Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143184.roa
File:                     AS143184.roa (raw, json)
Hash identifier:          0Sa4C+A5B0xR7Zy/IrgpdC8y3BfhuNO8eJ5/PFnW5/A=
Subject key identifier:   CA:13:90:C3:EC:2C:FE:A7:EF:F2:D1:B1:22:0B:34:6D:39:20:B2:48
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       10A2481467BFD9E1A7156FFA3C453B858EB5A444
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143184.roa
Signing time:             Mon 25 May 2026 06:28:21 +0000
ROA not before:           Mon 25 May 2026 06:23:21 +0000
ROA not after:            Mon 24 May 2027 06:28:21 +0000
asID:                     143184
IP address blocks:        240a:a216::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a2:48:14:67:bf:d9:e1:a7:15:6f:fa:3c:45:3b:85:8e:b5:a4:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:21 2026 GMT
            Not After : May 24 06:28:21 2027 GMT
        Subject: CN=CA1390C3EC2CFEA7EFF2D1B1220B346D3920B248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:dc:eb:57:7e:f2:d5:b5:03:82:0a:8e:c1:e7:
                    70:0e:1e:33:92:25:eb:da:cc:aa:3c:a6:b3:ca:76:
                    bf:12:73:71:f3:f6:2c:f6:70:6f:62:70:17:56:40:
                    7e:6a:b2:96:e7:36:e8:b9:f2:d9:3e:22:c2:3d:31:
                    fd:1f:1f:99:1f:08:21:41:a8:2e:db:cd:28:1b:4d:
                    08:86:1a:bd:0f:9e:14:19:0d:f0:aa:96:f6:9f:79:
                    e5:80:02:7f:0e:3e:8a:c5:84:c2:32:a0:73:58:d0:
                    05:e7:c7:4b:81:a0:f5:64:27:4e:d0:ff:fb:a1:46:
                    df:b0:75:b7:a6:a9:0a:d1:66:fe:66:b4:07:10:97:
                    28:eb:11:77:c3:70:e4:8c:9b:2a:d7:74:76:f4:c8:
                    78:80:a5:30:ae:9a:d8:79:4f:41:b4:f5:69:b4:84:
                    39:98:a8:8d:65:f5:da:3c:10:76:8d:83:04:e1:25:
                    9b:df:8c:0b:23:55:e3:67:dc:0c:47:b2:64:2f:d1:
                    63:2e:5e:34:c3:e9:47:ba:e9:4a:bd:fe:68:fe:8b:
                    84:23:17:42:43:c8:43:10:20:b0:74:a0:32:de:63:
                    2e:b1:0b:b0:9f:6c:54:fc:3b:2e:27:6f:2e:03:63:
                    42:0a:ba:b4:31:43:d8:f2:ad:f6:08:17:b9:46:17:
                    72:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:13:90:C3:EC:2C:FE:A7:EF:F2:D1:B1:22:0B:34:6D:39:20:B2:48
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143184.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a216::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:71:69:c0:af:14:6d:03:53:55:ce:c6:22:48:33:34:43:90:
         7b:6c:9b:dc:e8:dd:0e:a8:c5:8b:83:c7:22:ec:c2:1d:d3:49:
         1d:34:3d:82:73:a9:51:ad:51:de:1d:75:84:d5:06:cb:d2:e1:
         25:35:ff:18:5b:2e:ad:7f:48:e4:87:05:45:af:df:f6:91:00:
         f1:c0:bc:45:ec:ed:c3:4a:bc:fe:e6:44:11:db:0e:68:e7:4d:
         8a:ee:63:68:e1:d8:0d:82:a2:0d:cd:0e:d6:71:56:c5:77:e0:
         48:3c:e5:b8:0d:4c:e7:99:40:18:d3:6b:9f:4f:7a:ed:e9:0a:
         72:8f:4c:04:d4:e0:2d:00:0a:71:71:81:2a:8e:fd:07:ab:32:
         26:73:29:f2:c2:72:9e:ed:c4:14:fb:93:c5:58:db:0b:6b:ca:
         84:0e:8e:18:46:9a:7c:67:40:58:a8:0c:21:ce:04:7d:58:ff:
         8d:51:ab:a8:1c:5a:4f:ba:50:e2:49:ce:75:88:80:32:64:ef:
         01:78:00:33:5a:e6:54:d4:fb:f8:ce:93:b1:7a:73:c6:2f:96:
         e8:fb:43:cf:e1:fd:54:cc:e0:45:b4:04:87:3b:58:56:2f:11:
         66:b3:74:98:aa:a9:11:07:0e:34:5d:74:e7:88:de:40:bb:e1:
         19:ef:35:62
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUEKJIFGe/2eGnFW/6PEU7hY61pEQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjIzMjFaFw0yNzA1MjQwNjI4MjFaMDMxMTAvBgNV
BAMTKENBMTM5MEMzRUMyQ0ZFQTdFRkYyRDFCMTIyMEIzNDZEMzkyMEIyNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD33OtXfvLVtQOCCo7B53AOHjOS
JevazKo8prPKdr8Sc3Hz9iz2cG9icBdWQH5qspbnNui58tk+IsI9Mf0fH5kfCCFB
qC7bzSgbTQiGGr0PnhQZDfCqlvafeeWAAn8OPorFhMIyoHNY0AXnx0uBoPVkJ07Q
//uhRt+wdbemqQrRZv5mtAcQlyjrEXfDcOSMmyrXdHb0yHiApTCumth5T0G09Wm0
hDmYqI1l9do8EHaNgwThJZvfjAsjVeNn3AxHsmQv0WMuXjTD6Ue66Uq9/mj+i4Qj
F0JDyEMQILB0oDLeYy6xC7CfbFT8Oy4nby4DY0IKurQxQ9jyrfYIF7lGF3JhAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUyhOQw+ws/qfv8tGxIgs0bTkgskgwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMTg0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqiFjANBgkqhkiG9w0BAQsFAAOCAQEAeXFp
wK8UbQNTVc7GIkgzNEOQe2yb3OjdDqjFi4PHIuzCHdNJHTQ9gnOpUa1R3h11hNUG
y9LhJTX/GFsurX9I5IcFRa/f9pEA8cC8Reztw0q8/uZEEdsOaOdNiu5jaOHYDYKi
Dc0O1nFWxXfgSDzluA1M55lAGNNrn0967ekKco9MBNTgLQAKcXGBKo79B6syJnMp
8sJynu3EFPuTxVjbC2vKhA6OGEaafGdAWKgMIc4EfVj/jVGrqBxaT7pQ4knOdYiA
MmTvAXgAM1rmVNT7+M6TsXpzxi+W6PtDz+H9VMzgRbQEhztYVi8RZrN0mKqpEQcO
NF1054jeQLvhGe81Yg==
-----END CERTIFICATE-----