Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143294.roa
File:                     AS143294.roa (raw, json)
Hash identifier:          7qiRyrVwI/jeRBZhRJHnXpSSH00O1NF7Q4ztQR548+g=
Subject key identifier:   EC:83:D8:BB:BF:6E:5E:AE:8C:D9:EB:A1:D8:66:46:05:82:D4:DC:9A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       361667ECDF343ECCFCD68C38621A56BF8F022EC7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143294.roa
Signing time:             Mon 25 May 2026 01:20:17 +0000
ROA not before:           Mon 25 May 2026 01:15:17 +0000
ROA not after:            Mon 24 May 2027 01:20:17 +0000
asID:                     143294
IP address blocks:        240a:a284::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:16:67:ec:df:34:3e:cc:fc:d6:8c:38:62:1a:56:bf:8f:02:2e:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:15:17 2026 GMT
            Not After : May 24 01:20:17 2027 GMT
        Subject: CN=EC83D8BBBF6E5EAE8CD9EBA1D866460582D4DC9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:79:01:19:6e:f0:6c:44:ef:f3:cf:98:e8:a6:
                    ef:55:0f:0d:f3:df:b7:ae:ee:16:e1:52:ea:cf:c3:
                    db:a8:93:32:6d:0b:3f:b0:56:fb:25:91:fc:ea:b9:
                    8b:74:cc:b5:8e:dc:90:b2:38:70:b4:96:6d:c5:16:
                    f4:1f:fc:40:39:9e:c2:1c:e5:42:0c:09:2b:d0:e9:
                    ba:c8:61:52:5c:66:dc:40:15:66:69:52:f1:6a:81:
                    6e:72:c0:f0:08:8c:64:1e:cb:1e:c2:5b:ee:e8:67:
                    90:11:e8:f0:f5:f0:64:2c:27:8f:7f:af:0b:89:b9:
                    fc:50:72:a3:f4:ca:a3:51:96:27:da:39:7e:82:10:
                    48:57:f4:93:4b:f3:ec:95:a3:f8:7e:6e:d1:42:fe:
                    22:12:e0:bb:2b:d5:d7:2e:da:48:85:b4:d5:28:f9:
                    b8:94:db:da:de:ba:d9:76:b4:09:87:d5:9a:eb:14:
                    9e:4b:12:70:16:85:32:21:03:e7:47:83:b8:2c:29:
                    02:8a:c1:cc:2a:b0:5b:b6:5d:ec:35:87:47:b9:c7:
                    5c:9e:40:28:4b:1f:50:04:c8:66:e7:42:40:fe:50:
                    30:a5:0d:96:1f:e6:b8:73:62:15:99:00:3a:50:1c:
                    d1:d2:06:a6:a1:fc:d7:e0:a5:0b:83:1a:76:4f:25:
                    09:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:83:D8:BB:BF:6E:5E:AE:8C:D9:EB:A1:D8:66:46:05:82:D4:DC:9A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143294.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a284::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:70:bc:da:18:fd:c9:fa:46:18:c3:c5:b1:16:33:3d:ae:0a:
         74:e4:ba:08:ce:a3:48:f8:95:77:db:c1:21:93:ea:45:37:f4:
         c9:20:72:c4:b3:c2:36:9d:94:8c:16:69:eb:4b:8b:d6:f3:94:
         5b:92:e1:80:70:1c:f8:77:74:90:f0:c9:e9:e6:04:97:8a:75:
         45:69:ad:fe:2a:3d:e0:3d:9e:d1:82:8f:a1:c1:b2:f1:a7:81:
         b6:ef:a2:dc:7f:f5:10:e8:f7:56:f4:01:45:18:db:60:d8:d8:
         23:5e:f2:62:2c:a0:20:a6:2a:ab:02:6d:15:67:c6:24:c9:7c:
         54:7e:a1:65:50:23:74:f1:fa:75:0d:20:3f:65:47:4f:aa:e3:
         1e:03:e4:c1:49:29:3b:46:a6:d0:47:ee:25:af:18:ef:a2:73:
         87:f7:0f:4f:5f:65:de:a5:2f:1c:e1:d8:62:31:c0:86:4b:69:
         3b:2d:26:79:46:58:c9:b4:95:92:8b:72:c3:55:89:70:4e:7c:
         c8:01:b7:c1:9d:56:c2:75:09:60:82:3d:0c:89:4c:96:e3:59:
         55:88:33:70:56:93:45:d8:d6:b3:74:3d:02:ef:8f:7e:5c:6d:
         97:ae:42:60:a4:d6:4b:cc:ad:f1:2e:f7:b2:ec:70:8d:df:bf:
         3f:51:73:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:57 2026 by rpki-client