Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144744.roa
File:                     AS144744.roa (raw, json)
Hash identifier:          2IU0a7o32v7G7/IPnJLlhqu0PR50IW+JKNXApxfRljQ=
Subject key identifier:   F6:2F:59:70:73:D3:B0:E4:52:C6:93:DF:14:FF:D0:B6:B7:78:CE:2C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4C6AD41562AFF23BE8516950FB6E256DE5E4BAA4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144744.roa
Signing time:             Fri 22 May 2026 07:24:45 +0000
ROA not before:           Fri 22 May 2026 07:19:45 +0000
ROA not after:            Fri 21 May 2027 07:24:45 +0000
asID:                     144744
IP address blocks:        240a:a82e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:6a:d4:15:62:af:f2:3b:e8:51:69:50:fb:6e:25:6d:e5:e4:ba:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:19:45 2026 GMT
            Not After : May 21 07:24:45 2027 GMT
        Subject: CN=F62F597073D3B0E452C693DF14FFD0B6B778CE2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ff:ba:ca:77:8d:00:f6:04:e6:8c:06:67:53:
                    78:06:eb:2b:de:ad:ff:cb:6d:50:73:2e:5d:2b:81:
                    3d:0c:2a:c3:93:ea:99:56:fe:31:96:a1:8b:5d:54:
                    b9:29:27:c9:77:3e:b1:20:ed:60:fc:a4:f9:3e:7c:
                    af:60:3d:35:5c:fc:43:b7:9e:c3:fc:1e:d8:4c:12:
                    0c:27:77:13:9b:99:a4:b9:86:d9:53:76:d9:32:e8:
                    c2:93:d1:97:af:c2:51:a4:85:ad:63:82:fb:7f:a6:
                    01:4e:22:fd:28:22:1c:7e:23:43:ce:bd:62:26:b3:
                    f2:7d:6e:f5:6a:17:9b:69:b9:a2:7e:17:e9:20:37:
                    6b:b8:64:fe:c0:c7:76:ff:2a:29:2e:6b:ce:94:87:
                    f2:59:a2:f8:0a:55:33:b1:93:9b:f3:60:e3:88:c5:
                    57:56:82:fd:45:66:d0:f5:4d:93:5d:63:0b:03:5c:
                    27:1a:16:4a:a5:98:4d:61:ee:9d:be:52:71:75:2c:
                    7d:66:91:8b:73:90:88:3f:bd:ce:82:5d:45:0a:37:
                    b8:f3:1e:c0:8b:a4:1a:ca:32:d7:18:9d:2d:ab:69:
                    17:15:03:31:20:02:78:b1:cc:22:8b:96:e8:7f:b9:
                    f0:2b:9a:61:40:cf:40:41:22:e3:ae:7f:3b:0a:06:
                    a2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2F:59:70:73:D3:B0:E4:52:C6:93:DF:14:FF:D0:B6:B7:78:CE:2C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144744.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a82e::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:b1:ff:75:cf:c3:8d:ab:10:7d:10:f6:87:5d:4e:f3:f3:49:
         d7:e4:0b:1b:cc:c9:04:bb:5f:e7:0f:c0:e6:5d:bd:70:ed:ef:
         65:5a:0e:97:a5:12:a9:83:a4:c3:6c:5f:68:a1:80:68:1d:98:
         77:7c:76:a4:b3:24:d4:b1:ac:a6:16:dc:4e:fc:6a:36:82:71:
         5d:0e:32:c9:4c:d9:2a:09:5b:2c:84:11:f1:13:a6:af:2b:f1:
         ad:c7:12:f5:2a:62:80:b9:15:4b:d2:04:5a:3f:b9:5c:b1:fd:
         9e:63:a1:79:db:df:fc:fa:8d:20:df:a0:6a:69:f5:2d:e6:45:
         14:2b:b3:43:00:5c:b6:08:e8:28:7e:ef:86:69:06:0a:9f:cc:
         ec:cb:83:31:fc:9a:ba:24:86:eb:16:f5:7b:59:61:72:c6:8e:
         b9:ba:85:96:39:2d:38:da:f1:60:7d:df:da:30:e6:2e:d6:54:
         d8:e6:44:8e:da:c1:10:aa:22:8d:82:f7:02:2f:72:5a:4d:c5:
         15:ee:80:4d:ce:de:52:ff:10:dd:fe:68:32:78:97:a3:36:f1:
         0c:fe:1d:27:a5:a7:48:47:85:d6:26:52:f3:d0:28:76:b2:fa:
         4a:e8:36:d1:b7:41:6c:39:44:bb:7b:03:90:2c:eb:1a:a5:70:
         f2:89:fa:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:45 2026 by rpki-client