Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143272.roa
File:                     AS143272.roa (raw, json)
Hash identifier:          vdayTdoHi09rMTn6qA5HhY+uiEnxzMzOUZXpq1mI6mA=
Subject key identifier:   60:7C:AE:AF:46:4A:F6:33:BF:E2:48:4E:36:96:42:7B:D5:80:38:49
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6DF0743F1E778E9C7A5DA0574AAE32EB25941B35
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143272.roa
Signing time:             Tue 26 May 2026 06:30:51 +0000
ROA not before:           Tue 26 May 2026 06:25:51 +0000
ROA not after:            Tue 25 May 2027 06:30:51 +0000
asID:                     143272
IP address blocks:        240a:a26e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f0:74:3f:1e:77:8e:9c:7a:5d:a0:57:4a:ae:32:eb:25:94:1b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:51 2026 GMT
            Not After : May 25 06:30:51 2027 GMT
        Subject: CN=607CAEAF464AF633BFE2484E3696427BD5803849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8b:92:57:d1:5a:42:6d:1f:da:99:34:b0:62:
                    f8:7f:66:07:13:e9:85:f4:e1:59:07:5a:6b:d8:2f:
                    b7:ad:29:c9:86:b3:45:de:b5:02:49:06:53:18:9d:
                    97:ef:70:64:49:ad:0a:18:8e:38:77:7b:77:51:6a:
                    1b:d7:66:02:2f:70:c8:c6:5c:0e:44:db:1a:d9:cf:
                    ce:a1:5c:d6:eb:76:8b:d5:6d:40:09:7b:50:7f:b5:
                    03:eb:e5:86:80:7b:f9:11:c8:e3:75:11:52:a4:2b:
                    1e:e2:da:6f:09:df:ba:5f:3c:03:0d:70:48:45:82:
                    01:70:c9:3d:f3:71:e2:28:88:12:11:4b:05:86:2c:
                    ba:4f:ec:d0:68:e7:c8:d2:02:f3:49:be:49:03:93:
                    16:a7:cc:58:8c:9f:fd:23:ea:5e:70:e2:f6:51:44:
                    0f:3d:48:ef:f3:1f:f0:c2:84:3d:f0:e9:45:7f:73:
                    9d:52:b5:c5:ea:5e:f2:36:82:c6:21:11:0a:d5:bc:
                    f2:95:94:43:93:91:5b:be:aa:59:cf:70:bc:d5:a4:
                    55:d8:a8:ed:a4:cb:b4:ad:f3:96:91:ca:c3:40:31:
                    50:07:ae:52:1c:e7:38:29:78:9f:95:47:77:cd:e6:
                    50:ac:75:b4:e0:a7:e1:6e:f1:77:c5:7e:64:de:f3:
                    f3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:7C:AE:AF:46:4A:F6:33:BF:E2:48:4E:36:96:42:7B:D5:80:38:49
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143272.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a26e::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:b1:22:f0:e7:45:b8:72:d4:32:8f:56:fe:67:d8:6b:c4:de:
         3f:d7:91:57:38:cb:00:18:2f:12:e6:93:45:37:11:63:a9:b9:
         77:c3:04:5e:7e:8e:82:f9:00:13:03:aa:c7:b6:5a:52:a8:94:
         56:46:b9:fb:2d:43:dd:8e:4b:60:f0:b6:24:70:37:54:67:a4:
         85:93:b7:d3:a4:f5:6f:d3:01:06:d7:9b:8d:d2:32:4b:12:cc:
         2a:91:28:76:4e:84:ad:8f:21:94:75:c9:82:09:ca:85:ef:00:
         51:b5:7c:97:5a:84:5e:09:eb:93:f8:92:74:df:d9:99:1d:d7:
         9c:c1:22:65:65:9d:8f:b3:44:0e:a9:30:98:83:a2:6d:f1:bc:
         33:36:4f:97:f6:54:06:c0:9a:87:f8:2a:38:a6:3d:e8:7d:5b:
         52:07:ba:2f:6e:48:7d:49:7d:1f:d3:26:f7:46:59:c3:c3:30:
         61:34:45:dd:f6:c7:99:d6:03:8e:0c:4d:d7:eb:62:60:1d:91:
         0a:cf:66:84:75:0a:bc:f5:b7:50:b1:60:db:c6:be:da:c9:96:
         0a:f9:b4:37:78:33:14:a2:e0:4d:cd:e5:65:54:dc:64:fc:6a:
         38:71:14:40:96:96:21:ed:16:b0:d1:73:b8:fc:45:05:74:7e:
         fd:a3:0a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:26 2026 by rpki-client