Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144794.roa
File:                     AS144794.roa (raw, json)
Hash identifier:          qowtGwt6lVBBs68fNJek7OqJyh8Expokhegkvww9K84=
Subject key identifier:   F8:30:F8:BF:03:A3:C2:92:13:C2:EC:06:3E:95:B5:7F:AA:DB:65:49
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0E69D821E23F85E8BC107D0087480E3502D477EF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144794.roa
Signing time:             Fri 22 May 2026 04:08:30 +0000
ROA not before:           Fri 22 May 2026 04:03:30 +0000
ROA not after:            Fri 21 May 2027 04:08:30 +0000
asID:                     144794
IP address blocks:        240a:a860::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:69:d8:21:e2:3f:85:e8:bc:10:7d:00:87:48:0e:35:02:d4:77:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:03:30 2026 GMT
            Not After : May 21 04:08:30 2027 GMT
        Subject: CN=F830F8BF03A3C29213C2EC063E95B57FAADB6549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:22:b7:03:83:89:c7:a0:3d:a5:73:d2:0e:03:
                    03:96:1d:58:bc:b1:11:67:45:e9:09:dd:73:12:e9:
                    fc:ae:bc:9c:fe:a9:8d:cd:ae:51:03:7d:bc:92:e6:
                    e1:a1:8b:73:7f:89:7b:99:1a:1e:45:ed:b1:5f:ff:
                    0d:bc:a0:08:ef:0f:7c:17:ca:ff:30:50:16:31:46:
                    49:4a:e1:28:74:c8:1c:2f:2e:cb:8a:ec:ff:40:68:
                    81:6b:33:97:bd:4b:11:cb:dd:b0:d8:35:1d:8f:5f:
                    11:b0:90:be:e1:f3:52:e6:bb:fc:69:12:af:3b:78:
                    aa:a8:7f:35:46:fe:7a:2b:41:28:b2:e7:36:6c:9b:
                    36:5c:94:df:91:a0:5d:66:00:fc:b5:2b:e6:8a:ee:
                    cf:87:60:33:ef:dc:8b:83:8b:ce:8f:97:b4:50:e0:
                    04:5a:58:4a:68:13:c3:5c:8d:c0:03:17:f9:49:ae:
                    2f:dd:3d:99:35:b1:1f:d0:ea:2e:10:c0:a6:28:84:
                    2e:92:cb:4b:c2:67:05:a5:f0:cb:1f:0c:3b:4e:e5:
                    80:bf:e2:3f:7a:9c:d7:38:59:e4:6f:74:9d:09:6c:
                    75:ac:cd:f6:df:ab:38:52:ec:b2:a3:94:7b:fd:d8:
                    1b:b5:2c:27:44:73:df:07:97:4e:6c:a8:05:3b:fe:
                    56:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:30:F8:BF:03:A3:C2:92:13:C2:EC:06:3E:95:B5:7F:AA:DB:65:49
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144794.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a860::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:17:70:87:ea:ff:a6:ab:c1:01:01:b5:30:f4:66:b2:14:7e:
         bd:b9:d2:c7:fa:70:5d:2b:56:d6:5a:69:e4:84:5b:75:21:bf:
         ec:5b:a8:d9:8f:6e:e8:52:7e:e8:e5:e2:dd:e2:49:aa:48:e7:
         2f:5f:f3:ae:51:b1:25:62:ec:9a:38:e7:a9:34:65:7c:40:4f:
         ac:90:a1:7d:69:70:0c:68:1f:95:bc:ab:2c:1d:2b:03:5d:55:
         3b:a3:b8:25:5c:bf:87:9f:17:09:a9:4e:a9:e7:21:55:6e:5b:
         44:4d:11:f5:94:8b:fe:f5:2d:80:0d:8a:35:f8:f2:45:28:22:
         09:0e:48:c0:b6:26:16:24:d0:b6:6f:43:95:46:21:18:10:c7:
         a8:58:34:75:7a:37:d6:66:86:77:48:ab:c5:f2:47:8e:76:10:
         21:9c:94:8c:ac:76:ad:40:43:06:ef:05:d0:4e:46:b0:d6:4a:
         f6:c5:f5:16:cf:12:6a:30:06:1c:59:f2:1a:85:33:f4:28:2e:
         8e:f8:2e:5f:4b:6b:34:91:fb:6c:c9:4c:1f:78:a0:05:0a:5c:
         bf:e0:00:0f:e8:8c:5a:0e:8b:5e:3b:12:e4:b8:a5:1a:1f:43:
         71:33:d4:d7:76:01:a3:e0:ff:33:7c:7e:cb:96:e0:1d:b6:6b:
         86:a0:38:5b
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUDmnYIeI/hei8EH0Ah0gONQLUd+8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDAzMzBaFw0yNzA1MjEwNDA4MzBaMDMxMTAvBgNV
BAMTKEY4MzBGOEJGMDNBM0MyOTIxM0MyRUMwNjNFOTVCNTdGQUFEQjY1NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwIrcDg4nHoD2lc9IOAwOWHVi8
sRFnRekJ3XMS6fyuvJz+qY3NrlEDfbyS5uGhi3N/iXuZGh5F7bFf/w28oAjvD3wX
yv8wUBYxRklK4Sh0yBwvLsuK7P9AaIFrM5e9SxHL3bDYNR2PXxGwkL7h81Lmu/xp
Eq87eKqofzVG/norQSiy5zZsmzZclN+RoF1mAPy1K+aK7s+HYDPv3IuDi86Pl7RQ
4ARaWEpoE8NcjcADF/lJri/dPZk1sR/Q6i4QwKYohC6Sy0vCZwWl8MsfDDtO5YC/
4j96nNc4WeRvdJ0JbHWszfbfqzhS7LKjlHv92Bu1LCdEc98Hl05sqAU7/lY3AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU+DD4vwOjwpITwuwGPpW1f6rbZUkwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0Nzk0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqoYDANBgkqhkiG9w0BAQsFAAOCAQEAJhdw
h+r/pqvBAQG1MPRmshR+vbnSx/pwXStW1lpp5IRbdSG/7Fuo2Y9u6FJ+6OXi3eJJ
qkjnL1/zrlGxJWLsmjjnqTRlfEBPrJChfWlwDGgflbyrLB0rA11VO6O4JVy/h58X
CalOqechVW5bRE0R9ZSL/vUtgA2KNfjyRSgiCQ5IwLYmFiTQtm9DlUYhGBDHqFg0
dXo31maGd0irxfJHjnYQIZyUjKx2rUBDBu8F0E5GsNZK9sX1Fs8SajAGHFnyGoUz
9CgujvguX0trNJH7bMlMH3igBQpcv+AAD+iMWg6LXjsS5LilGh9DcTPU13YBo+D/
M3x+y5bgHbZrhqA4Ww==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:30 2026 by rpki-client