Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143163.roa
File:                     AS143163.roa (raw, json)
Hash identifier:          hdwCxbnQwwVQ6tirt2a4ygWzpJW3V77WfY7hTyEKqQg=
Subject key identifier:   63:99:63:EB:40:CA:72:B2:4A:3D:91:36:1C:97:1D:41:85:AE:82:6E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6D5C974E1BC70FB94AF592B03C47218C453DEA4A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143163.roa
Signing time:             Fri 22 May 2026 01:50:37 +0000
ROA not before:           Fri 22 May 2026 01:45:37 +0000
ROA not after:            Fri 21 May 2027 01:50:37 +0000
asID:                     143163
IP address blocks:        240a:a201::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:5c:97:4e:1b:c7:0f:b9:4a:f5:92:b0:3c:47:21:8c:45:3d:ea:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:37 2026 GMT
            Not After : May 21 01:50:37 2027 GMT
        Subject: CN=639963EB40CA72B24A3D91361C971D4185AE826E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:84:69:8f:57:0c:de:6d:06:b9:fa:e1:aa:60:
                    ae:a8:48:1c:45:cf:f9:84:65:92:a0:24:8c:19:72:
                    eb:9a:d0:47:3d:fc:ec:23:d4:49:73:a3:8b:a6:3f:
                    17:81:d3:7e:5f:77:c5:15:21:24:e9:10:45:4d:bb:
                    a5:e1:11:e8:b4:0f:5b:ec:6c:4c:02:84:f8:e3:fe:
                    22:da:5c:c5:92:d0:a7:f0:58:36:db:71:bb:84:db:
                    e1:24:c3:50:0e:a9:ec:0e:fc:85:8f:ef:b9:6a:32:
                    64:a5:20:0d:51:63:a2:4a:cf:9f:0d:32:7d:e2:d0:
                    c6:c2:41:e6:40:60:d3:a7:10:82:9f:f0:f8:41:71:
                    7c:1b:c8:34:7d:08:92:5c:87:31:dd:ec:54:12:95:
                    85:02:01:b2:d6:2a:f1:84:dd:da:d3:4c:87:ea:c4:
                    80:e0:d7:f9:fc:fb:a6:39:02:f0:8e:39:ee:51:b3:
                    01:08:eb:70:5e:53:ef:b9:9d:da:02:8d:2b:ff:45:
                    bd:08:0d:95:4f:0e:6b:99:8a:d6:22:4e:08:5a:e3:
                    c2:cf:97:40:01:6b:84:c2:ca:69:c1:04:b5:dc:76:
                    db:4e:ab:51:47:11:33:53:9b:cc:c7:59:bc:61:0d:
                    2f:ad:ef:7f:ae:13:af:48:e7:c2:92:75:ba:2e:87:
                    9c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:99:63:EB:40:CA:72:B2:4A:3D:91:36:1C:97:1D:41:85:AE:82:6E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143163.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a201::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:f0:2d:06:50:c5:b2:80:9a:8e:b7:cd:d1:53:94:85:39:52:
         16:8a:7f:bc:4e:70:cc:a0:98:f8:3e:e8:f1:cc:12:f6:e0:f5:
         ad:b4:8a:ea:29:dd:02:06:10:eb:9f:ff:46:50:61:3c:3f:12:
         3b:ea:d7:19:44:f8:74:33:e7:b8:bd:0c:12:a2:40:0e:24:86:
         b1:b2:da:06:dd:fa:8c:9d:bb:f3:71:53:d3:8c:2d:cc:88:b4:
         2b:31:76:52:d7:f9:23:73:41:7b:64:2b:ab:3d:29:33:7c:bf:
         5b:51:e9:ed:73:7d:b5:bd:81:0a:fd:09:15:bb:29:e2:ba:b4:
         f5:4d:85:92:6c:be:54:43:99:02:46:d4:7f:3c:b8:91:8d:40:
         3d:9d:8d:4c:f8:ac:79:02:fe:f7:9f:18:51:fa:41:35:07:84:
         94:9b:1b:02:68:07:07:1c:26:c4:0f:5c:a3:bf:7c:48:52:9d:
         33:47:c6:24:d6:0a:14:45:10:b7:db:51:da:cc:9c:d1:7a:cd:
         94:57:9a:b7:7d:92:39:40:af:ea:01:e6:73:a3:e6:df:f0:53:
         88:93:42:06:bd:c6:8f:d7:43:ef:b8:fe:08:18:be:c4:75:21:
         07:ac:35:b8:4e:37:86:93:3b:db:4f:f4:c9:66:29:78:fe:0a:
         3f:aa:1b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:52 2026 by rpki-client