Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144901.roa
File:                     AS144901.roa (raw, json)
Hash identifier:          739be+2vNMEAAZfrboO8X8tNnIu7mM5d1o3Q5FigIgE=
Subject key identifier:   99:AD:21:1D:48:4B:BD:DC:73:28:54:A8:7C:24:6A:58:BC:DE:FF:E1
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1DEEB85B98E1E996A99C204392C4657207B942E7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144901.roa
Signing time:             Fri 22 May 2026 06:05:41 +0000
ROA not before:           Fri 22 May 2026 06:00:41 +0000
ROA not after:            Fri 21 May 2027 06:05:41 +0000
asID:                     144901
IP address blocks:        240a:a8cb::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ee:b8:5b:98:e1:e9:96:a9:9c:20:43:92:c4:65:72:07:b9:42:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:00:41 2026 GMT
            Not After : May 21 06:05:41 2027 GMT
        Subject: CN=99AD211D484BBDDC732854A87C246A58BCDEFFE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1f:51:e2:64:7b:5b:23:7a:ea:2d:d9:bf:ed:
                    e4:44:53:13:e3:8b:0f:ea:70:20:e0:ab:1e:61:93:
                    ee:46:99:8f:4e:8b:cf:b1:3a:f0:0c:8e:6b:ab:d2:
                    69:a6:7b:d5:1e:47:22:6a:f3:f4:73:83:e1:d3:f4:
                    c9:11:5a:6c:49:dc:53:27:c6:40:eb:1a:cc:27:46:
                    fe:c9:22:ff:a8:45:da:6d:b4:f5:30:c8:7e:75:50:
                    86:8f:43:c5:a2:22:e6:ac:91:01:f3:5c:87:e6:87:
                    39:38:15:39:24:e0:63:fd:a9:89:be:1f:77:12:67:
                    6e:ec:ea:1b:5c:f1:69:d6:32:18:0e:62:3f:1f:49:
                    89:a7:87:d3:6b:d9:03:89:21:02:cd:1c:47:5a:8a:
                    47:83:52:bc:fa:41:9e:58:ce:91:4e:ef:60:03:67:
                    bf:41:90:ba:2c:ae:ed:e9:fb:8d:6d:ba:78:c0:43:
                    45:2b:c6:f3:e2:21:35:23:59:33:3e:be:29:34:1f:
                    f6:47:76:cf:17:b5:42:38:d0:cf:81:38:c2:5b:1c:
                    90:d1:e3:d2:c1:48:25:78:d7:1d:7b:ab:a2:28:6c:
                    ab:0a:36:39:67:90:10:4a:b9:e0:4c:e4:ef:1c:c6:
                    e9:26:a4:2e:e2:21:61:38:53:7e:32:39:53:cb:7b:
                    07:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AD:21:1D:48:4B:BD:DC:73:28:54:A8:7C:24:6A:58:BC:DE:FF:E1
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144901.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a8cb::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:76:60:22:f3:da:a4:26:24:10:e0:64:81:9f:99:9e:02:a2:
         4c:9a:b9:34:5d:bc:9e:99:c6:67:fe:b8:f1:84:77:63:6f:ad:
         3f:2f:df:f2:fc:c9:45:8a:79:98:93:5d:a7:0a:55:dc:c2:3a:
         b1:ba:21:bf:69:5f:01:f6:53:27:ae:06:a3:40:33:40:23:eb:
         44:ac:67:e3:04:2d:94:cb:b0:cb:27:eb:a2:df:e2:b9:5e:93:
         b7:59:08:d5:04:38:47:e5:30:dc:bd:22:32:80:6d:29:df:15:
         f5:79:7a:1d:80:e2:23:94:63:89:ca:ac:5f:ac:1f:b3:eb:10:
         58:10:87:cd:c7:be:33:cb:40:7b:33:83:89:94:30:2b:7e:af:
         0a:d9:df:d1:92:da:d1:38:58:61:e9:2a:73:f2:24:c5:62:1a:
         1c:91:d5:19:37:97:c4:10:48:80:ed:8d:b0:f6:e6:9b:b8:31:
         e6:0c:d7:14:33:09:3b:b4:3f:2c:4e:18:26:d2:ba:10:1d:0b:
         b3:04:a0:95:92:71:02:d5:18:e5:08:28:0d:b2:a8:8b:08:d8:
         e8:fc:5d:b6:3f:39:1c:87:03:ca:12:d2:5e:59:2b:50:2e:66:
         a6:31:79:a2:4d:6d:c2:77:fd:af:cd:cd:28:5d:74:55:83:12:
         e3:78:94:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----