Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143216.roa
File:                     AS143216.roa (raw, json)
Hash identifier:          4uIxsy3amng69YGBr+kmEpTZO2HtFaPxnOz5h5ckt+k=
Subject key identifier:   2D:02:10:9F:69:AF:DD:87:ED:2B:9C:47:FE:63:BB:5F:18:80:70:6E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       503D0F7EA05DA0F113378ED5F15233BD0B71AAE2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143216.roa
Signing time:             Tue 26 May 2026 06:30:36 +0000
ROA not before:           Tue 26 May 2026 06:25:36 +0000
ROA not after:            Tue 25 May 2027 06:30:36 +0000
asID:                     143216
IP address blocks:        240a:a236::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:3d:0f:7e:a0:5d:a0:f1:13:37:8e:d5:f1:52:33:bd:0b:71:aa:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:36 2026 GMT
            Not After : May 25 06:30:36 2027 GMT
        Subject: CN=2D02109F69AFDD87ED2B9C47FE63BB5F1880706E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a4:cd:e2:7f:d6:bf:e8:58:4f:e6:31:2c:29:
                    41:5f:7a:02:45:23:f8:e5:a8:a0:27:67:26:ef:a7:
                    41:aa:18:f7:9a:58:05:74:2a:84:ce:62:d7:0a:f7:
                    51:35:4e:4f:50:a3:5f:2d:96:f1:3f:c5:bc:58:3c:
                    b9:50:7f:c4:7f:fb:78:cd:e8:6c:14:9d:e2:81:c0:
                    a7:d7:26:ce:b3:d9:2b:7f:c2:1f:26:33:23:10:3e:
                    05:12:55:92:47:52:b8:a5:e3:4e:36:b1:50:be:09:
                    ed:fd:44:f7:7f:15:16:9c:62:55:76:67:26:12:22:
                    79:7f:5d:23:f2:60:91:95:7e:a2:55:24:ef:a1:e9:
                    cc:b0:82:e7:39:72:5d:9e:1e:11:79:92:84:e2:f7:
                    e8:a6:26:33:11:51:5d:c2:0d:bb:4d:91:f1:5d:47:
                    82:23:74:62:e4:60:d6:7e:e1:8b:62:ae:d5:10:86:
                    a6:d5:42:19:01:17:4f:7f:ad:f1:0a:92:0b:e6:37:
                    2c:b5:8b:77:71:94:55:c2:f7:70:de:a3:b6:e0:64:
                    9d:8a:a6:a7:b3:5e:bd:ed:b1:e7:ae:f9:35:e8:43:
                    c0:e4:17:58:48:51:7b:ee:83:7f:19:74:8e:6d:27:
                    e8:8e:89:29:f2:ff:0f:3e:96:9e:fa:63:d6:fc:11:
                    3f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:02:10:9F:69:AF:DD:87:ED:2B:9C:47:FE:63:BB:5F:18:80:70:6E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143216.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a236::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:dd:eb:55:6e:c1:34:10:63:ee:6e:6f:7f:54:0a:bb:c4:db:
         b4:40:63:e0:76:b6:0d:f3:5d:df:a2:b0:c7:32:97:dc:ed:ca:
         57:65:60:c1:61:8c:74:57:ea:49:15:bc:24:21:f0:d1:e2:47:
         3e:79:08:b0:47:13:21:64:03:be:73:9b:67:00:70:cf:fe:24:
         46:d4:a3:f8:f0:4e:ba:34:b8:42:f3:a0:b8:05:d1:7c:14:ed:
         29:c4:ee:0a:35:bb:42:83:e6:77:bb:6a:90:fa:1d:9b:49:aa:
         bf:bd:9b:4b:ed:c5:5c:08:31:01:3a:2f:87:86:ff:a9:66:de:
         3d:23:d2:82:6a:e1:a0:9e:bc:48:c3:e8:bb:d3:ce:3a:4d:45:
         26:a6:92:15:df:02:ff:4a:ee:b3:bf:66:02:85:0a:dc:4a:61:
         49:f7:b6:17:7f:b5:62:e5:15:0f:45:3f:f7:eb:a7:f3:e0:7b:
         1a:69:8f:08:67:ed:41:70:0d:2b:c1:ec:01:6d:a1:ae:40:1e:
         05:6b:0d:94:f9:4b:80:48:e2:cd:fa:a9:4e:c0:17:cc:26:bc:
         30:a2:a1:d2:84:d7:2d:2b:c8:40:2c:f1:fd:d9:b8:02:89:99:
         be:82:75:80:81:cb:60:cd:8d:5f:eb:32:cc:d7:0c:7d:52:12:
         36:6a:b8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----