Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144824.roa
File:                     AS144824.roa (raw, json)
Hash identifier:          8c6FH7iKwY6vsKQZECOwq2wVuvXk0w4y1iie2UeFY+I=
Subject key identifier:   94:A7:65:F3:12:0E:89:E3:4D:9C:79:9D:98:E5:31:E0:DD:39:3C:80
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1E267A8AA1716ED4DFE5A7B1B2DEAE9B2E0ECE75
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144824.roa
Signing time:             Mon 25 May 2026 02:22:28 +0000
ROA not before:           Mon 25 May 2026 02:17:28 +0000
ROA not after:            Mon 24 May 2027 02:22:28 +0000
asID:                     144824
IP address blocks:        240a:a87e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:26:7a:8a:a1:71:6e:d4:df:e5:a7:b1:b2:de:ae:9b:2e:0e:ce:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 02:17:28 2026 GMT
            Not After : May 24 02:22:28 2027 GMT
        Subject: CN=94A765F3120E89E34D9C799D98E531E0DD393C80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f6:a9:63:86:4d:8e:98:93:92:61:c6:ca:46:
                    41:f2:c8:ff:48:f2:58:51:d1:fb:9a:b0:90:9f:48:
                    39:1f:c1:1d:85:b1:ab:70:0c:7e:46:57:8f:38:28:
                    b6:b4:e3:e7:a2:e6:ba:7d:d8:e6:5e:3e:ce:df:d0:
                    ad:5a:6d:47:8d:e3:35:7c:02:bb:2b:98:60:a5:a9:
                    44:e9:d5:ec:e0:46:42:03:80:be:d2:37:96:7e:72:
                    ec:29:bb:37:83:8b:39:43:b0:63:6e:5e:af:ea:30:
                    fa:9e:12:81:56:f0:1b:50:24:71:5a:53:d5:92:49:
                    ed:1f:9b:29:85:aa:a9:00:03:ff:74:17:20:4a:33:
                    5c:ad:33:da:fd:73:1a:39:e7:f3:ae:ec:10:5f:6f:
                    4f:b6:6c:ff:ad:44:66:cb:d3:5e:da:11:a3:96:e9:
                    15:85:b1:6b:53:af:65:f2:2a:f7:75:e2:92:64:e0:
                    ed:67:69:56:e9:60:9d:7b:30:7d:aa:17:e7:9b:85:
                    16:07:e5:1b:30:30:03:c9:66:ad:87:ed:2e:47:23:
                    0b:3d:30:a6:bf:c7:f1:ef:47:7b:1f:ec:9c:e8:56:
                    97:fe:c3:ad:c9:5f:6f:21:2b:07:c6:d7:2a:d0:41:
                    19:ba:1c:d6:55:50:5a:39:22:d1:a1:e5:84:e9:a2:
                    64:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A7:65:F3:12:0E:89:E3:4D:9C:79:9D:98:E5:31:E0:DD:39:3C:80
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144824.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a87e::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:e4:7e:a0:b3:1d:94:aa:9b:65:ab:b5:a9:40:95:9a:af:65:
         49:62:4f:7e:c4:a4:91:0e:c6:8e:f6:1f:6d:b5:f7:24:e6:40:
         ce:14:84:61:1f:14:4d:45:98:b2:0f:dd:6f:4b:88:cf:bb:31:
         12:1a:88:6a:92:db:f6:5a:11:f7:cf:7f:78:21:e1:4f:b7:be:
         54:e8:e9:4f:f8:7d:73:6f:04:a2:e9:f2:11:57:61:82:29:4a:
         bf:80:c3:ef:c4:95:01:fe:2d:c6:8c:60:fe:37:c1:02:9b:71:
         dc:f1:81:12:a7:41:84:6d:e7:c9:c7:19:c0:af:73:e2:44:69:
         f6:c2:c0:88:4e:59:65:6a:df:4d:fe:9c:30:ad:4e:7c:ec:f9:
         8e:ae:3f:20:2b:74:73:29:33:b1:0c:55:7e:ac:f7:33:d5:dd:
         f4:ea:81:85:d4:01:fa:51:29:32:e7:5a:cd:6e:4a:76:19:94:
         6e:7c:4b:3d:ac:3c:a0:22:96:63:1e:86:f5:4b:cf:c3:17:4d:
         fe:33:b4:e5:d6:5f:49:6f:a9:59:ec:df:54:da:1d:7d:e9:9c:
         2e:4c:d7:85:8f:ee:34:54:f2:5c:bb:ea:74:9a:5b:1b:b6:8d:
         71:7f:26:55:44:6b:9b:9a:a4:11:41:83:d0:68:34:6b:f6:e5:
         28:68:91:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----