Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143112.roa
File:                     AS143112.roa (raw, json)
Hash identifier:          +4KD/aHBZTfocZwnOYHjqLSmNViiPU49XdcHp3FjR1A=
Subject key identifier:   3B:07:EF:41:70:B2:4D:B9:4B:59:C9:4D:B2:82:A2:17:C0:B4:6D:CD
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2EA24EF1CC6D36D0CBE5BFDA483C3B7634C77515
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143112.roa
Signing time:             Fri 22 May 2026 06:05:12 +0000
ROA not before:           Fri 22 May 2026 06:00:12 +0000
ROA not after:            Fri 21 May 2027 06:05:12 +0000
asID:                     143112
IP address blocks:        240a:a1ce::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:a2:4e:f1:cc:6d:36:d0:cb:e5:bf:da:48:3c:3b:76:34:c7:75:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:00:12 2026 GMT
            Not After : May 21 06:05:12 2027 GMT
        Subject: CN=3B07EF4170B24DB94B59C94DB282A217C0B46DCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f1:ee:6a:3e:21:43:c7:fb:df:67:65:bd:af:
                    e4:75:84:5e:bb:1f:bf:86:61:98:2e:6e:39:7b:47:
                    a0:98:49:40:9a:14:60:63:67:f6:ba:7c:72:d4:1d:
                    3f:0d:e6:4d:b7:4d:48:f9:e8:a4:28:2f:db:b8:fe:
                    51:54:b5:e1:46:88:2f:93:3e:27:9e:8c:0d:b9:ad:
                    c4:d2:68:09:d8:72:04:a0:69:9f:07:ba:f1:23:23:
                    68:74:ec:0c:1f:e2:93:b9:5d:d6:65:b2:db:80:0b:
                    d3:2a:29:ca:0c:8b:1b:d7:ee:ef:3c:43:db:9d:45:
                    79:66:14:9e:e2:9a:28:ef:b1:22:1f:42:fa:cd:78:
                    f0:8f:e5:29:00:ed:da:7e:a6:62:c5:a7:f3:d0:d0:
                    e2:db:ab:2a:e3:73:55:e3:23:80:3f:be:43:95:e7:
                    fc:8f:03:63:0a:9e:2e:8a:ef:b6:b9:4c:46:b5:69:
                    cf:90:7c:74:ce:a9:fe:9c:ab:4e:25:51:81:1a:eb:
                    82:40:f4:c1:d5:ec:6b:d9:50:c1:a6:96:73:62:e0:
                    3c:3b:28:e0:7f:27:a0:b0:49:e6:09:95:d9:f8:13:
                    64:79:2a:99:08:db:f5:e8:e6:b0:63:8f:a7:fa:51:
                    e2:e3:96:39:f5:c0:20:c8:17:97:22:d4:b5:04:58:
                    49:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:07:EF:41:70:B2:4D:B9:4B:59:C9:4D:B2:82:A2:17:C0:B4:6D:CD
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143112.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a1ce::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:d6:10:6c:dc:97:47:f1:be:21:d1:30:35:08:5e:e2:64:84:
         d8:7c:31:4b:ba:1e:5b:a7:36:bb:e7:93:de:61:47:87:bf:14:
         ee:6f:bf:b9:3e:b0:45:62:e3:c7:d4:fe:ee:13:d1:98:e9:38:
         f0:c5:ff:f5:f7:93:70:7e:6f:ad:bb:d0:0f:f4:bb:6c:09:c7:
         03:2e:43:60:bf:40:4a:39:55:4b:48:ff:31:3c:e9:b7:f5:5a:
         df:10:0a:25:5e:77:1e:83:cc:10:0f:0f:11:43:3c:e5:50:2c:
         f2:41:87:e3:6d:c4:89:18:6e:27:77:d4:87:2c:ca:30:30:e2:
         7a:ee:22:cc:9d:ed:b9:8c:ee:0d:26:93:b8:11:06:d3:11:41:
         f4:a6:8d:d4:27:6a:d8:4a:ed:2a:e2:af:a7:92:13:6e:75:78:
         e6:97:15:b3:b5:bb:fc:7a:6e:6c:3c:39:f8:0a:82:c6:df:a1:
         d5:8c:46:a6:b6:40:7c:f9:5e:5e:69:8c:97:f2:f8:5a:73:bb:
         7a:4f:e1:e9:1a:a9:d8:8a:50:bf:42:c6:f0:8c:b2:e8:cf:24:
         ae:f2:4c:5a:de:1c:29:3f:22:0a:96:31:19:c8:07:27:9e:81:
         0b:e0:21:f2:83:af:bf:b1:18:1c:ab:fd:3f:7a:23:1d:98:c9:
         4e:bc:b7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----