Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143256.roa
File:                     AS143256.roa (raw, json)
Hash identifier:          R8QDAW8lWWbh+PPp952+WzgiXKD8itI/MAIe/uKF+5I=
Subject key identifier:   73:CD:0A:AA:29:DF:1F:1B:C1:FA:8C:18:D4:69:E1:39:A5:E8:D9:26
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5DEBBF6E8537A23EC2D0541DE3386DEDB3405FE2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143256.roa
Signing time:             Fri 22 May 2026 02:47:39 +0000
ROA not before:           Fri 22 May 2026 02:42:39 +0000
ROA not after:            Fri 21 May 2027 02:47:39 +0000
asID:                     143256
IP address blocks:        240a:a25e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:eb:bf:6e:85:37:a2:3e:c2:d0:54:1d:e3:38:6d:ed:b3:40:5f:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:42:39 2026 GMT
            Not After : May 21 02:47:39 2027 GMT
        Subject: CN=73CD0AAA29DF1F1BC1FA8C18D469E139A5E8D926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6a:93:9b:6c:49:54:26:69:57:9d:9c:2e:ad:
                    8e:c4:1f:94:6e:e2:52:7c:15:b9:7b:22:2b:7d:ba:
                    6a:08:09:6b:6b:86:f9:fb:41:96:03:e8:6c:38:ec:
                    e9:eb:c0:e0:58:55:6f:3a:3f:32:6e:6a:4b:86:67:
                    70:85:65:93:2c:e1:e5:44:83:58:6d:bd:cc:b0:25:
                    37:29:a7:26:da:fe:aa:13:16:89:31:89:2f:cb:f4:
                    8a:3f:11:cd:0e:32:ad:07:91:73:2e:32:57:65:00:
                    e4:91:52:39:34:53:f7:a3:52:73:52:9a:db:e0:f1:
                    0f:56:08:1e:1a:4d:79:46:00:3f:92:e8:bf:df:e2:
                    2b:17:de:29:99:fe:0d:bf:8f:83:de:67:08:d9:74:
                    4c:10:b3:ae:4d:c7:45:f6:1a:82:e0:3e:e1:02:d7:
                    0e:ab:4d:d7:ee:44:12:51:66:97:fe:52:6f:95:ae:
                    0f:d0:d7:02:e2:c1:6b:3f:78:4d:dc:18:a9:62:e3:
                    a3:cd:38:63:c7:48:c1:65:99:37:6f:6c:3b:84:71:
                    cb:f6:00:f3:4d:1d:50:0b:65:e2:a8:80:50:ec:50:
                    8b:99:34:b9:20:54:3d:ce:b7:30:d5:e9:54:ed:51:
                    a8:9a:5d:d0:7a:3f:82:1d:f9:25:29:5d:6b:e7:d8:
                    e1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CD:0A:AA:29:DF:1F:1B:C1:FA:8C:18:D4:69:E1:39:A5:E8:D9:26
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143256.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a25e::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:67:df:96:fa:f2:9c:ad:d6:e3:69:51:fc:15:17:72:a4:6d:
         a1:34:64:6e:45:39:27:94:ce:0a:f9:8c:49:bf:86:b3:66:37:
         80:45:07:69:45:7e:ec:90:45:0d:04:1d:64:eb:42:75:ce:dd:
         78:28:71:85:af:9a:b3:22:93:84:f0:7d:f0:bf:bd:7a:2b:36:
         e8:0f:65:2b:ce:93:2e:2e:5c:9e:13:31:78:83:e9:f0:fb:d2:
         63:8a:39:f0:c7:c6:57:07:b8:37:ae:22:53:0e:37:cc:e5:8b:
         0e:14:42:32:06:cd:4a:9f:57:fa:8f:04:50:94:a7:19:af:0a:
         76:76:49:5c:44:92:05:01:6c:8a:99:8d:50:08:57:a9:6a:2c:
         63:4e:75:4b:54:fe:a8:ac:c8:d0:0e:17:74:93:db:8a:a8:b1:
         e4:d5:90:85:de:6f:57:21:4a:e3:9d:37:97:9c:46:b2:2f:ad:
         b8:98:1a:41:0a:95:36:8a:69:55:9e:48:c0:cc:a3:0b:43:72:
         3c:6d:f9:81:7a:a9:4f:8e:3f:6c:88:ba:dd:ab:fb:c8:e0:54:
         82:55:f7:24:73:e7:a4:93:a3:b2:b6:9b:3c:e6:5d:22:c3:09:
         04:4e:fa:68:32:5f:ab:9d:29:b9:58:d4:f1:62:56:01:70:04:
         20:ff:d3:9f
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUXeu/boU3oj7C0FQd4zht7bNAX+IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMjQyMzlaFw0yNzA1MjEwMjQ3MzlaMDMxMTAvBgNV
BAMTKDczQ0QwQUFBMjlERjFGMUJDMUZBOEMxOEQ0NjlFMTM5QTVFOEQ5MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJapObbElUJmlXnZwurY7EH5Ru
4lJ8Fbl7Iit9umoICWtrhvn7QZYD6Gw47OnrwOBYVW86PzJuakuGZ3CFZZMs4eVE
g1htvcywJTcppyba/qoTFokxiS/L9Io/Ec0OMq0HkXMuMldlAOSRUjk0U/ejUnNS
mtvg8Q9WCB4aTXlGAD+S6L/f4isX3imZ/g2/j4PeZwjZdEwQs65Nx0X2GoLgPuEC
1w6rTdfuRBJRZpf+Um+Vrg/Q1wLiwWs/eE3cGKli46PNOGPHSMFlmTdvbDuEccv2
APNNHVALZeKogFDsUIuZNLkgVD3OtzDV6VTtUaiaXdB6P4Id+SUpXWvn2OGhAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUc80KqinfHxvB+owY1GnhOaXo2SYwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMjU2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqiXjANBgkqhkiG9w0BAQsFAAOCAQEAHGff
lvrynK3W42lR/BUXcqRtoTRkbkU5J5TOCvmMSb+Gs2Y3gEUHaUV+7JBFDQQdZOtC
dc7deChxha+asyKThPB98L+9eis26A9lK86TLi5cnhMxeIPp8PvSY4o58MfGVwe4
N64iUw43zOWLDhRCMgbNSp9X+o8EUJSnGa8KdnZJXESSBQFsipmNUAhXqWosY051
S1T+qKzI0A4XdJPbiqix5NWQhd5vVyFK4503l5xGsi+tuJgaQQqVNoppVZ5IwMyj
C0NyPG35gXqpT44/bIi63av7yOBUglX3JHPnpJOjsrabPOZdIsMJBE76aDJfq50p
uVjU8WJWAXAEIP/Tnw==
-----END CERTIFICATE-----