Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143273.roa
File:                     AS143273.roa (raw, json)
Hash identifier:          IczLjxM4UHjsSyno7T3joh9DYOPscHtwKW1rCeBNBBM=
Subject key identifier:   95:28:52:AA:53:97:C4:ED:57:72:64:95:D1:C2:EC:59:1F:0D:29:1C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0E7EB19AC9641E0F133F65610127501A3AA2DE51
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143273.roa
Signing time:             Tue 26 May 2026 03:16:36 +0000
ROA not before:           Tue 26 May 2026 03:11:36 +0000
ROA not after:            Tue 25 May 2027 03:16:36 +0000
asID:                     143273
IP address blocks:        240a:a26f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:7e:b1:9a:c9:64:1e:0f:13:3f:65:61:01:27:50:1a:3a:a2:de:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:11:36 2026 GMT
            Not After : May 25 03:16:36 2027 GMT
        Subject: CN=952852AA5397C4ED57726495D1C2EC591F0D291C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:dd:ec:97:9d:43:1b:42:a5:76:64:06:e7:33:
                    e4:45:e6:c4:0c:59:41:69:2d:26:84:1f:50:8c:02:
                    72:46:26:d0:ce:23:48:ae:19:53:0c:5f:6c:7a:e2:
                    f5:b4:58:57:51:13:5a:14:66:ad:b7:f7:cf:1d:54:
                    20:e6:bb:6b:1a:45:23:c3:ce:6b:69:06:3e:f8:c9:
                    88:09:e6:80:2e:49:13:57:d9:c9:c8:8b:17:f7:78:
                    f6:7d:5f:d9:ca:5b:c2:36:a4:15:1c:13:53:35:94:
                    b3:bc:c4:ab:f9:e4:b6:2b:55:94:4f:16:10:74:9b:
                    13:a8:f0:2c:2e:11:c5:45:12:59:02:60:c5:09:cb:
                    a9:5f:5a:b7:97:a5:30:97:6d:7d:55:fa:8e:37:51:
                    fa:bd:f6:dc:6d:bd:19:b5:05:66:8c:25:1d:11:da:
                    c5:8d:4a:18:af:94:f5:c4:fc:eb:ee:80:93:0f:3e:
                    92:e1:b2:e7:ee:b9:9a:54:29:46:f7:cb:a6:65:c7:
                    7d:03:38:c9:c7:f3:28:ab:e7:c6:7e:09:97:5d:ad:
                    b4:14:5d:6c:30:9e:1b:3d:e5:c0:1c:6f:3d:af:9f:
                    ce:64:d5:92:1d:70:cc:d3:75:6c:20:73:ca:59:6b:
                    0a:2a:77:5e:7e:90:8e:cf:03:c0:c0:55:10:9e:d7:
                    e1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:28:52:AA:53:97:C4:ED:57:72:64:95:D1:C2:EC:59:1F:0D:29:1C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143273.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a26f::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:b8:db:67:05:21:fd:62:34:e4:08:da:83:d9:b6:db:66:c5:
         9c:ef:2d:66:72:89:b0:2e:de:5a:d5:30:f1:4f:8d:55:d9:90:
         1a:8b:65:be:df:f3:d6:07:ce:27:32:bd:b3:a1:47:62:7a:d6:
         65:29:ce:e1:2b:8d:1d:1a:fb:b9:52:32:cd:3d:06:60:b2:d3:
         1d:c4:4d:08:7a:a6:af:f9:54:f7:ff:23:cb:d5:a3:3d:9e:ec:
         40:41:0e:40:09:36:04:52:8a:de:ea:1a:7e:b0:85:65:60:6d:
         2f:21:48:ef:f5:42:1a:3b:e9:ec:79:b3:a4:7b:ac:fd:b0:38:
         7a:28:e7:97:53:93:a1:5c:fa:36:d9:40:dc:9c:62:90:22:5f:
         d5:47:56:1b:50:66:b2:6b:cc:68:7e:7b:70:93:b5:6e:06:1f:
         f3:79:52:35:2d:82:f4:68:87:86:e6:70:50:f7:2d:0d:e2:e7:
         ca:ad:9f:dd:22:f1:77:64:b2:bb:3e:02:10:2c:1e:fc:4c:8b:
         f4:a7:a9:91:87:cd:08:6c:28:ff:ac:99:ac:aa:5d:69:18:f2:
         12:31:96:0b:aa:54:2d:d3:39:a4:52:0c:ed:81:b7:55:b5:8f:
         10:74:79:ec:da:e3:0f:ed:78:07:9f:78:2f:96:25:b0:7b:e1:
         ff:f1:89:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:16 2026 by rpki-client