Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143053.roa
File:                     AS143053.roa (raw, json)
Hash identifier:          B0mJ2TvPyMqCxi4Su3MJYNF12wIosWBltWKDRqXBoSM=
Subject key identifier:   FE:C7:81:DE:35:5C:16:79:B1:25:BD:36:73:BC:78:86:0E:55:37:9F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4374BA64DD7AA92A15FF37F6C7F258C94C550C35
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143053.roa
Signing time:             Fri 22 May 2026 06:46:30 +0000
ROA not before:           Fri 22 May 2026 06:41:30 +0000
ROA not after:            Fri 21 May 2027 06:46:30 +0000
asID:                     143053
IP address blocks:        240a:a193::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:74:ba:64:dd:7a:a9:2a:15:ff:37:f6:c7:f2:58:c9:4c:55:0c:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:30 2026 GMT
            Not After : May 21 06:46:30 2027 GMT
        Subject: CN=FEC781DE355C1679B125BD3673BC78860E55379F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e5:ea:f2:4a:4b:23:2a:6b:32:ae:04:18:79:
                    a8:52:d3:67:48:c6:5c:a6:9a:70:6d:39:81:4d:48:
                    16:3d:63:65:3c:43:73:19:60:dc:fe:13:db:af:a2:
                    84:b8:b7:a6:a3:24:7f:0b:01:73:54:70:91:63:f4:
                    79:7b:a4:b8:24:d5:11:88:64:a5:c5:c5:95:b1:a1:
                    f5:d5:ce:c2:44:3e:52:ad:c2:0f:6e:ba:26:eb:ed:
                    ba:d5:e2:1b:b0:f1:b3:f4:e5:83:87:d9:b7:44:b1:
                    7f:7f:92:89:ef:3e:3f:ce:b5:fa:4e:e3:87:a7:81:
                    69:7e:07:e0:2d:c6:66:5f:37:44:ad:1e:c9:0c:71:
                    49:d8:05:55:e8:19:4a:2b:9b:f1:2c:3e:00:5a:76:
                    f1:59:6a:a2:57:ed:2d:32:c1:fe:9c:68:6b:21:39:
                    03:87:e0:53:03:0f:f0:3b:26:69:6c:e0:3d:8c:ae:
                    47:6a:5b:4a:51:76:0a:ad:44:5c:76:82:af:8d:77:
                    b0:6e:8d:0d:2b:e8:4c:41:bc:cb:4e:31:2b:ac:aa:
                    2f:e6:de:6b:22:01:19:92:9f:a7:35:d0:7e:59:01:
                    0b:56:45:9e:68:a9:27:15:9e:93:87:fb:b1:6d:c2:
                    62:52:7e:05:cb:f3:93:f7:37:2a:28:e5:76:10:a0:
                    bc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C7:81:DE:35:5C:16:79:B1:25:BD:36:73:BC:78:86:0E:55:37:9F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143053.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a193::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:4e:da:3f:62:9d:d9:f5:4a:48:9a:4c:88:8d:93:fd:9a:a2:
         2a:b8:11:49:da:66:8d:32:f2:74:4f:a1:1f:85:cb:87:ed:e6:
         19:93:64:bb:99:f0:37:e7:66:18:93:2c:f1:ff:df:11:cb:e9:
         ff:aa:5e:53:75:9f:62:70:e9:d7:52:d0:b1:21:e8:57:70:56:
         72:36:e3:a5:a6:78:c3:da:2b:8d:36:9e:aa:f5:51:e0:21:7f:
         80:88:32:cb:42:a8:49:6c:4c:0b:7f:31:22:3b:9c:9f:7f:b6:
         13:77:e8:14:31:8d:11:7f:5d:98:69:a0:57:0f:e1:77:3c:21:
         98:8b:50:59:6d:97:32:e1:a1:c3:b5:d5:05:f0:a8:a2:e1:a3:
         ac:4f:55:5f:90:d6:75:9f:28:56:5f:a0:7f:1b:d5:4e:5d:a5:
         8c:cc:1a:05:e8:ad:03:12:6b:4f:9f:57:6c:66:ce:ff:99:27:
         ad:1e:4a:8e:1a:aa:78:97:9d:f2:f7:49:54:7f:01:eb:31:60:
         84:00:53:52:84:94:26:36:75:22:3e:5e:d2:a6:dc:22:f3:05:
         96:79:f3:46:81:2d:94:28:e7:24:5c:aa:e8:54:cb:f6:fa:42:
         89:8f:0e:4a:6b:c1:4b:f2:c8:7a:18:59:d8:ce:d9:89:bb:6b:
         41:19:08:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:13 2026 by rpki-client