Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143087.roa
File:                     AS143087.roa (raw, json)
Hash identifier:          Uaw/9pARMvGB9t90noRNNK78tWnPlwg6hZKP1TRGE+I=
Subject key identifier:   7F:6F:5C:20:6C:F9:A9:8F:C6:1B:51:39:0B:EB:53:96:2B:02:96:38
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       06FB007AC3A7CCA22ECB5D801AB66E3AC21F320B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143087.roa
Signing time:             Fri 22 May 2026 06:05:28 +0000
ROA not before:           Fri 22 May 2026 06:00:28 +0000
ROA not after:            Fri 21 May 2027 06:05:28 +0000
asID:                     143087
IP address blocks:        240a:a1b5::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:fb:00:7a:c3:a7:cc:a2:2e:cb:5d:80:1a:b6:6e:3a:c2:1f:32:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:00:28 2026 GMT
            Not After : May 21 06:05:28 2027 GMT
        Subject: CN=7F6F5C206CF9A98FC61B51390BEB53962B029638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5c:50:cb:4a:21:43:6e:98:df:d8:4d:2c:7a:
                    0d:33:c9:fb:3a:ac:66:46:61:cf:90:7e:c7:84:57:
                    7a:98:c8:0d:61:0b:20:5d:88:63:32:c3:7a:f0:e3:
                    db:28:5d:1e:c6:2d:94:e9:79:a6:69:65:30:df:30:
                    93:1a:91:5b:ad:ae:9b:95:8d:88:94:5e:4f:a6:9e:
                    6e:13:7a:11:23:66:ad:ee:10:cf:0e:34:0e:c7:bc:
                    0c:72:a0:e6:1b:9e:7c:61:26:13:fc:1c:b7:a6:9d:
                    8f:0d:c3:67:ad:33:2c:57:b5:e9:66:0c:02:60:62:
                    e3:9e:09:e6:60:27:44:03:13:a8:3c:d5:1a:42:36:
                    ec:e4:03:8a:8c:7e:e2:b9:e2:dd:7a:22:bf:26:44:
                    67:e8:27:a7:4e:53:8f:e3:53:4b:56:4f:02:b2:55:
                    3f:1d:1e:bc:55:bf:12:62:33:ba:32:8d:bd:4e:24:
                    bd:dc:ba:d4:6f:6b:60:b4:ad:49:67:7b:ff:f9:af:
                    4f:6e:50:1b:7d:6d:7d:b4:7a:f2:96:00:d0:00:a6:
                    74:55:1a:5c:87:50:10:1c:ce:6a:0c:ba:02:56:5e:
                    f2:42:1c:94:65:70:f2:7e:99:ce:23:8b:d0:9c:7f:
                    52:a1:44:18:41:53:d3:87:91:cf:78:3c:7f:3f:91:
                    07:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:6F:5C:20:6C:F9:A9:8F:C6:1B:51:39:0B:EB:53:96:2B:02:96:38
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143087.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a1b5::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:96:33:93:51:eb:91:47:20:da:fb:e8:bd:7c:d9:f7:8a:7a:
         4f:89:2b:4c:15:33:05:d6:39:89:64:21:2f:f3:d6:a5:f2:fa:
         4f:50:50:32:54:6d:19:fc:f8:05:df:32:93:99:a4:be:e0:95:
         67:d2:b9:4a:70:65:10:0d:62:48:9b:e5:a5:41:b1:fc:89:42:
         22:67:01:9c:a8:4a:a3:32:10:61:32:15:1f:77:61:4a:d2:33:
         6c:10:f0:96:30:18:67:57:a8:df:04:0d:a1:06:6b:78:f8:dc:
         3c:1d:6b:8c:05:2b:7d:c4:eb:92:b5:1a:89:e3:05:e0:5d:06:
         61:f9:af:cd:96:41:26:3f:d1:43:19:a7:5c:f4:b2:3c:ec:b7:
         fa:92:e8:df:eb:6f:4a:ea:6f:6f:ae:30:e3:5c:2e:08:9c:5d:
         e9:82:f3:7a:96:be:40:01:03:16:f0:ea:d5:7e:6a:c9:24:88:
         69:6a:6e:c0:3b:a8:07:95:b3:3f:2f:e1:ae:d5:d0:98:9c:4f:
         6f:b8:26:5c:a5:2a:96:1e:65:21:78:53:7e:3f:f7:11:2f:4c:
         32:60:33:76:10:f2:3e:02:3c:6e:b3:45:17:df:15:87:4a:56:
         06:03:08:ff:4c:3e:f2:9f:92:3c:d4:c9:5e:ed:8e:c9:27:bf:
         58:f2:07:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:34 2026 by rpki-client