Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143081.roa
File:                     AS143081.roa (raw, json)
Hash identifier:          /XvTbRB5sKS4cbcRkUiJELxYQgZdgKpkEHm7v79AJic=
Subject key identifier:   B3:73:EB:5B:9D:B3:F7:AA:34:08:D6:DB:87:40:3C:A3:FC:FA:FA:F0
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       726B613C445E329616D2C889DA1B3343273B3A77
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143081.roa
Signing time:             Fri 22 May 2026 04:27:02 +0000
ROA not before:           Fri 22 May 2026 04:22:02 +0000
ROA not after:            Fri 21 May 2027 04:27:02 +0000
asID:                     143081
IP address blocks:        240a:a1af::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:6b:61:3c:44:5e:32:96:16:d2:c8:89:da:1b:33:43:27:3b:3a:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:22:02 2026 GMT
            Not After : May 21 04:27:02 2027 GMT
        Subject: CN=B373EB5B9DB3F7AA3408D6DB87403CA3FCFAFAF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fd:b0:38:d5:2b:2b:4d:2b:a5:ad:4d:09:55:
                    33:c9:2b:f2:e3:6e:c7:26:74:bc:22:ab:50:67:f2:
                    ac:96:9c:9a:28:81:d4:fd:e7:d7:71:43:e5:fb:bd:
                    89:72:53:07:53:02:0b:4f:f7:e6:e2:9a:77:bd:2e:
                    f1:fd:55:00:40:2c:3a:80:d1:d1:de:cc:d5:92:bc:
                    b0:36:01:a3:82:b2:88:b5:93:ea:e5:a6:9b:dd:3a:
                    ca:1b:55:9e:a9:e5:2c:d5:f7:b1:81:c0:d9:13:c2:
                    ce:40:2e:8e:e9:b4:b7:5b:96:d8:58:48:92:bf:99:
                    70:cb:ce:e3:74:56:e3:a1:c5:c3:c5:bf:0c:f5:3f:
                    fb:fc:60:dc:ec:67:74:62:e4:4c:de:c2:3f:46:fb:
                    b4:af:09:c4:91:34:1e:a0:a2:96:39:a2:fe:fe:69:
                    60:2b:cb:f7:dd:cb:21:46:1e:6b:72:28:ee:b8:cd:
                    8f:2b:1c:83:51:bd:aa:3f:34:6d:45:bf:c9:87:b4:
                    ea:03:4f:a8:26:60:43:dc:61:54:3b:cd:43:81:77:
                    75:9c:f2:2f:4a:28:4a:dd:49:96:68:86:32:24:e0:
                    99:41:da:8e:f6:a6:52:97:1c:c1:ed:01:9c:5a:b6:
                    ce:b2:a2:66:72:d8:07:53:c1:09:97:ce:82:69:4a:
                    24:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:73:EB:5B:9D:B3:F7:AA:34:08:D6:DB:87:40:3C:A3:FC:FA:FA:F0
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143081.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a1af::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:c1:96:f1:d3:62:1e:15:68:cd:2d:c3:9c:d9:89:ac:80:66:
         6f:e9:81:16:59:39:6c:a2:bf:83:56:36:de:a9:fb:3f:ff:31:
         11:06:6c:77:3d:f4:9a:3a:c2:02:9a:ff:40:f6:3b:04:ea:eb:
         99:31:1b:f3:70:bd:63:07:89:e9:f8:fa:b5:16:58:44:cb:ed:
         f8:d1:c5:c1:0a:76:6a:29:40:c9:2d:6b:db:d5:59:3e:84:68:
         26:d4:1f:30:d7:68:90:60:64:e0:32:bd:16:d1:ea:8d:4d:91:
         dc:07:98:b1:ab:71:64:1a:97:d6:64:6e:9a:1e:43:a1:8a:89:
         97:7d:b8:2f:df:43:81:a2:df:90:84:a0:1f:5a:20:f7:4b:ea:
         94:63:d7:fd:3d:7b:50:58:98:ca:d3:e0:6a:02:54:5c:bb:9d:
         2d:4a:92:f1:e8:1d:8f:0f:9e:a4:1a:b4:26:e4:65:23:3d:4b:
         cc:f7:9a:64:be:c1:a8:a6:3b:6b:3f:4c:46:ca:6f:e4:1a:f8:
         49:1f:93:2a:31:c3:a9:1a:c6:d4:8b:9a:78:27:c0:82:40:5e:
         13:6a:f6:1f:ba:fd:4e:b5:7a:0d:33:7c:62:c5:6a:31:77:8e:
         ca:39:c5:45:eb:9f:22:2d:db:d6:ba:dd:28:35:1b:23:f5:b7:
         d1:fb:d8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:38 2026 by rpki-client