Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143265.roa
File:                     AS143265.roa (raw, json)
Hash identifier:          jHDfAz8S3u6ygJM6mzCH1ayz7BLG+t87Fd1Ok7dVSxo=
Subject key identifier:   B9:E8:5F:0F:12:8C:2B:33:83:B6:F6:04:0F:CE:CB:05:8F:81:2B:98
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0486B43AC2D88ACE136CF39E2CCDA83BF7584E20
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143265.roa
Signing time:             Fri 22 May 2026 06:27:48 +0000
ROA not before:           Fri 22 May 2026 06:22:48 +0000
ROA not after:            Fri 21 May 2027 06:27:48 +0000
asID:                     143265
IP address blocks:        240a:a267::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:86:b4:3a:c2:d8:8a:ce:13:6c:f3:9e:2c:cd:a8:3b:f7:58:4e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:22:48 2026 GMT
            Not After : May 21 06:27:48 2027 GMT
        Subject: CN=B9E85F0F128C2B3383B6F6040FCECB058F812B98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8a:8a:38:12:9d:b7:5a:e3:e0:e7:f8:55:c4:
                    a3:ad:c7:fd:62:c2:e2:2b:00:76:47:33:c1:b2:15:
                    e3:e4:df:27:17:de:66:91:0c:ac:c0:dc:a5:7d:09:
                    f6:15:92:2f:ff:2d:b4:ae:26:ad:d9:f1:45:08:aa:
                    23:8d:cd:bc:59:81:1d:5b:e5:3d:af:5c:34:0c:e3:
                    0d:19:32:a5:8f:a0:7e:aa:2b:b0:bc:77:02:e4:00:
                    fd:13:b5:60:03:2a:ab:ad:33:37:95:50:d5:71:08:
                    d3:14:14:4b:59:dc:4b:aa:05:0b:0e:b9:25:3d:22:
                    a3:21:d6:c9:0a:3a:b6:35:5c:b8:ab:ff:94:70:11:
                    cf:3f:1e:97:55:95:9c:14:8a:fc:8b:1b:13:4b:f5:
                    17:ae:48:32:7d:39:90:3d:13:f5:29:9e:40:dc:59:
                    9e:73:12:3c:e6:7e:c4:ca:11:38:77:15:aa:a5:02:
                    2d:0d:df:8a:14:35:1a:c9:88:9f:ff:0b:13:9f:48:
                    66:f4:74:80:da:e0:29:83:76:2f:74:7e:15:be:76:
                    76:f9:50:13:35:82:85:f4:47:f2:6f:db:e7:34:65:
                    ed:fd:7f:12:e0:39:7b:bf:a6:e7:9f:d3:bf:04:fa:
                    4c:f0:42:df:b1:25:22:28:79:3c:7f:84:f0:ea:db:
                    4f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E8:5F:0F:12:8C:2B:33:83:B6:F6:04:0F:CE:CB:05:8F:81:2B:98
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143265.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a267::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:3f:e4:73:98:6a:39:2e:45:b4:46:30:1e:fa:da:36:dd:b6:
         f6:cb:3c:22:c4:78:3f:5f:83:00:1d:c4:5e:62:d6:4a:1c:39:
         61:41:0b:8e:a0:73:ff:d4:40:0d:de:84:74:83:bc:2b:af:7d:
         d6:e2:cf:2e:eb:b2:f0:43:d1:54:7d:3a:3d:40:6b:09:f7:d8:
         f6:99:81:07:f2:1f:ac:62:e7:9d:b5:19:8a:fe:6d:e1:3f:b4:
         29:d4:7e:f9:34:c8:67:53:d4:89:c8:a7:4e:51:1a:07:f5:b8:
         cd:56:c6:e6:7e:31:1a:1b:ed:d6:a7:d2:9b:25:75:a7:25:51:
         0b:48:4a:fd:3b:7f:96:dc:92:80:a2:15:ee:00:ed:81:c9:f2:
         ed:bf:ee:0f:30:c1:f0:c1:db:90:f4:5e:57:70:84:96:55:ce:
         7d:e2:cb:ce:ff:e0:5f:b3:3a:6b:9a:07:fe:4d:d1:60:63:c4:
         29:2a:9a:65:b8:e9:b0:78:f9:be:4d:68:b4:93:26:65:91:74:
         37:3b:1e:d9:00:29:08:1f:85:1a:ce:1a:b9:a7:6c:3d:db:43:
         95:fd:c2:e7:e0:e6:45:26:2a:3e:f0:1a:73:d1:7b:b7:ed:65:
         b0:a1:00:77:a2:e8:05:f4:ff:a8:d4:2c:c7:5e:93:c3:26:95:
         94:4c:34:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:02 2026 by rpki-client