Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144866.roa
File:                     AS144866.roa (raw, json)
Hash identifier:          mJWaAYBrBDtoYV1XDFHAQ0zLuoyxK4EHfNVBFx7ZBvk=
Subject key identifier:   83:52:69:56:69:FA:3E:6B:74:F0:B5:52:F1:2B:AA:3E:A2:9B:93:50
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3DD957B5B8B035C6F6874C76E95A3C7B165ABD3E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144866.roa
Signing time:             Mon 25 May 2026 01:51:32 +0000
ROA not before:           Mon 25 May 2026 01:46:32 +0000
ROA not after:            Mon 24 May 2027 01:51:32 +0000
asID:                     144866
IP address blocks:        240a:a8a8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d9:57:b5:b8:b0:35:c6:f6:87:4c:76:e9:5a:3c:7b:16:5a:bd:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:32 2026 GMT
            Not After : May 24 01:51:32 2027 GMT
        Subject: CN=8352695669FA3E6B74F0B552F12BAA3EA29B9350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:91:92:ca:e2:7b:b4:27:c3:8f:59:1d:a3:ca:
                    69:8e:74:a4:f1:23:8a:c7:27:d7:f3:46:1c:ca:32:
                    a4:61:ae:a6:4b:d0:23:5f:b8:9b:77:0d:08:36:17:
                    0a:0c:e5:40:0a:17:52:a7:2c:f4:cc:ee:a5:6c:c0:
                    ca:9f:d3:47:ec:0a:a7:6a:f4:77:9f:59:64:c3:fe:
                    75:28:3a:ff:f8:c1:9a:11:a5:35:a1:0a:56:bb:36:
                    fb:43:b5:33:3d:d9:70:e4:2c:d4:31:2c:c3:92:c1:
                    bf:21:f3:bc:08:51:7e:03:4b:13:66:04:bd:6f:bf:
                    98:c1:54:e2:28:92:52:2c:f1:75:b1:e4:32:01:43:
                    02:41:87:e1:17:70:ad:71:0a:f9:b2:88:98:9e:f8:
                    bf:df:98:0a:5a:58:1e:34:94:7a:79:d0:00:c5:87:
                    1b:35:ae:b5:90:9d:b7:60:b6:69:a1:78:ee:82:a7:
                    c3:1b:50:a5:f2:47:14:35:73:63:ff:62:6b:48:fa:
                    fc:3f:aa:c0:1c:ea:0a:f8:f8:b8:72:20:6d:93:c4:
                    a2:a2:a8:74:8c:72:1e:49:f9:1c:7b:7c:40:41:8e:
                    0d:96:bf:d0:01:3e:5d:49:7e:ba:4c:9d:00:88:ce:
                    b3:32:91:6a:cd:86:89:19:09:5d:c4:62:07:e4:00:
                    c1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:52:69:56:69:FA:3E:6B:74:F0:B5:52:F1:2B:AA:3E:A2:9B:93:50
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144866.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a8a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:04:fb:51:86:f4:98:cf:a1:0b:a6:3b:c4:c1:f9:94:69:a3:
         dd:1f:a2:78:c9:6e:da:1f:65:1c:ce:32:3f:c6:f7:3f:c6:45:
         9c:53:f3:89:a7:86:cd:7e:54:74:e1:47:49:83:74:a6:87:5e:
         fd:e4:db:df:d3:cc:1c:d2:69:cf:11:a3:ce:0b:78:8c:10:30:
         29:e9:c9:d0:76:71:6d:23:70:09:3c:c4:ed:9e:3a:f0:bf:62:
         09:19:d8:67:b0:cf:0d:34:51:81:71:f6:93:30:e8:8a:d7:b3:
         fa:d8:44:f8:19:ba:f5:c3:4e:70:24:22:01:77:75:8d:46:dc:
         a8:af:69:f7:41:29:7b:34:43:0c:e6:f8:f4:52:9c:d1:f0:2f:
         a6:6e:59:90:ab:5c:a7:8a:f6:53:8f:4c:58:05:18:be:dc:72:
         88:95:fa:2a:0a:6e:93:6f:4f:1b:83:be:47:f8:b2:8e:be:a1:
         85:5d:64:5a:bc:14:c1:a2:9f:66:15:cd:05:24:10:0c:04:93:
         70:29:49:db:2c:9f:e7:49:ff:61:87:57:c7:da:ff:b4:98:ad:
         18:30:7a:fa:8c:e9:1a:ee:b5:55:32:7f:15:f9:42:f4:f2:c3:
         74:db:f5:47:de:73:5f:a4:31:fb:b1:41:a1:60:21:a5:f0:3a:
         39:b8:ae:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----