Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144815.roa
File:                     AS144815.roa (raw, json)
Hash identifier:          7RlpeB3gDraM5GIikOTqvBdf0XHE6PscvtnQBL2vly0=
Subject key identifier:   6F:90:B5:6D:34:00:20:F5:4D:2E:E1:5C:5E:0C:E5:4E:3D:04:85:99
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       32D2FAB4B9EC3C0D1DCD9A2DF03E7E459299D457
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144815.roa
Signing time:             Mon 25 May 2026 01:51:04 +0000
ROA not before:           Mon 25 May 2026 01:46:04 +0000
ROA not after:            Mon 24 May 2027 01:51:04 +0000
asID:                     144815
IP address blocks:        240a:a875::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:d2:fa:b4:b9:ec:3c:0d:1d:cd:9a:2d:f0:3e:7e:45:92:99:d4:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:04 2026 GMT
            Not After : May 24 01:51:04 2027 GMT
        Subject: CN=6F90B56D340020F54D2EE15C5E0CE54E3D048599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:96:da:f4:40:52:96:54:b7:a6:01:db:5a:07:
                    5a:62:6e:1e:ba:12:16:cf:36:db:27:99:1c:fe:cd:
                    93:93:8d:49:e2:1a:52:a7:5a:34:01:99:6e:e1:1d:
                    16:aa:c8:e7:c2:28:10:36:24:fa:b4:62:43:fe:0c:
                    07:21:66:5c:c3:6c:45:f7:1f:a7:df:e6:b7:17:bc:
                    e0:23:e0:ec:b1:4a:5f:1b:34:c5:01:17:7f:63:c5:
                    b6:ca:70:bf:20:2d:96:1b:34:db:31:7f:76:e2:2f:
                    a3:58:7a:4d:aa:33:09:8b:f5:e6:55:1d:2b:d9:a9:
                    cb:06:c5:96:59:e6:46:e7:d1:f2:bb:24:c8:f7:c2:
                    5d:af:e4:1f:bf:bf:3f:b2:53:d9:d1:31:52:c4:0e:
                    fd:79:d9:f5:d0:4b:fd:1e:81:a6:9d:24:de:dc:f9:
                    59:c4:be:5a:b5:e9:7a:8a:c9:1b:61:84:8b:8c:04:
                    0f:7c:c3:f9:08:15:a4:0a:1b:50:72:25:3c:bc:c4:
                    2f:8e:ea:2c:23:5b:b1:5c:b5:0d:c4:b5:8c:99:6c:
                    33:98:47:5b:15:be:ce:ff:5f:4d:bc:43:80:b0:25:
                    93:24:4c:f7:3d:48:58:e3:12:93:fb:2b:92:83:9d:
                    48:8c:aa:61:91:cf:1f:86:58:4c:5a:f8:cf:55:e9:
                    4d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:90:B5:6D:34:00:20:F5:4D:2E:E1:5C:5E:0C:E5:4E:3D:04:85:99
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144815.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a875::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:72:09:5a:b4:61:ba:b4:4a:37:c9:de:45:d4:36:be:3c:f9:
         cc:8a:3c:c7:ce:1f:65:74:17:ec:c7:e2:cc:b7:98:f7:20:69:
         89:32:f2:d7:4c:3b:1a:cd:9f:fc:43:22:8a:09:90:e0:12:c6:
         aa:6f:ea:e2:56:f4:dc:7b:4a:4b:90:9c:29:d8:d5:c3:91:99:
         50:6a:0b:7c:b5:2a:1f:48:50:c5:26:42:d9:a0:32:5a:48:66:
         d5:f0:07:6e:b8:28:cc:f0:e8:4b:7d:16:54:a9:d8:80:a7:8e:
         9e:ec:09:ea:13:0a:8d:e9:9a:4d:47:9a:08:50:d4:1b:40:a6:
         4b:26:28:e1:7e:82:8a:e4:35:61:bf:66:35:85:10:72:85:71:
         f3:45:d4:cb:e8:de:08:b0:15:d7:d1:5c:0c:6c:26:89:5c:91:
         58:88:55:60:45:45:ce:6c:3d:4f:b8:1c:40:68:5d:3a:70:65:
         b5:63:e9:b6:00:bf:5f:ab:d2:13:ba:a2:66:d6:62:e0:9e:6f:
         bd:e9:35:34:d5:7b:be:37:f3:96:02:4a:7e:67:6a:33:e8:6a:
         05:65:70:c8:e6:6d:c9:e6:72:55:37:9b:1f:e4:8b:52:8a:7e:
         52:ea:63:05:7b:41:91:38:7f:74:31:03:0c:6d:eb:53:0d:d8:
         b4:54:d5:df
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUMtL6tLnsPA0dzZot8D5+RZKZ1FcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTQ2MDRaFw0yNzA1MjQwMTUxMDRaMDMxMTAvBgNV
BAMTKDZGOTBCNTZEMzQwMDIwRjU0RDJFRTE1QzVFMENFNTRFM0QwNDg1OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaltr0QFKWVLemAdtaB1pibh66
EhbPNtsnmRz+zZOTjUniGlKnWjQBmW7hHRaqyOfCKBA2JPq0YkP+DAchZlzDbEX3
H6ff5rcXvOAj4OyxSl8bNMUBF39jxbbKcL8gLZYbNNsxf3biL6NYek2qMwmL9eZV
HSvZqcsGxZZZ5kbn0fK7JMj3wl2v5B+/vz+yU9nRMVLEDv152fXQS/0egaadJN7c
+VnEvlq16XqKyRthhIuMBA98w/kIFaQKG1ByJTy8xC+O6iwjW7FctQ3EtYyZbDOY
R1sVvs7/X028Q4CwJZMkTPc9SFjjEpP7K5KDnUiMqmGRzx+GWExa+M9V6U2DAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUb5C1bTQAIPVNLuFcXgzlTj0EhZkwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0ODE1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqodTANBgkqhkiG9w0BAQsFAAOCAQEAsnIJ
WrRhurRKN8neRdQ2vjz5zIo8x84fZXQX7MfizLeY9yBpiTLy10w7Gs2f/EMiigmQ
4BLGqm/q4lb03HtKS5CcKdjVw5GZUGoLfLUqH0hQxSZC2aAyWkhm1fAHbrgozPDo
S30WVKnYgKeOnuwJ6hMKjemaTUeaCFDUG0CmSyYo4X6CiuQ1Yb9mNYUQcoVx80XU
y+jeCLAV19FcDGwmiVyRWIhVYEVFzmw9T7gcQGhdOnBltWPptgC/X6vSE7qiZtZi
4J5vvek1NNV7vjfzlgJKfmdqM+hqBWVwyOZtyeZyVTebH+SLUop+UupjBXtBkTh/
dDEDDG3rUw3YtFTV3w==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:12 2026 by rpki-client