Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144880.roa
File:                     AS144880.roa (raw, json)
Hash identifier:          WpbXeQ1veYXpzR9JzF/NtbjEc1BeFcknnrLdkBMRh5s=
Subject key identifier:   FE:74:69:F4:55:05:AA:92:FF:B5:78:55:4B:F4:A2:90:E1:51:91:70
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       06D27273650D76F31D66B509BEEE9473A99ACDFE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144880.roa
Signing time:             Mon 25 May 2026 06:28:07 +0000
ROA not before:           Mon 25 May 2026 06:23:07 +0000
ROA not after:            Mon 24 May 2027 06:28:07 +0000
asID:                     144880
IP address blocks:        240a:a8b6::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:d2:72:73:65:0d:76:f3:1d:66:b5:09:be:ee:94:73:a9:9a:cd:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:07 2026 GMT
            Not After : May 24 06:28:07 2027 GMT
        Subject: CN=FE7469F45505AA92FFB578554BF4A290E1519170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:63:30:82:20:cc:ee:4c:ea:c0:bc:f7:10:d5:
                    7b:4d:63:40:a5:9f:a0:88:b7:0d:36:a9:c9:fe:80:
                    2e:b7:64:43:d0:68:de:9f:f5:5e:24:fc:4e:44:d2:
                    24:2d:8a:55:ef:aa:96:35:c6:44:d6:10:e7:fd:70:
                    55:99:54:9a:cb:de:86:51:ef:7a:8c:10:2f:bf:04:
                    35:2c:c0:16:06:24:07:bd:b0:e7:f1:72:c7:0c:0a:
                    5e:ef:1f:62:38:9d:3c:7e:ec:5a:b6:67:4f:af:15:
                    36:0b:a4:5b:cd:7b:af:eb:c1:a7:dd:13:f8:bb:b4:
                    fe:c5:3a:98:a6:c1:11:21:01:0a:7c:8d:b8:5e:64:
                    f6:a3:e6:03:7e:c7:34:25:71:74:56:3d:0b:86:d5:
                    00:6a:d4:e1:66:b7:2a:2a:f5:b8:9b:6b:04:4f:80:
                    81:60:fe:4a:b0:35:b2:71:df:73:00:96:08:c9:27:
                    45:6a:13:a2:2e:a6:93:49:62:f1:ec:14:3e:88:4f:
                    c4:58:08:20:b4:bf:ea:8c:74:f8:f8:e6:e8:1c:67:
                    ac:6e:ea:f2:5d:cf:f8:e7:60:70:e0:f1:f1:eb:24:
                    e3:e7:e8:32:18:67:c0:f4:f4:4d:54:f4:90:a3:50:
                    10:b9:03:50:8c:3e:b1:f2:07:c7:43:b3:ef:e3:41:
                    60:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:74:69:F4:55:05:AA:92:FF:B5:78:55:4B:F4:A2:90:E1:51:91:70
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144880.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a8b6::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:6e:33:69:0b:08:0e:bc:2a:ef:d7:e5:d0:17:19:08:a0:b6:
         4a:02:f8:b5:e7:fb:88:e3:ed:5c:9f:23:df:51:8a:f7:be:00:
         ab:d5:b7:94:c2:e0:2d:24:2f:03:36:35:76:9b:7e:fe:14:38:
         dd:c4:fa:13:01:df:3e:fd:c4:e3:36:60:49:c7:c0:21:1f:d6:
         9d:3c:1f:87:82:2e:9c:94:c0:2f:d8:83:9e:79:96:4a:a1:33:
         66:53:e9:80:9f:8e:5a:cb:bb:ba:38:5d:78:6f:03:18:43:1a:
         91:65:fe:0b:87:63:f8:62:1d:0b:19:bc:83:9a:b6:9c:d0:c0:
         42:ce:87:85:f3:ce:f7:2b:c7:60:b4:7d:d4:0d:e6:2e:99:f7:
         db:de:ab:32:7a:1c:87:65:d2:6f:18:70:52:92:12:0c:7b:cd:
         12:39:53:81:a2:88:e4:77:cd:69:d4:6e:fe:f5:03:50:66:a1:
         33:25:21:d6:30:06:3f:02:b1:3f:e7:49:0a:f4:0c:e2:d8:13:
         bb:f6:3a:65:48:21:4a:e2:78:17:f2:d5:59:40:e0:16:57:a3:
         e3:97:e5:7f:8d:26:b9:cc:c3:c9:c8:b7:69:a8:4a:10:a4:eb:
         0a:d5:de:18:b8:0c:33:5d:f4:ec:ba:1a:44:00:b4:49:39:2c:
         9f:a0:e5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:24 2026 by rpki-client