Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143279.roa
File:                     AS143279.roa (raw, json)
Hash identifier:          HhLqpBz5WA+yJZRWule70xpa20CIcse1my38Sh3RBVU=
Subject key identifier:   69:FE:D4:5E:82:9A:89:30:95:B1:63:D6:E4:84:2B:93:F7:61:E1:85
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       178DF611E9E57426CDBBD5104D95343BAAB069B5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143279.roa
Signing time:             Fri 22 May 2026 07:08:53 +0000
ROA not before:           Fri 22 May 2026 07:03:53 +0000
ROA not after:            Fri 21 May 2027 07:08:53 +0000
asID:                     143279
IP address blocks:        240a:a275::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:8d:f6:11:e9:e5:74:26:cd:bb:d5:10:4d:95:34:3b:aa:b0:69:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:03:53 2026 GMT
            Not After : May 21 07:08:53 2027 GMT
        Subject: CN=69FED45E829A893095B163D6E4842B93F761E185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:60:23:f3:4c:e7:50:7a:6e:a6:99:7f:c6:cd:
                    5d:9f:72:ea:92:66:6e:22:66:36:85:7f:d1:c7:fc:
                    a1:d4:15:ec:a4:21:bf:32:27:1c:43:21:42:3c:67:
                    37:58:47:0c:27:20:1f:46:db:b5:ab:8c:6d:80:79:
                    da:07:f8:5f:8c:b7:c2:e7:18:30:a0:a5:57:c0:f7:
                    20:03:43:2d:a0:7c:8f:0b:18:b5:72:83:84:73:68:
                    1d:03:9e:14:41:92:27:55:5b:77:ce:85:fb:1d:1f:
                    93:bb:a8:99:99:9c:d4:4e:c0:c5:ad:d3:40:1a:ff:
                    98:63:f9:1e:9f:f7:ec:43:24:b3:6a:10:49:d8:e1:
                    30:a1:ce:1a:bc:d3:fd:b5:59:7c:70:a6:dd:c6:3d:
                    50:d2:03:ae:ff:c6:d4:52:ba:06:01:f7:38:0f:ed:
                    6c:85:aa:de:87:a0:76:72:0d:b4:ca:7d:10:24:0b:
                    67:4a:37:8a:ac:56:b5:89:cc:98:4b:b9:1f:82:1b:
                    7a:43:e6:24:26:b4:11:da:15:bb:a4:81:8d:c2:1d:
                    97:02:83:e7:a0:81:ab:9a:e4:77:18:76:06:0b:0f:
                    a0:24:87:57:b8:b3:95:9c:38:b4:e4:17:ba:ea:7d:
                    62:58:b1:42:f7:36:31:c8:68:5e:68:2f:aa:d6:a4:
                    b4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:FE:D4:5E:82:9A:89:30:95:B1:63:D6:E4:84:2B:93:F7:61:E1:85
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143279.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a275::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:21:af:b4:8d:e9:f2:bc:aa:12:67:58:93:fe:6c:18:c3:5d:
         17:7e:fc:71:5f:c8:df:11:84:eb:37:13:a0:3a:2e:74:f6:ff:
         bd:a8:b8:fd:fe:30:fd:1c:68:a4:34:b3:56:20:37:5e:b5:52:
         71:e7:80:6e:8d:3e:8b:ae:a4:d2:d4:58:7f:44:69:60:ab:c4:
         f0:75:68:22:a2:d3:7a:dc:a3:1a:93:64:ca:ac:ca:bf:88:b6:
         6d:75:7f:c6:f1:a3:70:1a:7d:1b:d4:df:b8:fd:b0:05:a2:30:
         59:b7:d5:db:1c:8c:d7:51:c8:37:dc:65:4d:05:f7:eb:67:75:
         8b:81:bd:c8:6e:2b:2a:74:da:8b:a6:3d:7f:7f:6d:57:9f:e6:
         70:26:c9:4e:63:a2:22:bd:5a:20:26:c3:f8:a8:91:55:26:59:
         c6:69:53:e1:e7:e5:79:c2:2f:fa:34:92:41:f8:3b:34:b3:fa:
         02:40:40:6e:c8:c1:42:e6:a9:9f:48:57:e4:f3:64:8d:57:4f:
         1f:2a:46:92:a2:f4:e6:31:e5:ed:96:59:26:49:2a:ce:9f:f7:
         db:09:ba:65:b9:08:16:c0:27:e2:e1:be:05:22:30:6f:10:cd:
         db:2e:4c:75:d9:6e:5e:e2:2b:f0:a2:97:7d:14:59:8a:1f:94:
         c2:26:88:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----