Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143182.roa
File:                     AS143182.roa (raw, json)
Hash identifier:          26RFZKsAJm4thrJJJ/UgnNmKx9CKA/BkNSUJXoHsO6w=
Subject key identifier:   3C:28:CC:8E:B1:1F:92:30:1D:54:62:46:88:5F:08:65:67:9C:9A:D6
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5E789AB3CD8EB4D1EC90E34C6665F64AE5F24115
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143182.roa
Signing time:             Mon 25 May 2026 03:19:08 +0000
ROA not before:           Mon 25 May 2026 03:14:08 +0000
ROA not after:            Mon 24 May 2027 03:19:08 +0000
asID:                     143182
IP address blocks:        240a:a214::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:78:9a:b3:cd:8e:b4:d1:ec:90:e3:4c:66:65:f6:4a:e5:f2:41:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:08 2026 GMT
            Not After : May 24 03:19:08 2027 GMT
        Subject: CN=3C28CC8EB11F92301D546246885F0865679C9AD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:37:4b:7b:bb:35:87:56:33:25:6e:7e:15:4c:
                    6b:74:22:4e:56:02:32:1e:dd:ea:f6:38:45:ce:bb:
                    f8:0c:be:0c:81:08:3d:35:7c:de:a4:c4:c3:60:5e:
                    1d:71:56:7d:97:3e:94:fe:73:97:34:37:e3:bd:8f:
                    9d:9a:04:a2:5f:cd:db:c0:a8:60:dd:a0:05:44:33:
                    39:73:c5:a0:ea:26:11:44:30:ba:78:32:1c:ad:72:
                    db:d3:f7:a2:47:1a:2f:31:b1:ee:bd:8f:85:94:5f:
                    5f:be:ad:20:6c:5a:ba:46:e6:3c:f1:a8:94:7b:bc:
                    f3:ea:ef:74:d6:85:e8:4b:1d:91:10:2a:fd:9b:99:
                    4d:59:22:80:e8:1c:13:36:6e:f0:c9:64:26:de:3b:
                    d2:fc:86:42:9f:dc:5d:f3:25:c7:00:01:58:89:72:
                    25:f6:98:3e:bd:bb:2f:98:b0:a2:c4:03:0c:4a:67:
                    ed:b4:e0:cc:a6:05:1d:96:a7:09:67:9f:1b:85:aa:
                    fd:ea:1e:f5:33:c8:2f:ff:62:4d:28:3f:d6:eb:31:
                    32:ab:67:9d:2f:33:50:03:45:b3:45:75:d1:02:60:
                    d7:ed:cc:22:95:e1:2d:4a:e3:79:e5:4c:34:b9:da:
                    db:6d:53:56:65:b9:ab:74:58:10:eb:58:4c:87:0d:
                    1e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:28:CC:8E:B1:1F:92:30:1D:54:62:46:88:5F:08:65:67:9C:9A:D6
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143182.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a214::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:82:c6:4f:6c:88:5f:25:3a:bc:ed:5c:cd:f2:9d:18:ae:f1:
         c3:57:89:df:d5:81:ae:8a:1c:dc:90:13:b6:76:58:5d:1b:31:
         83:16:e5:d9:56:be:18:be:12:b2:89:9b:37:3a:58:6e:bc:7c:
         68:d8:b6:80:b6:d6:0f:c0:52:82:4f:c5:11:9b:a9:f1:bc:d4:
         38:f6:11:c1:3a:3a:7d:87:09:45:85:b0:f0:0b:e8:5c:45:1e:
         4d:0c:81:a4:82:b6:3f:fc:dc:5c:13:26:c4:14:e8:ba:fa:4f:
         e9:f5:7c:be:3d:0a:66:cf:e8:72:5c:ae:e9:8e:86:50:2f:8e:
         87:fe:ad:ba:2d:5b:bd:9f:18:1c:86:e2:c5:83:7e:cc:ce:22:
         bf:8b:8f:53:6d:76:9c:37:cc:be:5e:91:1e:21:4b:67:15:08:
         74:69:15:af:18:7d:a7:dd:49:2c:c9:cb:4e:24:94:bc:f7:89:
         de:30:27:de:9d:1b:00:fc:56:b3:46:d5:da:d7:c4:03:9e:69:
         d1:18:7a:b5:c5:87:4e:ca:1d:3c:85:09:4e:53:22:15:0b:d4:
         0a:54:bb:fc:cf:76:13:2d:11:60:29:48:99:c8:f6:ce:8b:f8:
         8e:61:1b:dc:df:b4:25:11:35:e8:e7:0c:81:59:fd:e6:2e:35:
         b8:d4:84:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:30 2026 by rpki-client