Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143070.roa
File:                     AS143070.roa (raw, json)
Hash identifier:          yJpeG45IK3V4loONE+YOR0RV5IGTDPYc/4Rzj8QjpAE=
Subject key identifier:   3A:6B:C8:3D:28:5A:92:A4:DC:69:C2:9F:24:5A:58:01:19:8A:1E:2D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7F31786E39EC5035BB63DB1DD09A1798D4F008F4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143070.roa
Signing time:             Fri 22 May 2026 06:58:39 +0000
ROA not before:           Fri 22 May 2026 06:53:39 +0000
ROA not after:            Fri 21 May 2027 06:58:39 +0000
asID:                     143070
IP address blocks:        240a:a1a4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:31:78:6e:39:ec:50:35:bb:63:db:1d:d0:9a:17:98:d4:f0:08:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:39 2026 GMT
            Not After : May 21 06:58:39 2027 GMT
        Subject: CN=3A6BC83D285A92A4DC69C29F245A5801198A1E2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d3:58:0f:b4:90:b8:a5:4c:43:50:01:22:81:
                    5d:79:4e:32:d5:5e:65:dd:54:7a:3d:e1:40:99:1e:
                    72:6a:35:04:5e:0f:5c:a5:07:5d:98:76:11:25:c4:
                    86:d9:e7:63:b0:26:ab:dc:12:5b:79:e7:68:91:b3:
                    aa:da:de:8b:49:c0:3d:18:b3:0e:54:23:c1:82:c2:
                    f0:b5:b5:38:5a:bc:d5:75:41:b6:b5:a3:b0:5c:64:
                    c7:f4:c2:71:da:25:7d:1f:de:bc:84:33:bc:9c:b0:
                    3b:f5:bb:16:b2:fa:06:13:fd:6a:b1:c7:e4:f5:9b:
                    dd:f9:72:24:bc:77:be:54:a0:55:35:dd:00:61:e0:
                    8e:70:e3:aa:3f:e4:0d:f9:05:95:92:cf:82:40:16:
                    cb:9b:10:0c:4c:37:38:c8:a7:ba:21:2e:1c:e6:f2:
                    a7:31:24:ca:4f:76:d5:4b:b5:0c:8a:86:32:20:5b:
                    85:d8:65:81:fa:0f:4c:b2:41:c3:9b:2f:37:b5:cf:
                    6e:99:d3:78:5e:95:3a:5f:b5:63:f4:6e:a4:88:63:
                    93:a4:99:5a:a6:a1:17:62:fd:86:c4:1c:d7:f2:f4:
                    5f:36:95:7d:d6:33:37:e2:d1:96:79:53:18:2b:0d:
                    74:80:79:1e:50:59:6a:aa:e6:a6:01:70:f3:31:8d:
                    95:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:6B:C8:3D:28:5A:92:A4:DC:69:C2:9F:24:5A:58:01:19:8A:1E:2D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143070.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a1a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:10:ae:c0:dc:a2:84:66:ea:fa:df:c6:91:1f:ea:b0:0b:94:
         2e:6b:41:27:f1:0c:53:46:20:30:87:0e:4c:7b:7d:cd:b2:ba:
         ac:10:49:ee:c6:d3:5f:24:a8:c0:68:0e:61:1c:47:43:65:22:
         11:57:11:68:70:68:c2:f7:18:7c:9e:b3:2b:fa:31:58:40:42:
         65:b2:41:06:d2:ea:9d:5e:f9:a0:d5:e5:3d:07:92:1f:a9:86:
         f0:9c:92:aa:6b:74:09:64:7b:26:92:dd:1c:fd:29:c1:6c:36:
         9c:33:b4:37:cd:1f:47:ce:57:ef:a0:e3:33:c3:d6:46:d0:01:
         6f:85:57:6f:08:72:5c:e5:5f:07:37:29:ab:c8:0a:4d:c3:13:
         fc:63:4f:89:24:07:fa:fe:04:37:fb:f3:1c:5b:4f:54:4f:14:
         4d:a0:af:f5:98:ec:74:d3:c1:96:c4:f6:ec:58:0c:16:2e:f5:
         82:7d:3c:57:3b:5a:fd:b1:ab:7f:13:c0:87:0d:08:48:12:86:
         55:9a:62:ab:98:98:83:5e:9c:fb:8b:6b:61:4b:40:cb:74:82:
         4d:c1:25:77:e9:18:70:71:80:28:dc:0c:a5:f6:61:2a:da:e1:
         6c:ad:57:f3:6d:03:86:41:67:78:5e:67:20:f5:39:96:99:a8:
         71:01:ab:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----