Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143050.roa
File:                     AS143050.roa (raw, json)
Hash identifier:          7df76j8kAVyasK2gE+K4xUblTwcv80m6MxbHURsRX+o=
Subject key identifier:   8F:C7:6B:82:C2:E8:26:40:B5:06:7D:DF:1E:B2:7A:39:91:F5:4F:DF
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       71F6405CFE2F9A545AFBB8B378F6DA26EE5165E0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143050.roa
Signing time:             Mon 25 May 2026 03:19:34 +0000
ROA not before:           Mon 25 May 2026 03:14:34 +0000
ROA not after:            Mon 24 May 2027 03:19:34 +0000
asID:                     143050
IP address blocks:        240a:a190::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:f6:40:5c:fe:2f:9a:54:5a:fb:b8:b3:78:f6:da:26:ee:51:65:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:34 2026 GMT
            Not After : May 24 03:19:34 2027 GMT
        Subject: CN=8FC76B82C2E82640B5067DDF1EB27A3991F54FDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:75:d5:a9:a2:5f:7d:3a:4d:57:7e:21:f9:d7:
                    f9:9d:81:ea:df:bb:ce:fc:73:8c:d5:ba:47:93:e5:
                    71:36:16:43:7f:81:fb:5e:e1:00:5e:aa:a3:c4:a0:
                    63:66:7f:43:8c:bf:a0:fd:76:bf:09:77:be:be:16:
                    cb:e7:73:4d:ed:f4:c4:bb:de:b8:45:ef:fd:a3:80:
                    6b:bc:92:c0:35:26:bd:25:63:9d:c8:dd:a5:28:3c:
                    65:ba:23:53:8b:d5:14:8d:f3:c6:24:12:ad:e8:ab:
                    9c:d7:45:a5:5f:fc:5a:39:d6:97:7f:e1:11:39:56:
                    2e:4a:2c:87:bf:7e:32:ab:38:cf:cc:72:ea:74:fb:
                    91:a9:b1:e7:6f:43:65:a8:4f:e5:21:f9:11:fd:e8:
                    d6:26:fe:37:bb:48:fe:11:be:37:ab:c6:22:a0:85:
                    ca:c3:3d:6e:51:1e:9b:c8:d7:44:f1:2b:87:67:d4:
                    76:e4:cd:ef:74:59:40:6b:62:c4:89:a8:89:68:88:
                    2d:24:f2:b2:a2:34:76:46:2e:d9:23:4b:52:61:1e:
                    66:0c:19:eb:b8:21:db:b4:42:fb:14:99:71:fd:fe:
                    0c:f9:33:e8:bb:e2:e2:a8:82:f7:5c:89:4d:d5:2b:
                    cb:1c:c3:00:5b:99:4f:1b:57:07:f4:5b:2c:2c:2b:
                    12:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C7:6B:82:C2:E8:26:40:B5:06:7D:DF:1E:B2:7A:39:91:F5:4F:DF
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143050.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a190::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:01:f5:9d:4e:b8:b6:2c:cf:2c:b6:09:1c:4e:8a:1c:27:0d:
         dc:c0:34:20:fe:8e:da:8d:47:19:ff:f3:d9:98:95:9e:c0:0e:
         e4:98:00:f2:38:0c:9f:db:af:49:7d:97:d9:42:45:86:02:45:
         87:3d:63:41:1d:56:b8:7b:1d:97:22:6e:c7:11:ac:7a:b0:f6:
         09:3b:f8:a3:c1:db:3d:8f:61:fe:fe:9f:80:11:a7:de:55:32:
         be:e4:ae:e8:5d:fd:d5:4f:d8:d4:2c:f4:cb:8f:99:78:3c:99:
         33:3a:6d:b7:1c:66:eb:a4:c8:ab:de:d0:f5:e0:ae:a4:9f:c6:
         ae:a1:ad:de:6a:2d:40:2b:ed:07:5f:d7:3c:03:fa:aa:8c:53:
         9e:f1:3e:1a:2a:ba:7f:9a:70:99:a5:18:7e:f5:84:c1:78:b5:
         65:c5:06:a1:e5:43:a5:ed:0e:37:df:ce:1f:30:46:60:ec:1a:
         06:41:88:8c:aa:f3:ff:74:0a:bf:14:09:d3:70:23:a5:f0:b5:
         ba:33:cc:7b:bc:70:8c:c8:2f:af:72:4b:dc:20:2a:34:1d:74:
         92:df:f5:57:54:f0:49:bd:2c:1e:07:c7:44:54:8d:48:d4:28:
         86:ad:b4:ce:22:c3:85:a7:b0:fd:fb:92:ca:51:0f:a5:3a:81:
         68:ee:a7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:53 2026 by rpki-client