Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144773.roa
File:                     AS144773.roa (raw, json)
Hash identifier:          1LEJfAeYBSl6XkSnLxHNAJH+oe49Y8U9SLGQwGe/OUE=
Subject key identifier:   74:7E:DB:7D:7A:4A:1B:33:66:45:BD:4A:90:1F:84:67:EF:23:4A:80
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0F9EAFAB0D5920FFDC7087603C846AC46A5D35BA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144773.roa
Signing time:             Tue 26 May 2026 06:30:58 +0000
ROA not before:           Tue 26 May 2026 06:25:58 +0000
ROA not after:            Tue 25 May 2027 06:30:58 +0000
asID:                     144773
IP address blocks:        240a:a84b::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:9e:af:ab:0d:59:20:ff:dc:70:87:60:3c:84:6a:c4:6a:5d:35:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:58 2026 GMT
            Not After : May 25 06:30:58 2027 GMT
        Subject: CN=747EDB7D7A4A1B336645BD4A901F8467EF234A80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d9:ab:ce:bb:15:3b:ed:33:25:f6:1f:f3:67:
                    8e:3f:1b:50:7b:dd:dd:c3:68:29:b3:93:b2:77:75:
                    98:fd:b2:af:4e:ed:56:df:c2:77:f1:1f:a0:7b:e8:
                    a0:c6:0d:7c:af:53:94:cb:48:3f:6e:65:32:8c:65:
                    b0:13:09:25:02:c2:4f:8a:11:20:45:7e:bd:5f:59:
                    59:82:31:71:79:c1:fe:82:87:12:d4:9b:3c:c8:ef:
                    e5:f9:b3:51:e8:b9:90:f7:1a:0c:37:45:c1:dd:7f:
                    78:df:5c:e8:03:59:03:9d:85:7b:dd:8a:46:17:6b:
                    a1:79:e5:a4:31:e0:25:dd:76:3e:b8:88:21:ec:20:
                    35:53:c5:db:6d:3f:2b:8c:43:b1:ce:e4:12:91:f4:
                    7c:85:6f:d1:a8:3d:c2:99:6d:c7:39:cb:7d:0d:e4:
                    7e:76:52:ae:d2:12:81:83:01:42:81:fd:21:14:3a:
                    aa:2f:34:06:ec:b0:8d:4e:2e:4c:b7:9f:e1:cd:60:
                    af:8f:2e:df:d1:17:0d:0b:9a:43:18:ed:b9:91:e5:
                    3d:f4:53:e5:7d:3a:ab:85:7a:47:b9:1b:53:72:30:
                    eb:14:ff:c8:9b:6f:7f:f7:54:03:26:de:d6:28:34:
                    34:ee:f0:24:d6:fc:6b:1a:3f:11:8e:62:63:a1:a4:
                    b7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:7E:DB:7D:7A:4A:1B:33:66:45:BD:4A:90:1F:84:67:EF:23:4A:80
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144773.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a84b::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:c6:4d:fe:73:22:8c:f2:8d:06:24:f4:99:80:67:ca:2c:17:
         44:e2:0b:39:1f:72:3f:c0:ec:89:4b:c6:04:51:b1:b2:73:87:
         f9:0c:cf:c5:d8:6a:cb:0a:71:ce:30:51:db:9c:d2:ff:b4:95:
         c2:16:3e:d6:90:8e:e2:dc:7a:97:b5:09:a6:ef:06:62:a4:82:
         60:3a:b6:34:4a:d0:35:63:02:01:ba:33:d5:fc:41:13:64:78:
         0a:8d:c2:61:c1:e6:02:be:2a:a7:df:88:44:4f:c4:6c:d4:d1:
         3d:99:36:73:bf:f3:9d:96:0a:3d:db:21:64:2c:64:30:5e:bc:
         69:b3:72:5b:96:33:95:72:07:a0:8a:74:b3:1b:16:ec:a6:fa:
         be:0f:4e:87:2f:06:dd:79:92:bd:8c:7f:d4:bd:ed:2c:7f:f6:
         56:97:03:b8:ab:35:18:a0:f3:d4:40:91:4f:6b:83:9f:84:7e:
         85:73:ef:95:96:7e:21:d0:30:d5:19:1d:2e:cc:11:55:cc:f2:
         68:b2:12:4e:51:94:bc:05:30:51:29:78:13:06:08:41:cc:65:
         35:a2:53:c3:6c:9f:ab:59:3d:a8:1c:31:18:76:f9:42:9e:0d:
         45:58:23:8e:69:2d:42:fd:ce:ba:da:ab:e9:a1:7e:d6:c9:d5:
         0e:1e:3d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:50:00 2026 by rpki-client