Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143289.roa
File:                     AS143289.roa (raw, json)
Hash identifier:          o+RKegEdAIGulpwhggFDb5wdTscOTH2zh8jXkgWkYhA=
Subject key identifier:   7B:00:11:99:FE:21:2A:04:34:4B:F1:7B:58:60:32:74:03:93:E1:D2
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       07E21031414170F086660BA15221A1DCFFBF1B60
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143289.roa
Signing time:             Tue 26 May 2026 08:53:06 +0000
ROA not before:           Tue 26 May 2026 08:48:06 +0000
ROA not after:            Tue 25 May 2027 08:53:06 +0000
asID:                     143289
IP address blocks:        240a:a27f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:e2:10:31:41:41:70:f0:86:66:0b:a1:52:21:a1:dc:ff:bf:1b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 08:48:06 2026 GMT
            Not After : May 25 08:53:06 2027 GMT
        Subject: CN=7B001199FE212A04344BF17B586032740393E1D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cf:1f:37:d6:65:33:b8:ed:3a:44:25:3f:cf:
                    cd:a0:dd:5e:3f:f5:cb:88:98:a5:ba:b0:c6:aa:f8:
                    b5:13:8e:f7:d1:61:36:8e:7c:7a:22:98:33:cd:19:
                    65:66:1a:9b:d9:e1:96:66:f4:bd:58:6f:89:e4:df:
                    45:2b:29:41:3a:b3:f9:83:01:ac:c1:ca:f9:21:e5:
                    a8:72:ac:42:9d:1e:23:fe:7b:47:4e:fa:d2:f6:87:
                    85:a1:58:8b:07:74:d2:ac:81:f9:b4:75:33:d3:ba:
                    2c:db:48:dd:65:e9:54:79:4f:f7:52:06:64:d5:6f:
                    7b:0a:18:e8:d6:fe:34:89:bd:77:72:d7:10:ad:9c:
                    0d:d9:2e:13:4d:ed:13:ba:f4:b9:79:48:22:60:ac:
                    64:6f:b0:91:07:a3:35:d8:a9:f7:27:e9:f8:05:e6:
                    04:93:20:e5:e9:59:6a:e4:1a:2e:57:05:58:fd:71:
                    0a:22:9d:28:1b:3e:68:07:ad:6d:a6:da:70:f8:3e:
                    f7:4e:24:a6:24:c6:84:24:7c:dd:da:f7:3d:d4:60:
                    14:e9:2b:97:b8:73:fc:d2:5a:12:ee:da:10:98:90:
                    0f:41:d6:e8:9b:19:2a:4b:25:ad:b4:37:fb:80:43:
                    ce:b7:6a:2b:bf:49:65:2b:96:4b:c1:43:b2:3c:7b:
                    35:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:00:11:99:FE:21:2A:04:34:4B:F1:7B:58:60:32:74:03:93:E1:D2
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143289.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a27f::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:cd:ce:00:4f:f5:69:38:e1:0c:fd:51:27:d5:ec:63:48:2d:
         75:fd:45:86:51:32:a4:e0:06:3c:ae:5d:72:81:6f:bf:a7:5a:
         dc:d5:87:a8:c0:ed:03:93:9e:c0:71:06:64:91:4e:fc:66:00:
         1c:8d:63:ae:81:cf:a4:c4:3f:69:1d:27:28:54:e9:d4:71:74:
         18:92:e7:73:3d:91:92:f2:f0:46:23:e5:1a:6e:21:09:de:c7:
         61:b6:87:b6:08:c0:13:90:35:21:48:94:08:8b:3f:05:3e:ee:
         74:a1:f8:8f:52:2c:3b:e0:ff:5a:c8:af:f9:c8:e8:91:15:85:
         e0:47:d6:53:89:07:34:07:e5:98:24:73:eb:d1:7c:a7:20:30:
         f6:bd:cc:8a:13:60:7f:37:3d:fc:7d:40:d2:88:a8:6e:54:94:
         b2:de:78:e0:50:a1:7a:81:46:85:62:a4:f4:48:53:46:e6:bd:
         a3:01:de:0d:44:05:33:39:8d:3f:9d:bb:8c:79:0f:79:4e:57:
         36:4e:38:5d:86:4d:d0:2b:17:26:db:ca:a0:92:8f:4e:85:99:
         ac:03:77:ac:de:99:0b:f2:9b:30:d5:0e:58:f0:85:a8:83:2e:
         9b:64:e2:b6:e5:f9:39:60:0a:05:be:71:51:70:af:70:f6:e7:
         15:66:f7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----