a7:18:bc:ea:e3:
         af:15:24:8b:2a:08:43:41:0f:e7:ab:56:2f:e2:fe:ce:c0:d9:
         52:9b:81:57:05:a5:32:ec:d9:f5:1f:ff:11:1e:e2:f7:a6:57:
         1e:09:7d:9d:c9:dc:3f:fe:60:6c:f3:c6:0b:34:8f:71:fe:a7:
         0b:78:3b:92:9f:3f:ef:1b:5d:bf:07:a2:91:36:55:af:52:f4:
         58:ed:e4:a9:37:6f:9c:26:99:11:2c:f4:64:a3:8d:d5:ed:f8:
         8a:7b:da:de:18:83:3b:e6:3f:b1:62:45:21:29:32:8f:44:ed:
         82:a9:fd:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:11 2026 by rpki-client