Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143027.roa
File:                     AS143027.roa (raw, json)
Hash identifier:          GwlkmVIoT7TMZjPxC7p34tiGyloMZa+5d+MkG0acShA=
Subject key identifier:   5E:EC:B8:B4:5E:5D:48:13:9A:35:A3:F6:42:9F:6A:18:9C:70:F3:21
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       443923AAB9EE9A321BA36C00BB5E9C4763740BFC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143027.roa
Signing time:             Tue 26 May 2026 06:12:34 +0000
ROA not before:           Tue 26 May 2026 06:07:34 +0000
ROA not after:            Tue 25 May 2027 06:12:34 +0000
asID:                     143027
IP address blocks:        240a:a179::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:39:23:aa:b9:ee:9a:32:1b:a3:6c:00:bb:5e:9c:47:63:74:0b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:07:34 2026 GMT
            Not After : May 25 06:12:34 2027 GMT
        Subject: CN=5EECB8B45E5D48139A35A3F6429F6A189C70F321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:24:16:6a:19:32:94:b9:9f:e8:9d:a9:7f:23:
                    c2:d8:35:63:e7:f6:4e:71:a3:be:be:62:6d:14:5b:
                    c0:d6:b5:62:8b:4b:95:9d:92:4b:73:4e:7b:d8:a4:
                    4c:e6:7a:9c:ab:3f:03:5d:f6:9d:7b:9b:01:77:4d:
                    b3:d8:7a:4f:ba:96:ea:3b:3b:23:ed:29:4f:ce:1c:
                    af:e9:da:5a:d5:13:33:1d:72:e6:19:65:32:62:e8:
                    0d:b1:55:94:82:db:2a:7b:e3:7c:42:e2:bc:ce:34:
                    09:93:09:84:14:e2:df:9d:12:30:a1:3a:d7:9f:e4:
                    c2:dc:82:7c:86:af:1e:44:c0:d0:ee:82:95:e4:6b:
                    e5:e9:cf:b8:53:0c:36:8f:a8:f4:02:17:cd:c2:a6:
                    b5:a4:06:3a:53:96:ac:3a:4e:8d:e6:56:6d:be:7b:
                    a1:3b:4d:aa:3a:f4:a3:5c:cf:b6:90:dc:36:31:97:
                    ba:84:d3:83:bc:b8:e0:5d:fd:90:3f:2c:87:03:0f:
                    2b:04:47:be:ba:ae:18:df:ca:cb:b2:4a:1d:8e:2d:
                    ee:5a:cf:9a:02:43:f8:6c:94:3b:e6:b2:79:f7:01:
                    a6:d5:96:53:0c:a8:23:c4:d2:b6:55:23:bd:fd:31:
                    02:00:3b:c2:c3:c0:06:eb:8e:8e:dc:fd:6e:1b:d6:
                    ee:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:EC:B8:B4:5E:5D:48:13:9A:35:A3:F6:42:9F:6A:18:9C:70:F3:21
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143027.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a179::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:7d:c0:de:39:45:b5:d5:d3:33:01:e8:46:06:b7:4d:c1:d7:
         e7:3a:46:e1:4f:dc:62:1c:25:9b:36:c8:58:80:99:ca:b7:ff:
         f5:f4:4a:13:fb:c7:ae:93:5a:33:2b:0e:d8:ea:c3:b8:99:fc:
         a2:92:3b:d3:a8:74:f9:b4:5b:eb:11:00:b6:d5:83:a1:8d:c7:
         1f:c1:4e:09:bc:a5:30:05:1e:36:d2:06:71:6b:62:3e:44:09:
         39:0e:00:9e:63:2f:b3:51:87:60:46:70:5d:fc:b6:b7:2f:cb:
         c9:63:9d:f2:96:6f:ff:a9:71:cc:9a:16:a2:60:0b:0a:99:a1:
         36:b3:65:c5:00:21:78:f7:4e:47:48:c0:e8:d0:27:0e:ea:df:
         8b:9d:18:7f:4e:a3:d8:af:92:8d:83:7f:5d:c3:40:c9:f4:e5:
         36:dc:b0:68:4d:c5:07:d0:b1:fe:67:98:9a:fc:8f:fb:bc:00:
         29:d4:5d:af:2b:f7:d3:2e:3c:04:41:00:ab:19:fe:d0:73:f3:
         4f:9c:d7:0d:95:27:ee:89:e6:e3:e2:07:3f:85:40:51:2d:9e:
         89:4b:63:64:a2:30:21:19:63:b4:e2:04:2a:4b:9a:ef:52:b6:
         7f:a7:a8:2c:cb:66:9f:42:f6:6f:e7:89:b4:b6:93:dd:5c:1f:
         b0:14:44:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----