Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143309.roa
File:                     AS143309.roa (raw, json)
Hash identifier:          N1R6mmPeMZCZ6eVmYsnM8EzOaD91hErIGtPo713tuW0=
Subject key identifier:   55:82:BC:ED:6C:FC:D8:FC:62:35:A7:D6:A4:B5:62:C2:CB:B7:5C:46
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6A48F93A0DC56609D57CEA28078A2B6B8D685412
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143309.roa
Signing time:             Fri 22 May 2026 04:07:52 +0000
ROA not before:           Fri 22 May 2026 04:02:52 +0000
ROA not after:            Fri 21 May 2027 04:07:52 +0000
asID:                     143309
IP address blocks:        240a:a293::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:48:f9:3a:0d:c5:66:09:d5:7c:ea:28:07:8a:2b:6b:8d:68:54:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:02:52 2026 GMT
            Not After : May 21 04:07:52 2027 GMT
        Subject: CN=5582BCED6CFCD8FC6235A7D6A4B562C2CBB75C46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:77:a8:20:c2:cd:58:a7:04:45:2a:a1:93:ff:
                    24:15:2c:b8:fe:ea:a0:a1:f6:6c:a5:d1:0f:91:d1:
                    fa:2d:f8:fc:33:e7:e7:c4:7f:96:90:c5:cf:dd:f8:
                    ca:af:71:19:f3:5b:91:47:55:59:88:27:a2:25:fb:
                    d7:3d:4b:bd:41:d7:e4:c1:37:be:3c:fc:62:ae:71:
                    38:f3:15:9a:ca:ad:c5:c1:60:20:0d:54:1c:83:3d:
                    69:16:c8:5b:00:3d:fa:57:88:11:28:8a:84:8a:fc:
                    d4:68:99:b9:fa:b3:f5:82:63:85:4d:a9:df:07:fe:
                    ae:27:13:64:04:6a:1e:2e:8f:7b:d8:cc:a2:84:06:
                    ef:ae:44:cf:31:cb:69:88:1c:00:df:0e:90:52:8a:
                    f9:04:6e:8f:1e:fa:34:7d:17:8d:c6:ae:9a:7f:4c:
                    30:41:3d:87:8d:23:9a:c3:dc:f3:c7:d4:4d:52:fc:
                    93:9e:13:8e:54:7d:1e:da:49:87:79:08:83:fd:3d:
                    0b:c5:9f:8a:c8:b3:e2:e2:01:61:63:bb:ae:5c:4f:
                    5a:20:5c:f9:9a:79:c7:31:70:40:dc:df:4a:e0:87:
                    d2:a4:52:f1:f9:68:0f:8b:4a:3c:a1:63:b4:a8:d2:
                    b9:8b:d3:5c:81:b8:77:9c:91:01:78:f9:c1:9c:a0:
                    88:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:82:BC:ED:6C:FC:D8:FC:62:35:A7:D6:A4:B5:62:C2:CB:B7:5C:46
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143309.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a293::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:9c:1e:4f:1a:2d:63:86:7f:ef:b2:d7:d2:96:7a:f0:6b:5f:
         43:97:4f:19:10:9b:36:ec:b5:c1:c0:6e:db:c5:83:7f:95:75:
         b3:fd:f8:c1:12:1e:99:7d:f4:28:ef:09:e8:1e:4d:0f:74:96:
         f5:85:f5:d9:d6:d6:fd:c5:99:7c:d7:77:9d:76:96:f6:2f:c8:
         8c:44:19:59:9a:33:e5:55:b1:c6:43:48:75:de:1b:f6:b4:1e:
         1f:1c:f9:b4:20:c9:e6:47:a4:d8:5d:fa:af:59:0c:31:e0:62:
         4b:f6:34:3d:66:62:35:6c:4a:97:59:e4:e1:06:91:2c:be:e4:
         c7:e7:7b:08:d7:0f:ae:6b:b6:4e:94:b3:ef:b1:09:b6:ff:67:
         01:bb:aa:08:ac:00:88:d4:25:11:0b:4b:ac:4e:60:c4:8b:21:
         1c:70:82:57:ab:e3:89:eb:46:c8:5e:97:00:d3:11:1c:4a:37:
         c1:21:ea:fa:c8:96:55:22:80:5d:a5:8a:44:d5:81:ce:d1:a7:
         54:8a:bb:9f:62:a1:97:83:c0:4a:78:78:08:81:d2:fa:19:45:
         b2:99:a3:09:17:53:1c:d6:2e:b3:aa:03:cd:9f:d6:1d:cb:09:
         bd:8c:19:53:57:80:ff:f8:13:68:69:8d:d9:ea:a0:bc:6a:50:
         df:92:02:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:28 2026 by rpki-client