Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144956.roa
File:                     AS144956.roa (raw, json)
Hash identifier:          7+uxKxmwNt6+Y9Wsz+Ot7RPl/6fyjILJQYuPeOjM+gc=
Subject key identifier:   A6:D7:06:50:D1:63:60:FF:6B:E4:71:94:6E:13:E5:EA:22:2A:6E:62
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4494BF2FB059B333DC15B2B105CCD947713CE5E1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144956.roa
Signing time:             Mon 25 May 2026 03:19:30 +0000
ROA not before:           Mon 25 May 2026 03:14:30 +0000
ROA not after:            Mon 24 May 2027 03:19:30 +0000
asID:                     144956
IP address blocks:        240a:a902::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:94:bf:2f:b0:59:b3:33:dc:15:b2:b1:05:cc:d9:47:71:3c:e5:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:30 2026 GMT
            Not After : May 24 03:19:30 2027 GMT
        Subject: CN=A6D70650D16360FF6BE471946E13E5EA222A6E62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1f:16:a1:39:b2:10:20:a2:13:d6:0d:f3:ea:
                    36:52:bf:c3:74:61:1c:82:6a:6d:be:a3:e3:a9:ee:
                    d7:22:04:3f:61:92:63:0f:f1:8e:e3:a4:f9:de:68:
                    d1:e3:a4:e6:3e:d8:53:32:d3:e3:39:3e:2f:95:2a:
                    b3:16:2d:38:a4:7b:a5:6b:80:c7:59:82:14:ef:5f:
                    d6:d0:ed:a9:bf:58:28:31:a2:ca:12:a2:f2:6d:f5:
                    36:61:e7:53:bc:50:7f:be:21:de:5c:59:49:d6:2a:
                    94:75:1b:22:dc:94:d4:4c:b2:73:d9:d0:f5:70:53:
                    0f:6a:4d:32:c1:2e:1e:0b:be:93:5a:ba:f7:aa:08:
                    90:61:9d:43:08:a8:4f:76:db:f9:dd:a7:0b:6c:db:
                    b3:35:67:1d:04:40:8a:87:ab:4f:b9:69:cc:7c:66:
                    a4:52:9f:e6:6a:9c:b9:f3:29:55:04:87:0b:d1:f0:
                    c4:b1:ca:42:6e:f3:eb:80:61:63:3c:61:56:26:43:
                    28:f9:7c:0e:06:bf:15:31:ec:92:c1:2d:e7:54:5c:
                    c4:7e:ec:fc:05:46:f1:d3:68:0f:eb:5f:d2:97:0c:
                    34:c5:bc:8e:d8:16:df:35:3f:09:b5:72:99:aa:52:
                    19:8e:a0:72:7d:61:a7:6d:92:34:c1:98:37:a4:43:
                    2c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D7:06:50:D1:63:60:FF:6B:E4:71:94:6E:13:E5:EA:22:2A:6E:62
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144956.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a902::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:bc:e8:31:4d:49:14:de:14:e6:f1:5d:f1:77:13:87:2d:3a:
         44:9f:00:be:1b:b6:6f:1e:1a:a4:4c:8d:ae:5c:63:29:84:38:
         17:35:47:27:c4:1d:67:a0:1c:8d:dc:7a:86:5e:b0:b3:a5:68:
         8a:97:52:1a:4e:2a:2b:07:df:e7:7d:44:5b:df:fd:1d:a9:07:
         8e:df:e9:a2:b9:d6:1c:a1:fb:31:8d:bb:99:f4:41:37:4c:6c:
         83:a8:b2:d6:e8:63:89:62:c3:b5:cc:9f:e9:6f:f7:3e:7d:80:
         9b:2b:c3:27:04:cf:5f:32:52:26:b5:77:de:0f:89:26:65:be:
         aa:d0:8b:cd:77:e6:55:02:80:d0:68:6e:fb:12:83:02:c4:0c:
         bd:e9:9d:a1:39:90:10:99:56:8c:5d:30:f2:b9:53:53:fc:b2:
         73:b7:12:34:5d:27:18:71:49:3f:8d:08:0e:12:5c:5b:2d:19:
         75:fa:cb:db:46:aa:a5:43:bc:8e:44:a6:b0:f6:07:75:44:79:
         c2:62:d0:94:33:06:d0:5e:8e:cf:cb:95:ec:f0:0f:33:a6:bd:
         c6:7a:8b:c6:0e:2e:cf:cf:b7:93:65:02:5f:e8:cb:c3:96:ad:
         e0:98:72:b7:7a:08:3d:b4:22:f8:97:0d:46:57:cd:3d:70:01:
         17:02:9d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----