Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143104.roa
File:                     AS143104.roa (raw, json)
Hash identifier:          RS2ogklawyw896gWnLiPXiNvp1eZTXtk09PKeJeJX6Y=
Subject key identifier:   2B:B5:75:C7:57:10:48:10:2B:CE:A6:45:34:48:7D:F9:16:78:1C:B2
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6D1D2AD4B4A085240B5F78ABFCE0FE175BB01061
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143104.roa
Signing time:             Mon 25 May 2026 06:28:37 +0000
ROA not before:           Mon 25 May 2026 06:23:37 +0000
ROA not after:            Mon 24 May 2027 06:28:37 +0000
asID:                     143104
IP address blocks:        240a:a1c6::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:1d:2a:d4:b4:a0:85:24:0b:5f:78:ab:fc:e0:fe:17:5b:b0:10:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:37 2026 GMT
            Not After : May 24 06:28:37 2027 GMT
        Subject: CN=2BB575C7571048102BCEA64534487DF916781CB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:01:24:00:6e:7d:4d:7b:64:04:d7:36:1e:09:
                    4f:31:1d:6f:15:55:b2:16:fc:ed:1d:2f:7c:42:59:
                    fa:29:a4:35:ce:76:92:f0:9c:cd:0c:14:ee:05:9c:
                    16:a5:16:d8:14:6b:8c:e4:79:a4:c3:b7:77:b6:48:
                    b7:1f:05:29:26:6e:e9:8f:5f:22:04:63:b6:06:81:
                    13:c0:55:9c:47:bb:4e:76:2d:e1:4f:d4:e6:f4:54:
                    82:71:99:84:33:b2:aa:71:64:19:dc:63:24:2f:f8:
                    22:d1:23:63:4a:58:d9:fd:a0:62:2d:18:55:23:14:
                    f2:7b:98:d2:1b:e7:b0:c1:c5:ab:3e:0f:96:6c:86:
                    7b:0f:f8:5d:f0:c7:67:0d:51:e8:a2:9d:c2:aa:25:
                    82:9d:ab:a3:1a:7e:4d:59:76:c4:f8:c3:30:c4:c5:
                    f2:b1:b4:1d:29:69:c2:d4:62:f8:ad:2c:af:db:fa:
                    d1:73:fb:f0:50:98:42:01:02:08:d6:69:7a:31:b6:
                    de:62:59:39:f1:87:46:89:ba:68:ba:e1:22:52:ab:
                    58:53:5f:f3:67:fe:e6:08:9f:a4:6f:55:cf:09:5d:
                    d7:f6:4d:14:0b:6f:b5:3c:ec:70:51:6a:ac:b8:9b:
                    2d:8f:2e:0e:6a:b0:36:ec:52:a4:fc:07:64:d2:4e:
                    6c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B5:75:C7:57:10:48:10:2B:CE:A6:45:34:48:7D:F9:16:78:1C:B2
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143104.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a1c6::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:45:97:90:50:6b:88:db:bd:56:b3:bc:d3:93:19:35:6a:b7:
         20:15:94:38:65:23:3e:72:5f:b9:bc:42:fe:ba:79:67:1e:cc:
         3b:c7:0c:bb:e6:c4:9d:72:02:21:08:7e:a8:94:d0:b6:76:ef:
         b5:73:9b:ba:a2:2d:a1:45:86:68:5e:fd:4f:d9:4e:9f:52:51:
         b3:3f:ac:6b:2e:9f:3c:b9:88:9b:56:73:02:5c:e4:59:1a:84:
         f0:bd:b0:8d:1e:9a:a0:6a:cb:39:94:d2:7c:87:33:3f:50:0d:
         08:64:75:7b:79:e1:cd:58:e0:dc:a3:e2:6c:85:e5:c8:fe:be:
         23:ea:78:04:7d:7b:a6:a2:d8:c4:c1:11:9b:f9:a4:4d:40:9c:
         78:0c:a2:b8:ea:95:7b:fa:7f:cf:ee:cd:49:ab:b8:5a:58:85:
         4c:14:8c:25:83:9c:1e:5e:e6:57:ca:e2:55:fc:89:99:e5:f1:
         91:3f:16:7e:dc:0c:d8:0b:dd:b2:08:0b:be:60:d5:1b:bc:79:
         b2:7c:33:2c:06:27:48:dc:d7:7c:32:07:25:bc:d9:92:9c:b1:
         7e:e5:18:d8:da:47:65:18:91:1d:d0:18:b2:6e:66:4a:02:a8:
         a9:3f:e1:60:be:cb:cb:c5:f0:2f:6d:02:9b:0f:a7:66:d1:38:
         82:e5:de:a4
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUbR0q1LSghSQLX3ir/OD+F1uwEGEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjIzMzdaFw0yNzA1MjQwNjI4MzdaMDMxMTAvBgNV
BAMTKDJCQjU3NUM3NTcxMDQ4MTAyQkNFQTY0NTM0NDg3REY5MTY3ODFDQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiASQAbn1Ne2QE1zYeCU8xHW8V
VbIW/O0dL3xCWfoppDXOdpLwnM0MFO4FnBalFtgUa4zkeaTDt3e2SLcfBSkmbumP
XyIEY7YGgRPAVZxHu052LeFP1Ob0VIJxmYQzsqpxZBncYyQv+CLRI2NKWNn9oGIt
GFUjFPJ7mNIb57DBxas+D5ZshnsP+F3wx2cNUeiincKqJYKdq6Mafk1ZdsT4wzDE
xfKxtB0pacLUYvitLK/b+tFz+/BQmEIBAgjWaXoxtt5iWTnxh0aJumi64SJSq1hT
X/Nn/uYIn6RvVc8JXdf2TRQLb7U87HBRaqy4my2PLg5qsDbsUqT8B2TSTmz5AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUK7V1x1cQSBArzqZFNEh9+RZ4HLIwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMTA0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqhxjANBgkqhkiG9w0BAQsFAAOCAQEAlkWX
kFBriNu9VrO805MZNWq3IBWUOGUjPnJfubxC/rp5Zx7MO8cMu+bEnXICIQh+qJTQ
tnbvtXObuqItoUWGaF79T9lOn1JRsz+say6fPLmIm1ZzAlzkWRqE8L2wjR6aoGrL
OZTSfIczP1ANCGR1e3nhzVjg3KPibIXlyP6+I+p4BH17pqLYxMERm/mkTUCceAyi
uOqVe/p/z+7NSau4WliFTBSMJYOcHl7mV8riVfyJmeXxkT8WftwM2AvdsggLvmDV
G7x5snwzLAYnSNzXfDIHJbzZkpyxfuUY2NpHZRiRHdAYsm5mSgKoqT/hYL7Ly8Xw
L20Cmw+nZtE4guXepA==
-----END CERTIFICATE-----