Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144813.roa
File:                     AS144813.roa (raw, json)
Hash identifier:          eZyD7oba4TMCGzFs6lw/qK0+mHRr8CxpX1dWdCxwJyE=
Subject key identifier:   B4:9E:B3:F3:20:84:A2:8C:EA:E0:B4:7E:FD:C4:D0:01:40:0A:5C:F8
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       074C8663CB50CDC6B6E4DF024DD84278294B7E4C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144813.roa
Signing time:             Tue 26 May 2026 06:30:48 +0000
ROA not before:           Tue 26 May 2026 06:25:48 +0000
ROA not after:            Tue 25 May 2027 06:30:48 +0000
asID:                     144813
IP address blocks:        240a:a873::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:4c:86:63:cb:50:cd:c6:b6:e4:df:02:4d:d8:42:78:29:4b:7e:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:48 2026 GMT
            Not After : May 25 06:30:48 2027 GMT
        Subject: CN=B49EB3F32084A28CEAE0B47EFDC4D001400A5CF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f1:ff:34:bd:d8:bf:23:a3:c5:b2:72:75:a0:
                    13:31:c7:da:e1:24:d8:b6:ee:c6:d2:5e:f7:dc:d4:
                    c4:1f:1f:5e:38:0b:52:53:f0:72:32:1d:b1:34:b4:
                    2a:a6:71:81:11:b5:42:31:33:42:20:6b:d2:e3:7b:
                    17:59:54:16:fd:5c:e3:5b:ca:4b:2e:3c:95:75:1f:
                    41:69:7b:04:59:3d:aa:8a:20:74:39:4b:f0:ed:37:
                    6b:1f:19:0f:e0:65:61:d7:f4:e3:d8:7a:7c:a3:c1:
                    c5:84:de:3a:f6:be:1d:7d:7b:77:0d:b9:dc:c2:b0:
                    67:4c:bf:a9:18:df:f5:3c:69:dc:07:56:05:1e:7b:
                    88:fe:a5:ba:96:3f:3f:92:fd:d3:c7:45:0f:b5:17:
                    d8:29:1d:5a:7a:63:4e:af:31:1c:3a:79:c4:65:11:
                    2c:29:c4:a7:d6:d2:54:e0:e5:f9:7f:32:43:f9:67:
                    e0:0d:a2:d5:21:0b:67:b2:70:ea:b0:9f:54:d9:5a:
                    7f:e8:1f:2f:eb:e9:da:b5:0c:f8:1e:c4:22:a3:4e:
                    42:c9:a4:d9:c5:7b:1e:1b:b4:e6:46:13:d4:68:e2:
                    8f:3a:83:65:ad:d4:64:43:a6:e7:00:47:08:d6:1f:
                    15:98:58:04:9e:b0:6c:98:ee:81:03:81:bd:7c:e3:
                    49:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:9E:B3:F3:20:84:A2:8C:EA:E0:B4:7E:FD:C4:D0:01:40:0A:5C:F8
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144813.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a873::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:5a:ac:2b:52:2d:b1:06:ee:76:1b:82:03:89:be:88:d7:1a:
         87:fe:0d:4b:8b:ab:2c:6a:a9:eb:ef:ce:5d:36:84:ed:82:0a:
         8c:c2:2c:dd:0d:94:3c:6a:34:35:20:85:36:14:3e:9e:ba:47:
         d8:f8:28:77:aa:0b:0c:63:6d:5f:b7:58:53:c4:2a:fb:b7:25:
         26:f6:27:a6:3f:6e:ac:f6:30:d1:ed:bc:71:3b:af:e7:30:15:
         56:a2:dd:f8:2e:26:6c:da:1a:5a:14:e4:07:fb:65:21:1b:50:
         77:65:79:10:63:59:75:94:0f:49:04:28:5b:f8:f0:24:03:1d:
         35:86:94:b0:7f:1d:65:93:7d:01:56:7b:80:66:1d:1d:f4:8b:
         4b:74:ff:96:a8:3f:a8:23:fd:53:7b:ad:57:ae:22:c8:f4:66:
         17:f5:15:39:b2:49:e7:48:d5:e7:e7:02:37:8a:4c:a1:09:b3:
         25:f1:dd:d3:71:f6:e0:7b:99:d2:a4:e1:9c:78:f5:9e:18:1f:
         7c:0a:6a:d7:18:4e:05:67:9e:5c:cd:7c:cd:e4:ff:96:b5:0f:
         9b:dc:09:f4:f0:77:51:75:b1:b7:ea:3e:56:dd:86:40:04:69:
         80:c9:a7:f3:de:de:53:c8:1f:a2:97:0d:6f:9f:8b:75:3a:5b:
         10:8f:25:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:52 2026 by rpki-client