Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143005.roa
File:                     AS143005.roa (raw, json)
Hash identifier:          FNNTwsiysdiOqkXCY/poezWjO/PkAwzteqA09ZvImwY=
Subject key identifier:   17:7B:87:D2:DE:88:91:15:17:FD:BB:E7:37:E4:E3:A5:35:28:7D:1D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       664BDC07531540836DA17DE1112C694789C347E2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143005.roa
Signing time:             Fri 22 May 2026 06:05:13 +0000
ROA not before:           Fri 22 May 2026 06:00:13 +0000
ROA not after:            Fri 21 May 2027 06:05:13 +0000
asID:                     143005
IP address blocks:        240a:a163::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:4b:dc:07:53:15:40:83:6d:a1:7d:e1:11:2c:69:47:89:c3:47:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:00:13 2026 GMT
            Not After : May 21 06:05:13 2027 GMT
        Subject: CN=177B87D2DE88911517FDBBE737E4E3A535287D1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:90:26:26:09:09:26:52:09:1b:d3:50:2c:f0:
                    b6:f7:61:5d:58:39:ec:68:37:15:7f:2c:31:0c:ff:
                    4d:58:90:f4:05:a3:d2:46:0d:b7:9d:0a:4c:85:b9:
                    85:7e:a6:1c:e1:d4:78:a9:67:78:6c:02:f8:59:ee:
                    a3:4c:fc:ec:ab:4c:fb:30:07:3e:f9:4f:9c:28:6b:
                    29:d9:33:d1:d1:54:3d:c5:d2:bc:ff:32:1a:cc:7d:
                    1e:98:3b:31:05:0e:20:2b:c1:38:be:7d:9c:85:60:
                    41:ed:df:51:aa:55:4e:1b:39:b2:d7:d4:0c:10:60:
                    93:fc:44:9f:d5:1e:ac:3a:04:d1:f3:d8:62:57:52:
                    38:44:48:a6:92:a3:af:df:c8:0a:5b:74:92:d2:36:
                    57:d5:93:90:b7:31:09:23:e5:c2:14:9a:01:ca:ff:
                    56:f9:16:e2:9e:cf:79:ca:33:7b:91:e9:f5:0b:5b:
                    f8:da:a4:f6:f6:28:58:5d:93:87:9a:38:7c:78:26:
                    2c:25:25:e6:be:a6:2f:f6:86:c6:cb:29:ee:3f:7e:
                    81:ad:f3:0e:43:95:91:55:58:37:c6:04:1b:56:b8:
                    0e:be:67:83:a9:6b:16:1c:f8:82:f4:73:81:3f:de:
                    17:2e:f9:2d:e7:15:14:38:84:77:0e:f8:3c:13:2d:
                    e7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:7B:87:D2:DE:88:91:15:17:FD:BB:E7:37:E4:E3:A5:35:28:7D:1D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143005.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a163::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:af:e8:c7:75:8d:ec:83:e1:e3:8b:f1:9c:21:6b:73:c0:0a:
         0c:aa:be:86:31:09:09:02:40:87:f3:df:0b:bc:92:c1:02:a2:
         b9:87:7d:b6:c8:d0:15:e4:b4:a2:6a:24:1e:42:a1:02:28:15:
         70:ac:26:cc:e3:5b:b9:31:05:7c:37:78:16:78:3f:84:98:fc:
         fb:89:a3:6c:e6:28:38:2a:43:d3:53:3c:25:83:25:6e:48:f6:
         f5:4d:82:fa:ac:fd:a0:92:85:d6:45:75:8f:d3:8f:63:80:58:
         47:43:bf:6b:20:bc:a3:31:42:74:c1:1a:82:d0:75:a1:65:ed:
         fd:ac:79:1c:63:de:3c:13:54:c6:fd:74:b6:01:ba:59:2d:d1:
         98:c7:b2:48:51:c4:46:41:ae:af:fc:99:a9:fe:80:e5:a9:79:
         ec:58:e8:16:29:94:be:d5:27:d4:16:54:49:40:d6:10:cb:87:
         14:e9:cb:94:22:79:13:bd:61:f5:3e:43:60:b1:58:ff:44:5a:
         70:36:21:e9:8f:6f:a9:07:3f:94:2f:56:e6:27:fe:6f:6f:eb:
         6e:9d:74:57:73:60:97:66:9c:a1:fe:17:c7:ca:34:bb:d8:01:
         05:9e:dd:68:08:00:c8:ba:5c:67:46:1a:2e:e6:09:95:be:6b:
         79:38:8f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----