Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143302.roa
File:                     AS143302.roa (raw, json)
Hash identifier:          AJp03GJwBiqH/zQZFUnrF53fQTUT/PWzshhXb4h1Nbw=
Subject key identifier:   99:29:9C:83:EF:BA:8E:71:18:0A:93:02:A2:1E:68:5E:E7:A9:E1:21
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1D26BECE8FBAF09EA1048A0DF8ACDA7A54587CF8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143302.roa
Signing time:             Fri 22 May 2026 01:50:26 +0000
ROA not before:           Fri 22 May 2026 01:45:26 +0000
ROA not after:            Fri 21 May 2027 01:50:26 +0000
asID:                     143302
IP address blocks:        240a:a28c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:26:be:ce:8f:ba:f0:9e:a1:04:8a:0d:f8:ac:da:7a:54:58:7c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:26 2026 GMT
            Not After : May 21 01:50:26 2027 GMT
        Subject: CN=99299C83EFBA8E71180A9302A21E685EE7A9E121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:52:83:7b:0f:d1:a9:94:78:45:65:8f:67:1a:
                    9b:ad:c7:17:d7:cd:55:a7:eb:ee:01:35:dc:83:e7:
                    2b:03:d6:9a:cd:eb:2a:17:da:b6:89:63:4e:d5:19:
                    18:dc:bf:a0:50:f6:62:67:07:81:9f:b2:2b:75:b8:
                    11:99:39:21:ae:14:e5:af:62:c2:07:d1:12:49:8c:
                    a3:d9:5b:4f:f2:33:2f:14:00:52:77:e7:2b:b4:95:
                    44:d4:96:ff:15:15:e3:67:62:0d:d0:d1:40:96:f4:
                    b8:a4:0d:b1:74:76:e6:ab:14:3d:4e:18:1e:5f:c9:
                    4e:0c:2e:f4:cc:ad:e9:09:69:8a:80:ec:fc:eb:ce:
                    c4:1a:1c:66:e5:63:b2:68:fc:b8:d2:88:55:33:9b:
                    d4:d6:4a:30:d9:b6:5e:e4:89:50:c9:df:4d:37:f8:
                    e7:4f:3a:77:bd:f1:8d:72:e8:bd:bf:a5:33:e3:13:
                    7f:68:20:50:98:8f:94:3f:9f:53:4a:e2:a5:a3:e4:
                    6a:72:72:eb:5c:f8:37:c5:e3:3b:e5:d1:66:ef:eb:
                    ab:69:0a:09:95:9c:e8:10:b4:6d:72:05:d6:3b:0f:
                    43:37:b0:71:58:b4:86:f6:aa:9d:ef:68:43:f0:1b:
                    8f:98:f0:15:54:de:d9:86:8e:6a:fa:89:92:2a:ad:
                    3a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:29:9C:83:EF:BA:8E:71:18:0A:93:02:A2:1E:68:5E:E7:A9:E1:21
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143302.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a28c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:4b:3f:11:fd:fb:c4:bf:0a:ce:ef:27:1d:5e:98:56:c5:f4:
         0b:1d:de:bf:e6:c0:a5:65:ae:77:69:39:76:7f:c7:46:42:ec:
         49:78:bc:48:ab:e8:5c:e5:ee:f4:0a:10:d7:c5:ec:d4:25:6f:
         86:c8:a8:f5:19:e3:79:00:e3:67:3e:8c:a6:37:78:b3:c6:42:
         ee:46:e9:63:a3:37:2f:d4:e7:c6:f4:6f:74:16:f4:29:97:c5:
         f7:96:9f:a9:85:6a:ae:61:13:7e:ab:97:52:c2:c9:b4:7a:73:
         6c:9e:71:1b:5f:fd:dc:52:7c:d0:36:14:2c:35:e8:da:b2:aa:
         97:d3:90:79:7d:85:56:6d:c6:ed:48:12:85:5c:1c:07:45:81:
         a8:19:be:fe:9d:cc:85:ec:18:12:22:7c:9b:5a:79:f2:63:e7:
         20:b0:bf:19:6c:c2:5b:fd:bf:7e:8b:4f:14:0a:ad:b8:c7:26:
         c7:28:02:c1:56:64:1f:73:0f:85:92:b4:32:66:f6:6f:7f:0e:
         ec:01:75:d1:8a:7b:30:71:cf:19:10:d9:08:0f:44:6f:2e:a7:
         f4:fa:45:ec:a5:fa:92:ef:09:f0:af:a1:f3:99:f2:da:5d:ef:
         c7:83:83:11:5f:5b:f9:b7:50:33:a5:a8:32:d6:c8:60:f8:fe:
         92:a7:7f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----