Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143176.roa
File:                     AS143176.roa (raw, json)
Hash identifier:          uQhoMMvNT70TbD8AoHC7dSgzzYKbye+pZvBqzM+S9xU=
Subject key identifier:   06:0F:C0:5A:CF:02:7E:DE:D0:C0:E3:54:A9:2E:B3:D2:91:0F:16:27
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4A45C740D94CCBF45CB97F46B1D1DA2F80646265
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143176.roa
Signing time:             Mon 25 May 2026 01:51:24 +0000
ROA not before:           Mon 25 May 2026 01:46:24 +0000
ROA not after:            Mon 24 May 2027 01:51:24 +0000
asID:                     143176
IP address blocks:        240a:a20e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:45:c7:40:d9:4c:cb:f4:5c:b9:7f:46:b1:d1:da:2f:80:64:62:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:24 2026 GMT
            Not After : May 24 01:51:24 2027 GMT
        Subject: CN=060FC05ACF027EDED0C0E354A92EB3D2910F1627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6f:e6:6f:90:b2:09:87:78:04:52:de:45:7f:
                    e4:2c:d9:99:08:5c:b8:6a:da:f2:67:a0:f4:03:92:
                    f4:3c:54:f8:08:12:b2:7b:d6:b5:2e:57:dd:63:1e:
                    7d:d6:76:06:61:c2:5a:66:75:3a:9f:1f:1d:4c:10:
                    46:1e:6a:85:5e:c7:eb:70:c0:fb:51:a3:0d:2b:a8:
                    48:d1:46:94:6c:7d:8f:fc:f7:d3:65:84:c1:98:3c:
                    aa:97:57:bc:3f:25:1b:4b:c6:cb:d9:68:01:29:d5:
                    63:f9:0b:ba:6d:f6:0e:da:be:8c:1d:03:80:c0:09:
                    ff:25:6f:cc:f8:60:d5:36:e7:97:2b:51:7c:63:af:
                    14:c3:dc:ef:fc:08:0e:0f:c4:f4:cd:a3:bd:47:ee:
                    32:10:55:2a:c3:8c:75:94:23:aa:38:42:c3:d9:de:
                    4b:4e:78:fa:f5:b2:bb:6d:42:8e:33:e3:69:85:6d:
                    d0:ab:82:7d:7f:32:16:64:a6:8b:06:14:c0:c4:26:
                    7e:a9:e8:6d:cb:7a:12:88:86:4a:10:b4:98:b6:13:
                    c0:fd:2d:c5:3a:e6:bd:21:3a:f4:36:91:48:92:25:
                    20:2a:ab:0b:1d:81:73:3c:1c:b5:62:a1:87:55:11:
                    53:82:2b:63:6c:6b:26:a5:4f:c2:98:43:7d:e7:58:
                    45:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0F:C0:5A:CF:02:7E:DE:D0:C0:E3:54:A9:2E:B3:D2:91:0F:16:27
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143176.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a20e::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:da:26:5d:9f:14:08:4f:62:ec:bb:e6:97:31:b2:fe:ee:bd:
         cd:01:ec:d4:26:15:ac:18:16:b9:e4:5f:89:de:50:e8:79:80:
         85:c9:48:85:de:1a:b4:ad:26:b2:b8:9f:2b:87:62:d2:5d:f6:
         36:ba:96:b1:01:95:4f:57:d7:b4:55:e2:94:ee:a6:90:48:b5:
         c8:5a:e7:7c:2f:0a:c6:a7:f4:e6:07:23:b8:8d:93:46:e5:fb:
         27:f4:21:cb:7d:2f:53:0b:49:33:0f:b3:ad:16:c7:77:51:10:
         d0:a1:9a:9c:7d:90:fa:3b:62:7e:d5:55:7c:de:69:6f:1c:24:
         55:c4:a3:a2:e0:c2:f2:fd:51:fe:a9:df:e9:1c:96:6c:13:22:
         b8:c1:46:f1:d9:14:3b:1a:1d:f1:8a:b9:a6:1f:a4:c8:4f:ac:
         25:3f:7c:03:ee:6e:84:dc:59:17:00:50:ee:5e:f4:6e:42:61:
         6e:dd:36:5e:75:95:66:f7:21:6b:d9:06:e3:0d:83:20:a8:22:
         d3:09:39:a6:6c:af:9b:65:33:7e:04:05:bb:7d:78:15:23:7d:
         54:95:1b:c1:64:3c:21:a5:82:d8:75:83:75:42:ea:c1:c6:e1:
         76:d5:71:f2:45:ae:e7:a3:17:93:e5:ab:53:d4:23:32:6f:20:
         86:5a:b2:ed
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUSkXHQNlMy/RcuX9GsdHaL4BkYmUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTQ2MjRaFw0yNzA1MjQwMTUxMjRaMDMxMTAvBgNV
BAMTKDA2MEZDMDVBQ0YwMjdFREVEMEMwRTM1NEE5MkVCM0QyOTEwRjE2MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1b+ZvkLIJh3gEUt5Ff+Qs2ZkI
XLhq2vJnoPQDkvQ8VPgIErJ71rUuV91jHn3WdgZhwlpmdTqfHx1MEEYeaoVex+tw
wPtRow0rqEjRRpRsfY/899NlhMGYPKqXV7w/JRtLxsvZaAEp1WP5C7pt9g7avowd
A4DACf8lb8z4YNU255crUXxjrxTD3O/8CA4PxPTNo71H7jIQVSrDjHWUI6o4QsPZ
3ktOePr1srttQo4z42mFbdCrgn1/MhZkposGFMDEJn6p6G3LehKIhkoQtJi2E8D9
LcU65r0hOvQ2kUiSJSAqqwsdgXM8HLVioYdVEVOCK2NsayalT8KYQ33nWEUBAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUBg/AWs8Cft7QwONUqS6z0pEPFicwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMTc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqiDjANBgkqhkiG9w0BAQsFAAOCAQEAkdom
XZ8UCE9i7LvmlzGy/u69zQHs1CYVrBgWueRfid5Q6HmAhclIhd4atK0msrifK4di
0l32NrqWsQGVT1fXtFXilO6mkEi1yFrnfC8Kxqf05gcjuI2TRuX7J/Qhy30vUwtJ
Mw+zrRbHd1EQ0KGanH2Q+jtiftVVfN5pbxwkVcSjouDC8v1R/qnf6RyWbBMiuMFG
8dkUOxod8Yq5ph+kyE+sJT98A+5uhNxZFwBQ7l70bkJhbt02XnWVZvcha9kG4w2D
IKgi0wk5pmyvm2UzfgQFu314FSN9VJUbwWQ8IaWC2HWDdULqwcbhdtVx8kWu56MX
k+WrU9QjMm8ghlqy7Q==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:27 2026 by rpki-client