Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143047.roa
File:                     AS143047.roa (raw, json)
Hash identifier:          iTHS608JGiZY+rsTOWf4BiQzMP7ZMDBUX4w+gpYM2V0=
Subject key identifier:   35:74:D9:C4:85:CF:28:D2:E1:B1:31:DA:76:51:66:CC:67:0E:95:E6
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       078CFB9735A1BFE154F645D0BC54E71BB04149DB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143047.roa
Signing time:             Tue 26 May 2026 06:30:35 +0000
ROA not before:           Tue 26 May 2026 06:25:35 +0000
ROA not after:            Tue 25 May 2027 06:30:35 +0000
asID:                     143047
IP address blocks:        240a:a18d::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:8c:fb:97:35:a1:bf:e1:54:f6:45:d0:bc:54:e7:1b:b0:41:49:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:35 2026 GMT
            Not After : May 25 06:30:35 2027 GMT
        Subject: CN=3574D9C485CF28D2E1B131DA765166CC670E95E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:67:45:8f:fa:bb:ab:c7:4f:af:0b:c4:b8:00:
                    c5:22:45:37:d7:01:7c:2f:55:db:a4:01:be:2c:b2:
                    8a:6b:69:66:3a:d6:84:b1:14:b2:50:a8:cc:86:5c:
                    13:c8:eb:05:e2:d5:f6:44:8d:e4:f5:6d:bc:0b:0d:
                    ac:4a:4f:6d:23:13:75:7f:9c:84:ea:ab:7b:bd:87:
                    ea:94:82:0f:15:0b:ea:ff:42:0c:51:1d:21:ee:35:
                    0e:d7:af:31:f3:ac:77:76:cd:90:c6:a0:77:08:27:
                    d9:59:93:8c:4d:b1:1e:e3:1f:7e:8c:ea:8e:c0:69:
                    59:23:a2:ba:97:77:73:c4:d0:1b:5f:75:aa:d3:b0:
                    e2:c4:c9:5b:8f:bb:10:f9:d1:63:98:5f:d7:90:a2:
                    af:6c:88:04:79:b6:dd:9f:0c:1f:84:2c:ab:05:1c:
                    1b:8e:de:60:3b:85:e3:de:c4:d5:65:06:08:8e:f6:
                    09:e0:ef:db:bf:cc:91:f8:0e:dc:27:85:51:d8:74:
                    e8:a6:46:49:34:fd:ba:f0:1b:e2:b1:fd:f6:d2:36:
                    f8:63:4f:6d:4d:40:80:f1:f7:15:11:9a:2d:7a:2f:
                    71:c9:9c:ab:ee:0f:6b:c9:81:7f:a1:58:03:b6:f8:
                    7f:17:90:8b:28:20:07:89:e2:df:0a:99:2e:ac:a6:
                    7d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:74:D9:C4:85:CF:28:D2:E1:B1:31:DA:76:51:66:CC:67:0E:95:E6
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143047.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a18d::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:9b:18:de:eb:c2:07:72:e6:71:05:4c:e8:cf:c3:e5:9c:c8:
         a2:50:b9:28:77:2b:96:8e:a0:b0:6f:ba:1c:cd:af:1d:a6:05:
         88:3b:34:92:fc:05:d4:97:17:ab:2b:96:8e:79:4a:b4:2c:38:
         d6:82:7e:d0:0e:0d:34:18:a8:fc:6b:bf:35:57:0c:29:90:75:
         ad:58:9c:be:53:66:35:a1:e7:67:48:c0:ad:1a:51:80:33:43:
         5d:83:08:e1:09:6f:6d:db:1a:f8:d3:8e:8c:04:8a:57:1d:8c:
         a4:a7:9e:de:c6:3b:bc:38:46:db:3a:fa:c4:44:d3:3a:f4:35:
         28:1c:14:27:5b:eb:51:7d:7b:5b:b1:60:48:8e:38:40:df:bf:
         d7:1e:b5:c5:da:6b:aa:03:fa:85:2c:a6:9f:58:59:64:50:65:
         ca:86:3b:78:9f:15:be:90:e8:0b:05:92:e6:04:09:9c:9f:ba:
         32:f9:e8:3c:d1:74:1b:4e:c1:a5:de:c0:cf:30:e2:af:20:14:
         20:99:c4:ca:7d:cf:fc:c2:bf:6e:f1:1e:b7:94:f5:35:4d:e2:
         47:08:d1:56:90:53:1d:c8:c0:31:a1:3b:2e:bc:4c:6f:83:80:
         8f:5f:16:cd:fe:b2:93:24:bf:df:e0:d5:7c:11:01:eb:92:80:
         14:e1:01:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:04 2026 by rpki-client