Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143261.roa
File:                     AS143261.roa (raw, json)
Hash identifier:          Cz4BjaWxS88o1rec2Qhkg/U7ZP9264tPdqs2uItIzSE=
Subject key identifier:   50:AA:D7:7D:78:5E:93:49:4F:66:10:BD:59:C4:08:CB:0E:8B:20:BA
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       33435A3D1929749514A2F8D278FEF27C99FF0B67
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143261.roa
Signing time:             Tue 26 May 2026 06:13:00 +0000
ROA not before:           Tue 26 May 2026 06:08:00 +0000
ROA not after:            Tue 25 May 2027 06:13:00 +0000
asID:                     143261
IP address blocks:        240a:a263::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:43:5a:3d:19:29:74:95:14:a2:f8:d2:78:fe:f2:7c:99:ff:0b:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:08:00 2026 GMT
            Not After : May 25 06:13:00 2027 GMT
        Subject: CN=50AAD77D785E93494F6610BD59C408CB0E8B20BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fd:3d:f2:07:c8:61:74:45:43:4d:7c:83:13:
                    71:c0:80:8e:d0:49:db:b8:7c:38:24:2f:d9:80:3e:
                    0f:20:6d:e4:a1:68:cb:eb:82:c1:e5:d3:32:45:f0:
                    40:3e:fd:21:9e:18:58:e2:d0:19:5b:d3:17:29:33:
                    7c:10:a2:7d:82:70:8b:9c:bc:f8:9e:ad:25:d3:9f:
                    c4:d3:71:6c:24:19:50:b8:72:80:7e:03:9b:10:c7:
                    47:f8:d3:07:c6:4d:80:f5:39:73:cd:db:bf:b2:be:
                    9f:e2:9b:d5:6d:e1:01:88:ef:e5:64:76:32:f6:57:
                    16:f0:28:f1:78:e0:d5:75:55:31:4f:71:43:b6:95:
                    b8:42:77:db:19:54:f1:67:b8:e9:80:b9:ef:e3:f8:
                    6b:ad:31:07:24:f0:ab:5d:49:42:29:12:45:fc:4a:
                    54:3f:0e:3c:a1:30:15:b6:0a:30:d2:8f:55:e1:62:
                    59:4d:82:8b:d6:8f:dd:1d:4e:7e:bc:6c:29:9a:89:
                    fe:a6:a3:55:f9:8d:7d:d1:eb:c8:16:2e:7e:70:7b:
                    85:6b:33:32:21:5d:37:35:7c:dc:f1:1b:42:69:de:
                    1a:29:23:d2:50:6b:da:3d:15:57:dd:f4:1c:6b:61:
                    97:f7:28:f7:17:1c:98:ce:6c:9f:a8:e1:0d:40:3a:
                    67:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AA:D7:7D:78:5E:93:49:4F:66:10:BD:59:C4:08:CB:0E:8B:20:BA
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143261.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a263::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:6b:67:0e:b6:90:c5:b9:55:f5:70:3e:5b:ab:5b:d9:ff:dc:
         f8:57:f6:a5:93:b7:76:a6:13:07:54:df:22:7f:ef:d1:01:ad:
         c5:27:43:35:ca:60:15:d5:dd:11:2a:f1:ef:1b:1f:a5:76:70:
         6d:8f:54:f3:c0:ff:3f:9b:16:91:ba:8a:8c:8c:e2:09:56:32:
         d0:f8:d0:a5:af:07:4b:da:63:89:2c:48:be:69:59:09:f3:b7:
         09:d4:4d:0d:7c:38:17:52:e4:e3:4e:5e:aa:07:e1:2c:19:1e:
         a1:a8:ec:24:ee:01:cc:6e:60:6b:f6:43:16:68:1f:c4:2d:3a:
         11:78:02:4f:c8:01:bc:3b:08:0d:00:d1:20:6b:a2:61:de:91:
         b1:96:12:aa:d5:01:d0:18:a2:13:e0:be:65:c6:dc:fd:c2:51:
         c4:10:2d:9b:7f:98:48:48:1e:36:d0:c4:50:41:4a:2b:e7:7d:
         4a:68:50:58:c3:a0:f6:41:7f:dc:c0:55:34:e5:0f:7a:4e:0d:
         a5:0f:50:52:c1:7c:98:6f:8f:12:1c:86:d1:7b:c8:89:7c:cc:
         19:02:3d:6e:8a:d6:cb:51:26:67:ca:6a:c6:09:75:ae:64:5f:
         d9:2e:e8:5c:69:33:03:ce:75:8f:cf:5b:15:f6:72:37:55:90:
         c8:f4:ec:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:07 2026 by rpki-client