Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143016.roa
File:                     AS143016.roa (raw, json)
Hash identifier:          wzfqMjrA1klMywrgcq41Z+k+fLHSz95uSrl4rjWEtIE=
Subject key identifier:   E1:C7:77:89:0C:52:A6:6E:42:E2:44:63:C4:1F:1C:EC:3C:E1:A8:F3
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       62BFD758CBF897A6937A581B04AE38A99F550F6C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143016.roa
Signing time:             Fri 22 May 2026 06:46:26 +0000
ROA not before:           Fri 22 May 2026 06:41:26 +0000
ROA not after:            Fri 21 May 2027 06:46:26 +0000
asID:                     143016
IP address blocks:        240a:a16e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:bf:d7:58:cb:f8:97:a6:93:7a:58:1b:04:ae:38:a9:9f:55:0f:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:26 2026 GMT
            Not After : May 21 06:46:26 2027 GMT
        Subject: CN=E1C777890C52A66E42E24463C41F1CEC3CE1A8F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6a:97:f5:d3:87:88:54:43:42:4a:7c:bc:21:
                    d0:04:52:08:40:32:1c:90:c8:f4:e3:a1:4b:50:77:
                    ba:83:c2:4c:86:11:9b:39:03:83:06:78:ec:9a:05:
                    07:fb:d0:a7:b7:12:08:f6:87:58:0d:44:88:bf:74:
                    df:ee:7a:9c:2f:f0:e3:dd:bf:6f:82:0b:cb:66:6d:
                    59:3d:47:c8:55:55:51:bf:32:5b:9a:e1:60:8c:00:
                    f8:0c:2f:1e:1f:e9:c3:d1:ba:5d:4a:8c:af:e9:ec:
                    1f:12:52:50:f1:9d:78:3c:0b:e3:6e:38:1d:f9:86:
                    dc:1c:c0:71:83:d7:4d:34:47:fb:4d:af:a2:d6:8b:
                    99:fe:d8:86:d5:b5:4c:d7:a3:3e:00:ee:13:72:1c:
                    28:78:ea:55:4a:5f:4f:b7:eb:b9:1b:a3:27:92:f6:
                    11:2d:30:5e:fc:55:ba:12:1f:87:14:ad:03:bc:eb:
                    b7:50:42:73:89:60:78:64:46:dd:28:99:a5:63:15:
                    09:c8:05:48:fe:7f:d1:c3:20:45:5b:bc:a1:67:42:
                    82:dd:be:c9:c2:1d:70:e9:8d:57:a1:47:65:89:d3:
                    62:d8:a9:3a:31:4d:f3:8b:98:a0:e9:35:8b:52:b5:
                    8b:ce:d7:0b:10:24:e8:39:a5:fe:ae:e0:97:d3:f9:
                    13:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C7:77:89:0C:52:A6:6E:42:E2:44:63:C4:1F:1C:EC:3C:E1:A8:F3
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143016.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a16e::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:d8:c1:96:e8:0b:9c:52:19:db:dd:05:25:cb:bf:7e:2c:ce:
         aa:90:44:5c:ce:24:1a:33:a7:80:ea:01:94:80:5f:a5:7f:5d:
         13:54:34:1e:d3:3c:d3:3e:7e:03:f7:3f:32:d0:74:f2:b0:9e:
         31:9f:ff:8a:33:39:66:c8:9d:35:ae:6b:be:b7:50:39:33:22:
         6c:b0:be:6e:80:24:2e:06:32:7b:ad:54:90:60:e2:14:21:f5:
         e5:f1:0d:58:4c:4b:5a:ab:c4:c7:9c:85:88:b6:3d:78:b7:52:
         b2:97:81:e1:5f:8c:d4:25:81:64:0d:b5:43:c7:16:e6:02:03:
         96:23:f7:f1:2b:78:17:f2:75:e9:28:3a:39:8b:3a:a1:6c:b1:
         b6:c8:3e:90:bb:1b:a5:d9:18:cd:a1:9a:78:43:7f:16:8a:30:
         92:c1:79:6d:be:06:dc:6a:42:5b:ba:3d:b9:99:7c:d7:2e:b8:
         07:84:23:66:ba:88:9b:8e:05:a2:af:e2:d7:07:1a:5e:bd:d8:
         2c:ea:df:0c:85:ee:6a:c0:ec:28:05:f4:46:65:f4:2e:d2:8f:
         64:aa:1c:3d:87:92:57:e1:d6:e5:f8:a9:f3:1b:b2:07:45:ac:
         6c:b2:35:3a:dd:a8:df:9e:68:fe:1d:3d:d1:3c:b6:a8:b0:b9:
         b3:36:1f:43
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUYr/XWMv4l6aTelgbBK44qZ9VD2wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjQxMjZaFw0yNzA1MjEwNjQ2MjZaMDMxMTAvBgNV
BAMTKEUxQzc3Nzg5MEM1MkE2NkU0MkUyNDQ2M0M0MUYxQ0VDM0NFMUE4RjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClapf104eIVENCSny8IdAEUghA
MhyQyPTjoUtQd7qDwkyGEZs5A4MGeOyaBQf70Ke3Egj2h1gNRIi/dN/uepwv8OPd
v2+CC8tmbVk9R8hVVVG/Mlua4WCMAPgMLx4f6cPRul1KjK/p7B8SUlDxnXg8C+Nu
OB35htwcwHGD1000R/tNr6LWi5n+2IbVtUzXoz4A7hNyHCh46lVKX0+367kboyeS
9hEtMF78VboSH4cUrQO867dQQnOJYHhkRt0omaVjFQnIBUj+f9HDIEVbvKFnQoLd
vsnCHXDpjVehR2WJ02LYqToxTfOLmKDpNYtStYvO1wsQJOg5pf6u4JfT+RM1AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU4cd3iQxSpm5C4kRjxB8c7DzhqPMwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMDE2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqhbjANBgkqhkiG9w0BAQsFAAOCAQEAOdjB
lugLnFIZ290FJcu/fizOqpBEXM4kGjOngOoBlIBfpX9dE1Q0HtM80z5+A/c/MtB0
8rCeMZ//ijM5ZsidNa5rvrdQOTMibLC+boAkLgYye61UkGDiFCH15fENWExLWqvE
x5yFiLY9eLdSspeB4V+M1CWBZA21Q8cW5gIDliP38St4F/J16Sg6OYs6oWyxtsg+
kLsbpdkYzaGaeEN/FoowksF5bb4G3GpCW7o9uZl81y64B4QjZrqIm44Foq/i1wca
Xr3YLOrfDIXuasDsKAX0RmX0LtKPZKocPYeSV+HW5fip8xuyB0WsbLI1Ot2o355o
/h090Ty2qLC5szYfQw==
-----END CERTIFICATE-----