Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143162.roa
File:                     AS143162.roa (raw, json)
Hash identifier:          /VJkIoe7X/btnMNVqd8eahWJOagIlcjayHb5tNEAvmI=
Subject key identifier:   5A:B2:2C:CE:46:EC:20:FE:C0:5E:E9:21:1F:CC:56:AE:1C:97:14:37
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       39B62138F03FF03C58050FEAB7D32C760D343C19
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143162.roa
Signing time:             Tue 26 May 2026 06:30:30 +0000
ROA not before:           Tue 26 May 2026 06:25:30 +0000
ROA not after:            Tue 25 May 2027 06:30:30 +0000
asID:                     143162
IP address blocks:        240a:a200::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:b6:21:38:f0:3f:f0:3c:58:05:0f:ea:b7:d3:2c:76:0d:34:3c:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:30 2026 GMT
            Not After : May 25 06:30:30 2027 GMT
        Subject: CN=5AB22CCE46EC20FEC05EE9211FCC56AE1C971437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:64:eb:1d:cb:19:74:00:ee:d5:81:8b:d7:08:
                    62:d4:ac:d8:d8:64:93:43:e4:6c:ff:26:2e:48:53:
                    dc:7a:a0:29:a3:1c:62:d8:04:4a:86:c6:ee:ac:50:
                    f8:19:18:8c:f3:e0:ac:8a:ff:a3:db:5c:f8:0a:cf:
                    35:34:90:93:de:32:ce:3f:97:d7:1a:52:d1:b6:b5:
                    61:67:a2:29:93:8d:0a:d2:b0:77:59:9c:b3:35:66:
                    61:5c:e0:34:93:ad:0e:8c:05:6f:7e:0b:35:2f:e5:
                    6d:80:83:9d:0a:6e:c9:e1:66:d3:c8:9c:09:8c:e7:
                    da:b9:01:14:3c:82:89:88:45:93:d3:d7:78:f5:70:
                    e5:e5:c9:99:d8:bc:ff:d2:e7:d0:76:df:c5:36:7d:
                    bc:0b:4d:8d:ed:b4:79:2c:0b:b3:1a:2f:5c:6d:cd:
                    83:a5:3b:d1:69:7c:1d:c4:3d:2f:c6:14:9f:e3:cc:
                    19:45:ac:3f:e3:15:38:18:a8:73:96:01:e7:4d:4f:
                    f2:ca:d2:40:d0:3c:ad:6d:42:73:40:11:fe:0d:b9:
                    eb:56:7a:72:be:0f:0b:a9:b8:17:71:de:7c:06:69:
                    52:ad:26:78:37:fb:32:2f:ee:00:b7:1e:90:13:c2:
                    93:2e:ec:27:1f:bc:d3:37:3e:fc:0c:8e:bb:8c:97:
                    ea:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B2:2C:CE:46:EC:20:FE:C0:5E:E9:21:1F:CC:56:AE:1C:97:14:37
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143162.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a200::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:bf:2c:f8:d0:9a:5e:25:01:c6:6c:eb:6b:24:60:da:9b:3c:
         f9:35:a8:39:9b:92:51:71:a6:f0:9d:6a:57:67:d5:16:77:42:
         e4:03:06:b6:35:c5:25:b4:13:e3:3f:a6:17:a2:27:f7:e4:41:
         44:08:4d:de:30:a8:01:0a:0e:41:3d:dc:6e:cc:2b:59:f7:b4:
         5a:2c:b7:9b:af:4a:77:37:cc:e6:58:53:2c:52:31:95:02:14:
         dc:ce:14:a2:9a:92:3c:06:25:c9:27:65:ac:cf:a1:18:26:e5:
         35:85:bd:3d:6b:92:83:35:65:28:15:c9:e9:52:60:27:b8:bf:
         68:a9:d2:92:86:ea:36:2a:e1:bc:c6:97:ce:6f:eb:15:84:e9:
         57:33:ae:82:7f:f7:38:c0:de:ec:e6:d1:85:dc:38:00:30:c4:
         5b:1d:dd:a1:4e:fb:c8:d7:95:17:4e:08:85:ab:8f:54:b5:8d:
         30:eb:11:8f:a1:8c:73:ad:8d:d4:f0:17:9d:71:ed:9d:dd:31:
         32:44:6f:c7:34:8a:6c:6e:9b:bc:30:88:be:01:60:64:7f:c7:
         6e:34:58:93:65:ff:54:61:49:87:82:70:26:66:4f:7e:63:d4:
         92:65:08:5c:16:3f:a5:7a:b5:42:a9:94:2b:4e:8a:85:17:7b:
         e0:0a:2a:a2
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUObYhOPA/8DxYBQ/qt9Msdg00PBkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjI1MzBaFw0yNzA1MjUwNjMwMzBaMDMxMTAvBgNV
BAMTKDVBQjIyQ0NFNDZFQzIwRkVDMDVFRTkyMTFGQ0M1NkFFMUM5NzE0MzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYZOsdyxl0AO7VgYvXCGLUrNjY
ZJND5Gz/Ji5IU9x6oCmjHGLYBEqGxu6sUPgZGIzz4KyK/6PbXPgKzzU0kJPeMs4/
l9caUtG2tWFnoimTjQrSsHdZnLM1ZmFc4DSTrQ6MBW9+CzUv5W2Ag50KbsnhZtPI
nAmM59q5ARQ8gomIRZPT13j1cOXlyZnYvP/S59B238U2fbwLTY3ttHksC7MaL1xt
zYOlO9FpfB3EPS/GFJ/jzBlFrD/jFTgYqHOWAedNT/LK0kDQPK1tQnNAEf4NuetW
enK+DwupuBdx3nwGaVKtJng3+zIv7gC3HpATwpMu7CcfvNM3PvwMjruMl+oJAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUWrIszkbsIP7AXukhH8xWrhyXFDcwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMTYyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqiADANBgkqhkiG9w0BAQsFAAOCAQEAnL8s
+NCaXiUBxmzrayRg2ps8+TWoOZuSUXGm8J1qV2fVFndC5AMGtjXFJbQT4z+mF6In
9+RBRAhN3jCoAQoOQT3cbswrWfe0Wiy3m69KdzfM5lhTLFIxlQIU3M4UopqSPAYl
ySdlrM+hGCblNYW9PWuSgzVlKBXJ6VJgJ7i/aKnSkobqNirhvMaXzm/rFYTpVzOu
gn/3OMDe7ObRhdw4ADDEWx3doU77yNeVF04IhauPVLWNMOsRj6GMc62N1PAXnXHt
nd0xMkRvxzSKbG6bvDCIvgFgZH/HbjRYk2X/VGFJh4JwJmZPfmPUkmUIXBY/pXq1
QqmUK06KhRd74Aoqog==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:51 2026 by rpki-client