Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144783.roa
File:                     AS144783.roa (raw, json)
Hash identifier:          QXbkWwBRdGSiHO+T8+oghOgM1Td1cFEe4+N7JSeL62U=
Subject key identifier:   12:D3:B6:BE:8D:79:B1:9B:D0:3A:B4:5D:03:0F:8E:DD:A8:35:17:17
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6456EEFD182550AD9D0F15E1A8ED76729E61F2D6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144783.roa
Signing time:             Tue 26 May 2026 02:35:16 +0000
ROA not before:           Tue 26 May 2026 02:30:16 +0000
ROA not after:            Tue 25 May 2027 02:35:16 +0000
asID:                     144783
IP address blocks:        240a:a855::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:56:ee:fd:18:25:50:ad:9d:0f:15:e1:a8:ed:76:72:9e:61:f2:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:30:16 2026 GMT
            Not After : May 25 02:35:16 2027 GMT
        Subject: CN=12D3B6BE8D79B19BD03AB45D030F8EDDA8351717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e8:ef:95:7f:3a:f4:8b:74:83:69:db:13:27:
                    3a:7d:3a:05:bd:aa:82:39:00:da:1f:6f:a7:d5:b6:
                    e6:a7:63:29:aa:18:ca:f7:82:7f:a1:a8:f5:97:87:
                    f7:7d:2c:98:92:79:45:ec:08:80:35:c8:db:6d:e3:
                    fc:3a:81:31:fa:06:34:0b:fa:3f:af:55:68:5d:24:
                    66:12:4e:d4:90:20:ea:9d:de:ea:89:46:da:a7:8d:
                    de:a6:3c:7c:d8:64:64:7c:5c:5a:9e:89:67:71:f8:
                    8b:36:34:1d:6f:88:99:77:30:f5:3c:d8:4b:0e:fe:
                    9a:c5:e7:d3:e1:cb:c8:f6:4b:9e:a1:69:3b:81:7c:
                    cd:03:27:30:bd:9a:89:fa:52:89:d8:c9:b8:a5:5c:
                    df:cc:9a:8b:04:66:fa:3c:1c:1a:11:2d:7c:da:f4:
                    bb:54:0d:e1:37:40:39:11:90:cd:ca:cd:a1:ca:3f:
                    92:67:40:34:28:70:ea:76:8d:29:51:3b:a8:06:2c:
                    9d:1a:61:6b:66:b5:2b:a2:48:2a:53:f9:33:b4:66:
                    d7:89:9a:ee:57:ff:60:cd:60:0e:a5:10:5f:87:f2:
                    b1:31:be:ce:d5:b4:f2:b2:bb:90:63:72:9b:9c:98:
                    d9:4a:0b:b1:67:5b:a7:dc:2b:b7:c8:af:03:6e:3f:
                    6b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D3:B6:BE:8D:79:B1:9B:D0:3A:B4:5D:03:0F:8E:DD:A8:35:17:17
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144783.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a855::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:a3:09:8b:17:db:86:89:90:d3:f6:7f:89:65:a4:75:17:af:
         cf:5c:20:41:9c:49:ec:26:f2:c3:f9:27:4f:be:7c:7b:16:7a:
         df:dc:32:ba:62:52:fd:ec:12:6a:0b:b1:71:a1:6f:03:81:11:
         8e:80:57:9f:99:3d:9e:95:69:0f:39:2e:64:5e:98:08:be:77:
         fb:df:f5:b3:17:23:46:c5:49:e4:88:dd:e8:8e:3f:e8:bf:c5:
         a5:a7:80:de:dd:ad:6f:da:2e:54:5d:34:74:bf:1b:3c:5b:0e:
         58:0a:02:dc:70:6d:d4:e3:be:fa:de:e3:d7:d7:ca:f8:9e:ac:
         7a:3f:e9:b9:4f:1a:3d:f9:41:17:3f:7f:cb:e1:6e:ae:02:6a:
         aa:72:a9:0b:6b:7e:31:eb:3e:74:51:da:29:27:4d:44:c8:10:
         b6:15:b2:a9:ee:c2:65:3a:9f:e4:0c:bc:40:30:11:95:93:89:
         33:65:d6:fb:54:d4:eb:c4:ff:77:00:4b:92:4d:ba:10:08:39:
         0b:09:50:d2:c0:54:b8:a9:91:56:05:f4:ec:36:cc:f1:33:c9:
         de:57:fd:47:e5:22:8d:00:68:6b:d9:b2:db:5c:e7:ba:a4:4e:
         03:dd:8c:fc:59:01:95:ac:1b:f9:e9:01:72:0e:27:33:13:90:
         d8:5d:0c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:26 2026 by rpki-client