Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143078.roa
File:                     AS143078.roa (raw, json)
Hash identifier:          5WiVjHGmXTGi5rSTAw4ESlJLP+/OMsFdAH3PJBtnjvg=
Subject key identifier:   F2:4A:A9:32:97:53:9E:E6:A1:A7:28:63:0D:F1:D7:34:AB:C2:AB:BF
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       161C9B895800AAD3F17A320BBCE6B870BB120CEB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143078.roa
Signing time:             Fri 22 May 2026 04:08:33 +0000
ROA not before:           Fri 22 May 2026 04:03:33 +0000
ROA not after:            Fri 21 May 2027 04:08:33 +0000
asID:                     143078
IP address blocks:        240a:a1ac::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:1c:9b:89:58:00:aa:d3:f1:7a:32:0b:bc:e6:b8:70:bb:12:0c:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:03:33 2026 GMT
            Not After : May 21 04:08:33 2027 GMT
        Subject: CN=F24AA93297539EE6A1A728630DF1D734ABC2ABBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ff:7f:94:a8:f6:c9:4a:43:33:78:3d:49:42:
                    48:d0:fc:fc:fd:7d:5d:44:29:a4:34:a1:8c:ce:8c:
                    2e:47:54:a9:bb:28:01:ec:46:8d:82:7f:62:95:7a:
                    d6:46:d7:02:4c:37:fd:b8:bc:36:a8:0c:f1:07:5c:
                    23:f8:41:fc:78:21:05:2f:c5:4e:64:9d:7b:7d:e4:
                    3e:b1:36:c9:c3:bd:d5:60:db:0e:aa:29:8d:d8:3d:
                    a9:63:b5:25:8e:83:4b:f2:19:f1:6f:b0:b2:87:eb:
                    15:fa:be:76:bf:d2:8f:e9:6b:13:2c:78:19:26:4f:
                    3b:09:5b:46:2b:df:51:93:6d:a2:1c:47:a8:75:ad:
                    86:11:74:42:12:bd:64:57:0d:0b:5b:8c:7a:1b:69:
                    f7:11:a6:30:2f:47:a8:e8:90:ae:8b:d8:6f:5d:7f:
                    a2:c3:ee:5d:45:41:06:f3:7b:d3:6f:8f:70:07:a8:
                    8e:72:40:f4:f5:24:3a:a1:63:9b:73:ee:0f:98:81:
                    16:25:9e:ce:19:b3:56:a1:ed:04:6e:ab:d1:10:ad:
                    22:7e:cd:98:aa:4b:9b:24:ee:10:61:f6:b5:62:fe:
                    58:88:2c:11:7b:8e:f4:83:e1:e0:fd:56:c2:73:83:
                    8a:6f:e7:43:23:d2:ec:8b:92:19:bb:03:7f:17:0d:
                    35:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:4A:A9:32:97:53:9E:E6:A1:A7:28:63:0D:F1:D7:34:AB:C2:AB:BF
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143078.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a1ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:78:f2:dc:f9:71:4d:71:e9:21:71:15:9d:aa:3d:cd:76:0e:
         0e:87:88:bf:18:d4:50:02:c3:22:6d:ef:bf:fe:11:6b:d7:6b:
         2d:56:7c:a8:2c:fa:11:56:74:ef:df:12:9b:06:04:33:41:b3:
         a4:89:49:6b:49:67:f7:11:68:19:94:a7:87:34:e7:2e:5f:4c:
         78:c7:4a:27:b9:9d:3f:a3:3a:ea:82:c7:1f:1c:17:49:9e:ef:
         ac:12:e5:b1:a8:0f:6c:5b:68:63:eb:c2:5b:50:4f:b2:a5:43:
         c1:55:ec:79:99:4c:35:8b:14:61:67:b1:f3:87:84:11:f8:ca:
         f2:ff:74:9a:3c:92:1b:9c:11:39:ec:e5:e9:70:a3:7d:3e:67:
         fe:cf:aa:99:63:e2:76:f4:4f:1b:52:e2:0d:59:d2:97:9b:c8:
         1f:fb:22:fd:c0:46:68:40:98:5f:f0:8f:ad:5f:df:07:94:3b:
         15:4d:ec:8d:bd:fe:f2:ca:f3:75:a5:eb:4f:ff:bc:12:0b:9c:
         75:a9:fe:a5:0f:68:9b:62:61:af:14:11:49:4f:35:bb:20:c2:
         63:e9:1c:1b:d8:02:52:44:17:30:f6:06:73:6f:8f:27:4d:60:
         ed:db:0b:e2:d3:11:b3:e3:7d:cf:2e:b9:e6:d9:0f:9d:96:42:
         71:25:7d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----