Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143180.roa
File:                     AS143180.roa (raw, json)
Hash identifier:          okFkMNXMyc/P0SQtBBQfmkeSz0VTDqVLdp2MSFLHPHw=
Subject key identifier:   6F:9D:C7:A5:1C:FA:D1:B4:BB:08:E2:5C:D7:14:FF:4C:59:58:0F:0A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3F19CDBF8E29458723A0D43F62A23C8F0D1AF2A6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143180.roa
Signing time:             Tue 26 May 2026 08:52:53 +0000
ROA not before:           Tue 26 May 2026 08:47:53 +0000
ROA not after:            Tue 25 May 2027 08:52:53 +0000
asID:                     143180
IP address blocks:        240a:a212::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:19:cd:bf:8e:29:45:87:23:a0:d4:3f:62:a2:3c:8f:0d:1a:f2:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 08:47:53 2026 GMT
            Not After : May 25 08:52:53 2027 GMT
        Subject: CN=6F9DC7A51CFAD1B4BB08E25CD714FF4C59580F0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e6:8f:98:11:e9:a3:36:54:25:f8:ba:74:25:
                    ee:2b:5f:f4:1d:fa:8c:9d:72:f9:c3:15:51:3f:8e:
                    e9:fa:c4:ca:34:48:24:64:e6:90:45:f3:cb:b6:ba:
                    b1:fe:4e:f2:54:66:66:2e:c4:2e:2f:9a:ed:0b:64:
                    fa:06:5c:2e:ef:c2:7e:49:94:76:48:0f:b7:da:d3:
                    27:cb:a9:95:55:2f:93:89:08:eb:1d:99:6f:4e:03:
                    0c:42:93:c0:72:2f:f0:08:2f:e4:e3:c1:b1:67:76:
                    7a:88:79:ca:1b:ae:48:3e:22:b8:dc:bc:c4:00:76:
                    6f:c2:25:ec:67:68:4e:0a:b8:6d:ed:48:8f:16:9a:
                    0f:1f:47:f5:db:82:b9:01:79:3c:d2:9b:2a:7c:a0:
                    bf:bb:be:20:78:8a:5a:e4:b9:e1:bd:72:4f:d3:68:
                    f1:12:8a:38:f0:e1:ed:f4:2b:02:27:ee:fd:f2:51:
                    cc:70:92:f7:97:1f:6f:c4:52:43:c3:8d:1d:21:80:
                    7f:f1:cb:24:a0:04:fb:49:37:71:7d:88:2e:be:05:
                    64:4e:3b:45:d9:d6:90:06:c1:74:48:1b:fb:4b:b8:
                    7f:c1:97:21:b1:54:bd:93:f3:7b:5b:32:c5:0b:87:
                    d7:b9:15:96:8d:2c:66:55:28:57:eb:3b:2d:c8:02:
                    5c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:9D:C7:A5:1C:FA:D1:B4:BB:08:E2:5C:D7:14:FF:4C:59:58:0F:0A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143180.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a212::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:c2:43:b6:ca:a9:f8:79:25:09:4d:c5:f0:02:ed:bd:4e:b7:
         ff:fe:66:c8:eb:3e:2c:5c:46:e9:ab:9b:aa:6e:e7:f3:e3:a9:
         d7:9d:4b:57:85:a1:dd:28:63:8a:a3:d4:c4:cc:0f:d0:24:47:
         d6:60:97:a0:02:a3:c1:cd:98:b4:f3:d4:a2:a5:9f:06:91:b8:
         88:7a:f7:b2:c1:54:f8:8e:d5:0e:7f:35:e1:52:b8:bf:90:31:
         96:a6:ce:59:aa:4f:be:97:90:b4:0e:85:91:af:2d:a4:c8:29:
         54:1c:fc:53:17:7b:9d:2a:a0:4f:89:ff:36:a1:3e:44:fc:2e:
         06:94:b8:f1:57:cb:ff:bf:ad:d7:b5:55:b6:da:65:a0:dc:f7:
         3c:34:60:ec:ff:6f:ae:ea:a4:ae:bf:bc:aa:2d:58:1f:8c:b3:
         d2:ce:f2:2c:20:ed:d6:8a:af:bd:83:91:4d:01:7a:d2:41:58:
         6b:a3:95:80:3a:2a:f4:f0:fa:31:5b:6a:4e:0d:d5:85:e2:d0:
         50:4c:4a:ed:18:e7:7d:a7:98:66:b8:da:3b:95:fe:f2:af:0f:
         52:60:93:2a:8a:21:8e:7c:3b:10:e7:f2:44:d9:14:a3:ce:f2:
         3c:53:f0:33:2d:99:01:0b:0b:db:fe:66:e9:cc:c1:31:4c:6c:
         5b:ba:bf:81
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUPxnNv44pRYcjoNQ/YqI8jw0a8qYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwODQ3NTNaFw0yNzA1MjUwODUyNTNaMDMxMTAvBgNV
BAMTKDZGOURDN0E1MUNGQUQxQjRCQjA4RTI1Q0Q3MTRGRjRDNTk1ODBGMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi5o+YEemjNlQl+Lp0Je4rX/Qd
+oydcvnDFVE/jun6xMo0SCRk5pBF88u2urH+TvJUZmYuxC4vmu0LZPoGXC7vwn5J
lHZID7fa0yfLqZVVL5OJCOsdmW9OAwxCk8ByL/AIL+TjwbFndnqIecobrkg+Irjc
vMQAdm/CJexnaE4KuG3tSI8Wmg8fR/XbgrkBeTzSmyp8oL+7viB4ilrkueG9ck/T
aPESijjw4e30KwIn7v3yUcxwkveXH2/EUkPDjR0hgH/xyySgBPtJN3F9iC6+BWRO
O0XZ1pAGwXRIG/tLuH/BlyGxVL2T83tbMsULh9e5FZaNLGZVKFfrOy3IAlxzAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUb53HpRz60bS7COJc1xT/TFlYDwowHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMTgwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqiEjANBgkqhkiG9w0BAQsFAAOCAQEAtMJD
tsqp+HklCU3F8ALtvU63//5myOs+LFxG6aubqm7n8+Op151LV4Wh3ShjiqPUxMwP
0CRH1mCXoAKjwc2YtPPUoqWfBpG4iHr3ssFU+I7VDn814VK4v5AxlqbOWapPvpeQ
tA6Fka8tpMgpVBz8Uxd7nSqgT4n/NqE+RPwuBpS48VfL/7+t17VVttploNz3PDRg
7P9vruqkrr+8qi1YH4yz0s7yLCDt1oqvvYORTQF60kFYa6OVgDoq9PD6MVtqTg3V
heLQUExK7RjnfaeYZrjaO5X+8q8PUmCTKoohjnw7EOfyRNkUo87yPFPwMy2ZAQsL
2/5m6czBMUxsW7q/gQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:04 2026 by rpki-client