Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143198.roa
File:                     AS143198.roa (raw, json)
Hash identifier:          5eFUijYsDkUTK9JRrW0AxhPwobZOESaoLIWaq1hpx7g=
Subject key identifier:   F7:EB:26:5D:C9:4F:4C:C3:8E:33:20:10:2A:65:61:6B:66:5F:99:A1
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2053F593A99F7A045ADE54A1388CF31B0BD07FC8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143198.roa
Signing time:             Fri 22 May 2026 07:08:54 +0000
ROA not before:           Fri 22 May 2026 07:03:54 +0000
ROA not after:            Fri 21 May 2027 07:08:54 +0000
asID:                     143198
IP address blocks:        240a:a224::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:53:f5:93:a9:9f:7a:04:5a:de:54:a1:38:8c:f3:1b:0b:d0:7f:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:03:54 2026 GMT
            Not After : May 21 07:08:54 2027 GMT
        Subject: CN=F7EB265DC94F4CC38E3320102A65616B665F99A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3a:50:8c:d6:83:cb:e2:e6:ea:5a:24:f3:b8:
                    be:85:c3:e0:b9:98:da:cd:ca:6f:21:7d:af:f8:49:
                    0b:e8:b1:56:9c:2f:c4:fe:b5:fa:0f:b9:70:9d:c8:
                    a9:22:e2:a9:48:62:88:08:1d:d6:6f:05:53:80:14:
                    44:b8:62:ac:a2:ef:ab:54:d9:1b:31:cf:fb:90:9e:
                    3e:be:2f:61:d1:50:6f:a7:12:f8:e1:75:3b:04:58:
                    8e:64:ac:09:70:35:e9:a5:22:1e:9f:d7:a9:2c:9b:
                    87:ff:d9:c9:fb:34:e1:c2:4b:db:c8:77:ed:f7:d0:
                    d3:39:fd:a2:6a:39:2d:6d:f8:a4:9d:a9:a6:90:dc:
                    82:05:28:b1:f5:3d:27:2d:b2:f9:87:b1:8d:55:82:
                    9c:36:9d:dd:88:d7:6b:d4:c6:2e:8b:5c:54:b5:a6:
                    c1:7d:60:50:7c:18:c3:9d:e5:4a:3a:4b:37:a7:30:
                    4a:cd:79:63:2e:d6:22:52:c2:a4:b3:bb:85:b5:39:
                    6e:0b:64:f0:5c:34:61:56:61:08:53:9d:83:c6:fc:
                    b3:3e:83:dc:93:e3:f9:d1:99:21:30:17:a2:ec:33:
                    a7:0f:9f:b8:a4:8f:b5:83:d2:39:22:ee:ad:fb:5f:
                    b5:e1:5d:99:c8:61:a2:66:d4:24:50:01:65:97:a9:
                    4d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:EB:26:5D:C9:4F:4C:C3:8E:33:20:10:2A:65:61:6B:66:5F:99:A1
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143198.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a224::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:63:35:c0:84:0c:d1:28:40:fc:e3:47:cd:35:2e:4b:eb:d0:
         0a:43:96:82:1d:c6:6e:91:65:a5:f8:4a:1b:2c:71:fb:51:de:
         4b:4e:17:95:7e:09:d3:91:b8:c7:d1:96:a9:3b:ad:8b:a1:ec:
         c3:f7:2c:65:90:d5:c0:9a:0d:c7:6b:d7:40:83:fb:34:2a:7d:
         32:62:11:83:a6:f2:46:54:8a:f5:66:f9:c8:2a:d4:29:46:5f:
         66:66:88:92:57:04:b3:53:ba:39:da:e9:40:c7:90:1c:70:d0:
         9f:71:fc:81:88:fb:1c:88:24:72:5a:d3:22:4a:a4:d5:ba:28:
         60:f4:36:f1:53:09:fe:50:88:05:2d:b0:ff:6c:a0:04:6d:54:
         57:4a:d1:fa:45:da:16:4f:f6:ff:9c:f9:95:cd:35:da:5a:80:
         2b:83:72:ac:63:a0:d0:10:0f:de:55:f5:76:4d:6e:21:61:ea:
         78:8a:09:49:e7:25:c4:75:8d:58:e5:a8:6b:16:aa:78:4a:a3:
         8e:53:73:0a:39:62:55:6e:41:b0:90:44:81:36:6f:96:a7:2c:
         af:b8:4d:8e:d9:75:c7:82:29:9c:b3:b6:65:80:99:c6:02:47:
         a0:fa:11:c2:52:71:07:7a:e9:2f:a8:f3:22:77:5b:bd:77:9e:
         99:67:92:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----