Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143246.roa
File:                     AS143246.roa (raw, json)
Hash identifier:          YgxztaSwxWlYIN1YPD76huOw5KSAnBQOOazUgbCCEiA=
Subject key identifier:   99:40:6F:BE:9D:7D:4E:48:91:AD:25:FA:10:72:6C:A6:C5:8F:E8:DB
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6FFE8583DF28B5E769A1AE708FDD402E4BF0A902
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143246.roa
Signing time:             Fri 22 May 2026 07:40:48 +0000
ROA not before:           Fri 22 May 2026 07:35:48 +0000
ROA not after:            Fri 21 May 2027 07:40:48 +0000
asID:                     143246
IP address blocks:        240a:a254::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:fe:85:83:df:28:b5:e7:69:a1:ae:70:8f:dd:40:2e:4b:f0:a9:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:35:48 2026 GMT
            Not After : May 21 07:40:48 2027 GMT
        Subject: CN=99406FBE9D7D4E4891AD25FA10726CA6C58FE8DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6a:63:1e:f5:70:7b:cd:19:56:05:5f:2d:69:
                    a8:1e:ea:45:7f:bf:69:ca:ba:60:42:c1:21:64:27:
                    37:5f:e8:e5:27:e1:d0:04:75:3e:4f:e5:ae:98:f9:
                    bd:1e:4c:f3:54:79:da:19:97:13:3e:14:10:be:6f:
                    d1:1a:a6:a1:75:4c:25:01:59:74:a4:4f:79:9a:26:
                    0e:a8:ac:c4:c5:19:00:5e:70:fb:08:61:c1:44:ab:
                    a9:07:67:91:24:aa:fe:10:2c:97:fd:ee:6e:bd:90:
                    78:63:13:a8:ca:3c:3a:c9:ad:ec:cf:72:ec:87:27:
                    8b:21:5e:33:56:01:85:93:45:0b:79:27:43:62:c7:
                    31:74:0b:02:bd:bf:c7:02:45:b7:df:5c:9f:e3:96:
                    88:59:c6:d7:25:ce:62:e1:c5:9e:c2:94:b9:fa:da:
                    ac:ce:d5:f6:98:88:36:89:1a:8e:cc:40:32:cc:c7:
                    9e:97:ce:42:22:8d:2e:cb:73:2f:e1:53:ff:62:49:
                    1d:7e:a6:cb:99:25:f0:33:f0:9b:01:57:07:63:a3:
                    02:22:d4:8a:2c:f9:46:a9:d5:29:45:11:ab:7d:01:
                    7a:e0:b8:75:62:5d:4b:2d:9b:03:ed:23:38:35:b7:
                    87:22:2a:cd:08:f5:ce:56:f3:42:a7:9b:7b:94:6f:
                    cf:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:40:6F:BE:9D:7D:4E:48:91:AD:25:FA:10:72:6C:A6:C5:8F:E8:DB
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143246.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a254::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:46:4f:de:8b:f8:51:2a:75:af:28:10:47:ce:e1:51:3a:9e:
         c8:25:ac:04:3a:57:d8:5e:31:d6:e2:5f:4c:25:ba:a0:ed:08:
         e8:8d:85:b9:ed:7a:f0:d6:27:d0:64:66:0b:47:0f:25:8a:e0:
         b4:73:c6:d5:98:fa:03:ac:d0:92:49:25:1d:88:c3:99:75:bb:
         c3:4b:18:ec:87:c4:1c:3d:2e:8d:06:9a:84:9b:dd:84:45:af:
         3d:61:e3:d8:40:ff:e5:1b:a1:a2:07:8c:d7:6a:de:da:24:8d:
         23:dc:9f:62:46:6e:5a:45:da:19:26:a6:1f:32:4d:2f:f6:6d:
         fb:e1:c7:85:c5:a7:70:8f:91:c0:cd:9f:4a:d3:47:c9:9c:d4:
         5d:c8:d7:66:cc:08:9e:71:66:41:bf:d7:9d:59:fe:17:17:33:
         bc:71:65:fe:20:75:d6:18:96:da:5e:04:2d:74:f3:11:df:5a:
         d2:d6:13:07:0f:c4:fd:78:a8:1e:16:54:f2:7b:29:1d:25:67:
         7e:af:6e:4d:e8:c0:8c:29:a9:27:57:0f:49:97:76:6b:59:ae:
         34:ce:e2:07:32:a8:9f:ef:22:41:a8:32:26:80:64:33:5c:fb:
         13:7b:0e:08:8a:8e:6e:21:13:33:ac:8d:8c:ab:ef:c1:02:c1:
         c2:e1:91:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----