Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144999.roa
File:                     AS144999.roa (raw, json)
Hash identifier:          LNnzwTAzvq5KUVGOKMiHOQaXIwYxBAQUpEOW5xbxi5A=
Subject key identifier:   32:6F:FE:47:C3:04:D9:6C:20:BC:54:D9:B6:82:83:7C:1D:C9:05:99
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       64BEC416AC94A019A7926393799D222058F7C0E1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144999.roa
Signing time:             Tue 26 May 2026 06:30:57 +0000
ROA not before:           Tue 26 May 2026 06:25:57 +0000
ROA not after:            Tue 25 May 2027 06:30:57 +0000
asID:                     144999
IP address blocks:        240a:a92d::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:be:c4:16:ac:94:a0:19:a7:92:63:93:79:9d:22:20:58:f7:c0:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:57 2026 GMT
            Not After : May 25 06:30:57 2027 GMT
        Subject: CN=326FFE47C304D96C20BC54D9B682837C1DC90599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ce:98:e4:e6:dd:64:31:bf:9a:57:2a:56:06:
                    69:c2:64:63:57:c9:32:0f:f5:62:96:f7:32:81:ab:
                    d3:81:a9:56:ca:61:82:c3:ff:db:bb:99:52:bc:e1:
                    24:02:fb:48:5d:93:9e:1b:9f:7c:48:ab:72:18:76:
                    68:95:c2:3d:5a:f1:ca:76:66:b3:5a:66:5c:b0:aa:
                    43:00:da:f7:b3:ad:94:ae:81:5b:ee:fe:58:d7:da:
                    d5:15:e0:81:49:a0:64:dc:22:80:b0:d3:41:2f:2c:
                    69:1b:5c:89:48:d3:f4:38:e4:df:d9:64:bf:8b:bc:
                    6b:ef:82:20:33:3f:12:06:22:f3:af:e8:da:88:62:
                    a7:14:d9:77:b4:20:f8:3a:36:ff:ef:ba:ef:1b:8f:
                    e3:2b:8f:2b:45:6b:04:19:f6:94:f1:01:51:e1:9a:
                    67:ab:19:93:f0:49:6b:b4:5a:40:a0:c5:ec:08:85:
                    5a:83:e6:bd:81:e3:c4:ae:e9:99:ff:98:47:9b:02:
                    81:a2:c1:b3:9a:68:76:83:94:dd:74:73:b5:34:80:
                    c2:c4:8c:8e:bb:e5:30:95:98:9d:b1:ee:6b:cd:99:
                    9d:3a:cd:7f:72:10:05:9b:f4:52:cb:1d:92:96:18:
                    1b:17:d5:a2:a0:46:d9:ab:e9:90:80:e9:2d:be:3a:
                    53:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6F:FE:47:C3:04:D9:6C:20:BC:54:D9:B6:82:83:7C:1D:C9:05:99
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144999.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a92d::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:40:ba:16:37:27:74:b6:7c:2b:4b:44:cf:f0:20:be:c0:e5:
         42:51:64:f6:ef:24:22:33:b5:8c:20:84:cd:11:82:da:3d:ae:
         d4:68:cd:5f:ba:6a:60:62:91:0e:de:03:c1:af:c0:66:c9:a5:
         f0:0a:d7:8e:14:db:d1:bf:36:62:9f:05:19:3e:5f:b2:fb:4f:
         23:5e:76:6b:7a:fc:c7:d7:38:8d:8f:e0:b4:1b:43:00:f0:ec:
         60:47:46:ab:69:20:ae:c7:0d:f0:09:2c:d1:e5:c4:bb:cf:06:
         a3:e4:d9:58:28:d8:cf:17:43:25:b0:c7:f9:09:55:d4:31:81:
         9e:c4:5d:14:65:d4:ea:d6:2b:8f:de:ad:ff:c9:25:52:98:a2:
         42:1f:0e:f2:0c:60:90:bf:53:d2:4d:09:05:bc:c0:39:18:1a:
         ea:2f:d2:78:b7:8d:ab:ca:dc:7a:56:58:d7:13:af:b3:89:55:
         6c:25:d4:7d:1e:06:8f:40:0d:65:42:7a:07:f9:72:d6:b1:fc:
         79:29:4a:6c:36:d2:01:3c:8b:50:b4:45:bf:d7:fc:ac:b7:4d:
         48:5b:1f:61:3b:9d:da:5d:97:db:3b:77:a4:8a:1e:56:54:fe:
         81:c8:31:e8:6f:45:10:3a:49:70:e7:ea:41:82:a0:bd:69:c6:
         02:ed:ec:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:46 2026 by rpki-client