Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143249.roa
File:                     AS143249.roa (raw, json)
Hash identifier:          CGJ+5S4mNBbM8+fyU496KzjSvZavRDOK2ZABc4yjlCU=
Subject key identifier:   92:79:DB:39:F2:84:A0:62:EF:FF:7E:ED:58:EB:B8:C4:F5:9C:D2:38
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5F6AF030D707A0051603E940AF258CFDF2E827A1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143249.roa
Signing time:             Fri 22 May 2026 07:32:11 +0000
ROA not before:           Fri 22 May 2026 07:27:11 +0000
ROA not after:            Fri 21 May 2027 07:32:11 +0000
asID:                     143249
IP address blocks:        240a:a257::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:6a:f0:30:d7:07:a0:05:16:03:e9:40:af:25:8c:fd:f2:e8:27:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:11 2026 GMT
            Not After : May 21 07:32:11 2027 GMT
        Subject: CN=9279DB39F284A062EFFF7EED58EBB8C4F59CD238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:27:a0:fa:50:1c:c5:84:2f:9e:f2:97:c3:7b:
                    34:76:d4:36:61:b1:fe:db:ae:ce:d7:05:bd:dd:5f:
                    65:0d:e7:29:d7:a7:32:f2:ed:b5:4a:88:86:7e:5f:
                    ca:71:c8:7b:47:0b:8f:91:be:ea:3d:53:52:9d:fa:
                    58:4d:5e:cb:65:3a:6e:3e:57:3c:23:49:98:06:8c:
                    54:ff:6d:e7:56:d4:a7:7a:16:54:52:77:90:44:41:
                    9a:12:24:13:55:ff:5c:c0:2a:b2:54:59:5c:c8:6b:
                    5e:d5:60:8a:24:af:05:cf:da:93:4c:40:00:31:80:
                    25:f3:9f:cd:7c:33:00:8f:24:12:6a:4b:fe:af:c2:
                    e1:a9:61:a5:20:dd:e6:2c:f7:0e:3a:20:09:2a:57:
                    e7:e2:13:39:be:c1:7f:9f:32:1d:eb:32:e8:41:2c:
                    5c:09:7e:28:58:c6:ab:3a:7f:a7:11:d2:0f:b8:84:
                    96:20:72:ce:2e:41:04:09:4f:fd:2b:5b:72:2b:fe:
                    11:61:27:97:f7:82:96:27:e3:90:61:ca:91:58:06:
                    ad:03:fb:61:a4:41:72:ea:dc:15:ce:9a:67:bc:e4:
                    34:76:c7:f7:bd:bf:69:c3:bb:41:05:81:3a:a4:c3:
                    fe:d0:4e:4a:13:75:a0:be:a3:7e:ab:b0:cb:27:85:
                    ed:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:79:DB:39:F2:84:A0:62:EF:FF:7E:ED:58:EB:B8:C4:F5:9C:D2:38
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143249.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a257::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:2f:b6:9f:eb:6e:44:60:e6:e1:55:48:3d:ac:5d:2d:41:40:
         e2:9d:63:be:1f:39:ed:f9:b7:3e:3a:8b:3f:e4:b8:1a:a3:d0:
         f8:35:eb:41:19:d5:b9:a7:e6:0b:2a:1b:01:a0:fd:84:ed:5f:
         01:89:b4:36:8c:ec:99:f7:73:07:7c:3b:76:fd:0e:78:80:32:
         e0:88:db:9d:60:92:93:02:f5:7b:d9:08:08:da:ac:0d:b2:f4:
         39:85:0d:5b:b6:94:bd:6a:da:cb:da:34:d0:c0:01:f7:4d:29:
         91:ef:a4:9e:47:8d:92:21:99:82:61:75:8a:a2:cc:61:bc:a0:
         81:99:b3:a4:e8:d4:fe:ef:e2:51:e2:20:19:9f:71:60:f7:d0:
         6f:a2:17:1b:ee:0e:05:e1:90:e6:a9:cd:94:db:25:49:25:d4:
         3a:ef:41:48:dc:85:ef:34:d3:d7:b0:a7:cc:ba:c9:99:36:4a:
         27:a9:de:ff:2a:5f:24:1d:e7:11:b8:bb:46:b1:8e:9a:08:ee:
         f3:02:c7:dd:cf:f0:d9:68:e0:2d:99:df:07:f3:a0:0d:59:e3:
         be:af:b6:9b:a5:0f:04:1b:f6:fe:87:63:30:3f:07:88:52:da:
         29:75:67:71:5b:4c:c7:33:bd:0e:3d:2f:93:4d:43:11:c0:84:
         b4:a0:c4:d7
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUX2rwMNcHoAUWA+lAryWM/fLoJ6EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzI3MTFaFw0yNzA1MjEwNzMyMTFaMDMxMTAvBgNV
BAMTKDkyNzlEQjM5RjI4NEEwNjJFRkZGN0VFRDU4RUJCOEM0RjU5Q0QyMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSJ6D6UBzFhC+e8pfDezR21DZh
sf7brs7XBb3dX2UN5ynXpzLy7bVKiIZ+X8pxyHtHC4+Rvuo9U1Kd+lhNXstlOm4+
VzwjSZgGjFT/bedW1Kd6FlRSd5BEQZoSJBNV/1zAKrJUWVzIa17VYIokrwXP2pNM
QAAxgCXzn818MwCPJBJqS/6vwuGpYaUg3eYs9w46IAkqV+fiEzm+wX+fMh3rMuhB
LFwJfihYxqs6f6cR0g+4hJYgcs4uQQQJT/0rW3Ir/hFhJ5f3gpYn45BhypFYBq0D
+2GkQXLq3BXOmme85DR2x/e9v2nDu0EFgTqkw/7QTkoTdaC+o36rsMsnhe3dAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUknnbOfKEoGLv/37tWOu4xPWc0jgwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMjQ5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqiVzANBgkqhkiG9w0BAQsFAAOCAQEAsi+2
n+tuRGDm4VVIPaxdLUFA4p1jvh857fm3PjqLP+S4GqPQ+DXrQRnVuafmCyobAaD9
hO1fAYm0NozsmfdzB3w7dv0OeIAy4IjbnWCSkwL1e9kICNqsDbL0OYUNW7aUvWra
y9o00MAB900pke+knkeNkiGZgmF1iqLMYbyggZmzpOjU/u/iUeIgGZ9xYPfQb6IX
G+4OBeGQ5qnNlNslSSXUOu9BSNyF7zTT17CnzLrJmTZKJ6ne/ypfJB3nEbi7RrGO
mgju8wLH3c/w2WjgLZnfB/OgDVnjvq+2m6UPBBv2/odjMD8HiFLaKXVncVtMxzO9
Dj0vk01DEcCEtKDE1w==
-----END CERTIFICATE-----