Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143211.roa
File:                     AS143211.roa (raw, json)
Hash identifier:          1lBS4979ZNuQvEBoRUTvBBPQeXGu7kRzxeKxdQSaAss=
Subject key identifier:   37:69:83:9B:A2:7A:F0:18:B1:15:03:BB:C0:BA:CA:E2:CB:B6:15:39
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2BA840680B95617B10BF80BE0B91D88698E45E97
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143211.roa
Signing time:             Fri 22 May 2026 07:40:45 +0000
ROA not before:           Fri 22 May 2026 07:35:45 +0000
ROA not after:            Fri 21 May 2027 07:40:45 +0000
asID:                     143211
IP address blocks:        240a:a231::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a8:40:68:0b:95:61:7b:10:bf:80:be:0b:91:d8:86:98:e4:5e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:35:45 2026 GMT
            Not After : May 21 07:40:45 2027 GMT
        Subject: CN=3769839BA27AF018B11503BBC0BACAE2CBB61539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4f:bd:81:03:35:7f:e5:5a:b4:60:23:36:be:
                    0f:93:6d:75:2d:81:6a:84:77:01:51:4f:69:e3:82:
                    01:5f:8b:d6:33:ce:78:7b:01:2c:3a:ec:c6:9e:e4:
                    b4:08:f1:fb:3d:8b:19:e7:08:48:84:7f:c2:d6:3a:
                    46:33:f4:68:b8:40:b6:55:51:c0:8b:e1:1d:99:29:
                    d8:12:79:dc:40:4e:7f:bf:f5:39:0f:73:de:f2:3a:
                    67:91:c4:41:73:b3:37:10:5a:2d:c3:8c:9c:98:99:
                    b4:9b:c7:43:88:0e:a5:0c:39:f7:33:a1:bb:24:ac:
                    ca:8b:53:60:43:3a:dc:4a:25:e1:25:c0:82:b0:16:
                    1d:de:3e:02:e4:88:27:de:62:76:e0:c0:9d:93:2e:
                    b1:95:f7:19:21:94:73:85:62:68:c8:1d:22:d5:e5:
                    aa:ca:de:f8:f2:1b:5f:a1:aa:7e:4f:fc:cd:9a:74:
                    f0:a4:ed:74:a3:37:7e:a8:5c:39:68:6f:02:f4:64:
                    16:f0:11:3d:68:f4:73:e0:1b:26:35:53:62:8f:cc:
                    6f:86:95:97:50:b1:43:63:55:9b:1a:4f:24:31:60:
                    65:b1:d3:94:64:44:05:11:9b:45:f9:28:36:d9:cc:
                    18:1f:e2:cd:36:a2:d5:eb:f1:7d:6d:a1:16:cb:e5:
                    19:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:69:83:9B:A2:7A:F0:18:B1:15:03:BB:C0:BA:CA:E2:CB:B6:15:39
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143211.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a231::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:4a:37:fb:2c:ab:2b:19:f2:e3:61:03:9b:47:dd:28:c1:79:
         a2:a2:bf:8b:49:fb:92:b0:52:e8:e1:ba:21:91:08:c8:f0:69:
         42:7f:5b:03:c4:b7:c4:98:9d:66:d7:75:74:dd:a7:2f:9d:3f:
         bd:93:0b:c2:f7:83:78:a4:cb:8b:9a:8a:68:10:e1:fc:75:2c:
         d5:e7:6b:27:ac:6c:85:ff:d4:42:a5:31:e5:f7:af:84:01:bc:
         55:8f:a1:1b:dc:87:04:a0:30:95:30:8a:3a:b5:c0:96:8e:1e:
         8d:19:ee:9a:e4:40:d5:79:b0:4b:7c:ca:0f:81:12:ef:c2:40:
         88:04:6c:63:3f:f4:c9:ed:41:b2:6e:52:49:48:a6:05:63:29:
         ef:f3:84:b6:f7:21:03:19:c5:b5:f8:45:73:be:f1:54:43:a6:
         ff:6f:52:94:db:56:91:e1:d4:d8:aa:a0:1d:1c:95:25:cc:05:
         4e:cf:57:a1:b0:f7:ff:14:66:ff:f9:e1:4c:8d:9c:9b:db:07:
         fb:7a:0e:90:b2:57:e5:d8:2c:73:47:cb:c2:96:59:1d:2d:75:
         df:b2:b0:c0:a0:55:4c:f9:31:c8:85:87:5a:5e:08:5c:e3:d4:
         e0:8c:67:5e:33:0a:5c:ec:55:f5:be:36:26:ee:d6:19:d4:47:
         0e:5d:77:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----