Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144743.roa
File:                     AS144743.roa (raw, json)
Hash identifier:          jxEto7ZSOsyEuZDfFMCkYKTJAfECtKn42V1OLhVKWCM=
Subject key identifier:   02:04:B8:A9:3B:CD:2B:DF:90:38:4C:A5:5C:6A:A3:64:74:61:7F:76
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       491371D1D72894CC4A34DF862C037A6D494AC10D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144743.roa
Signing time:             Tue 26 May 2026 01:13:21 +0000
ROA not before:           Tue 26 May 2026 01:08:21 +0000
ROA not after:            Tue 25 May 2027 01:13:21 +0000
asID:                     144743
IP address blocks:        240a:a82d::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:13:71:d1:d7:28:94:cc:4a:34:df:86:2c:03:7a:6d:49:4a:c1:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:08:21 2026 GMT
            Not After : May 25 01:13:21 2027 GMT
        Subject: CN=0204B8A93BCD2BDF90384CA55C6AA36474617F76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1c:35:7e:ff:41:ad:1d:81:7b:bb:da:a6:aa:
                    41:97:5d:ce:e6:57:26:fd:c0:ee:0e:4e:95:fa:cc:
                    b1:1d:dc:7a:70:e2:18:d9:b6:74:9b:4c:83:00:18:
                    c7:9b:aa:17:52:81:41:9e:04:0f:d2:71:a5:cc:da:
                    2c:82:03:3a:5f:7d:f2:eb:b3:87:b8:3e:86:6d:28:
                    82:9b:8c:d7:04:71:e7:d7:b4:b7:eb:0b:82:62:4f:
                    a9:c5:0c:ef:1f:90:76:54:51:70:7d:ee:92:3d:be:
                    d2:a3:d4:18:ef:ff:6b:7d:eb:52:7c:57:23:3a:53:
                    5d:76:09:ce:3a:94:54:5d:de:8b:5b:37:9e:33:53:
                    01:f3:66:6e:c4:6e:c0:95:74:3e:86:d8:db:54:0e:
                    9d:48:e2:f4:92:97:b9:19:5f:ca:47:38:1a:5a:97:
                    96:3c:97:34:6f:12:2b:a0:0e:09:86:ba:84:93:8b:
                    ad:e1:43:84:1b:71:35:ae:9d:5f:ba:f0:64:38:5b:
                    88:9e:20:76:37:56:cf:86:b1:a5:04:73:78:44:55:
                    1b:14:3f:68:dc:75:8b:2a:2a:43:45:f4:93:b7:e4:
                    de:dc:2f:55:43:18:58:10:f3:9e:50:0c:63:54:b6:
                    09:06:3c:de:96:0d:be:09:ea:e8:eb:e7:b3:6a:5a:
                    06:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:04:B8:A9:3B:CD:2B:DF:90:38:4C:A5:5C:6A:A3:64:74:61:7F:76
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144743.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a82d::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:d4:1b:ef:08:bd:df:89:24:77:4a:ac:28:cd:e0:96:18:26:
         36:1c:12:1e:6b:a5:92:fc:1c:04:e7:ae:e1:f3:e3:f6:6e:4a:
         bb:9a:c9:7c:f7:5e:fe:b9:d5:4b:83:a6:b4:49:b5:cf:56:19:
         a7:fe:d1:3f:1d:ca:28:93:84:50:1b:3d:ef:b3:1d:93:45:72:
         51:e8:44:62:39:af:37:27:87:29:3f:85:ea:4e:ed:8e:3b:fa:
         93:f4:c2:a4:37:ff:11:1b:9e:3d:83:0c:9b:59:4c:d4:d1:20:
         0d:e1:8a:4c:bd:11:99:c1:84:93:d7:f4:32:8b:6d:49:c4:71:
         7a:7d:78:cf:bc:19:d5:83:24:7e:29:4c:b0:d0:0d:81:5c:4b:
         dd:01:8a:92:6f:74:a9:5f:a6:47:c8:4c:33:5b:e3:27:ec:39:
         f1:8b:5d:81:6c:ad:0d:77:35:21:54:14:37:f0:d4:57:42:ac:
         ff:d2:9d:50:bb:f6:2e:9b:a4:98:2e:86:b3:0a:62:af:b9:47:
         72:82:4f:1f:ee:33:73:e1:f1:4e:5e:10:7e:59:b5:c5:ff:79:
         3c:f8:0b:38:b2:81:74:65:ea:32:36:78:3a:93:18:84:ab:29:
         e3:c1:83:a0:3b:ed:58:00:f1:41:3c:50:84:fc:9c:8f:94:3b:
         49:be:d9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----