Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144816.roa
File:                     AS144816.roa (raw, json)
Hash identifier:          3PHXmdT1IQFJyi73TVhzGSqTxWOkKXKdyxli15gWeRs=
Subject key identifier:   8E:8D:3F:8E:9B:6F:6B:76:E8:2B:E1:17:E0:11:79:B6:44:21:B6:92
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0C11333BF1A4A5F104A54BE90198BEE2F4E177D5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144816.roa
Signing time:             Mon 25 May 2026 01:51:08 +0000
ROA not before:           Mon 25 May 2026 01:46:08 +0000
ROA not after:            Mon 24 May 2027 01:51:08 +0000
asID:                     144816
IP address blocks:        240a:a876::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:11:33:3b:f1:a4:a5:f1:04:a5:4b:e9:01:98:be:e2:f4:e1:77:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:08 2026 GMT
            Not After : May 24 01:51:08 2027 GMT
        Subject: CN=8E8D3F8E9B6F6B76E82BE117E01179B64421B692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f8:b0:e4:ab:ff:f9:4a:bc:a0:3c:57:6a:56:
                    7c:8c:e1:18:d9:e1:2a:13:3a:5e:8e:ff:fc:1d:3a:
                    ae:69:07:5c:98:a8:2a:0b:22:3e:e2:ef:91:97:66:
                    ed:54:73:f8:9f:3d:f2:e9:e4:72:a9:2b:d0:bb:0e:
                    67:4b:97:8e:2a:f1:fb:bc:64:22:b9:58:bc:f0:84:
                    aa:96:9f:81:b7:d4:a4:8c:f4:32:55:44:c7:e4:ba:
                    d7:5d:4f:20:26:3f:a2:c6:9e:63:95:ee:0d:7c:de:
                    0c:fb:b1:28:16:84:e2:5f:ac:ac:3c:77:a8:e0:f3:
                    78:6e:31:ed:70:ba:bb:0f:8a:71:35:28:9f:96:f5:
                    0a:26:94:ed:30:18:67:a4:cb:4a:b1:33:30:3d:6a:
                    1c:9e:1e:78:c3:ca:0b:fb:89:ee:df:85:d7:38:9b:
                    b9:14:0b:d0:21:0e:c5:74:15:ef:96:79:7d:0c:e2:
                    5f:94:15:d2:84:8a:30:91:35:c6:39:1c:4f:92:ce:
                    41:d5:78:3b:8f:e8:83:e9:70:12:86:e0:0d:5b:24:
                    75:8f:8e:d7:38:f1:9d:e1:2c:b1:81:0c:0d:88:71:
                    a3:5d:e0:1d:ab:09:ed:f5:b9:3c:1d:c3:c8:a3:24:
                    e7:10:66:a9:a8:65:12:70:54:fe:2c:75:de:07:a6:
                    87:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8D:3F:8E:9B:6F:6B:76:E8:2B:E1:17:E0:11:79:B6:44:21:B6:92
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144816.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a876::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:3f:c6:5c:bc:f8:11:10:3e:7f:f5:68:92:00:02:16:46:c6:
         bb:14:0e:66:01:11:2f:24:fa:67:e2:bd:0d:ab:2b:5e:30:98:
         76:35:92:18:46:91:f0:ba:ec:70:79:46:83:2b:f0:a3:02:45:
         4c:25:86:07:ca:c7:a5:94:ed:94:0e:fc:ea:83:0d:9a:ce:20:
         b3:08:56:21:60:a2:15:5c:d8:7a:86:9c:42:ed:d4:52:bf:fa:
         b9:35:62:08:96:cc:cf:3d:22:21:e0:93:10:ea:db:ba:6a:2a:
         e1:16:1b:4a:71:66:2a:fe:db:a1:64:85:40:36:c6:48:d7:e0:
         0d:54:45:35:9f:6f:0e:09:a9:12:64:a6:7b:a8:2b:ce:0a:58:
         94:3e:a3:11:2e:ad:5a:c9:bb:74:a9:17:a3:45:0c:ef:9f:6f:
         29:1c:83:54:cf:ab:19:de:b5:c7:35:0d:f5:1f:b8:94:e2:e1:
         2e:ec:fe:a3:32:1f:5f:4f:32:6b:d1:cd:28:d5:45:8e:3d:f2:
         46:da:14:8c:e3:31:8d:c3:2a:70:f9:40:59:48:49:8a:2f:9e:
         ad:66:54:12:39:b7:7b:fc:04:02:a4:c9:90:a5:42:31:34:7d:
         e6:2e:42:7a:f6:e8:99:7f:f0:2e:11:59:a3:0e:15:fa:a6:d4:
         d2:ad:13:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----