Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143315.roa
File:                     AS143315.roa (raw, json)
Hash identifier:          P5BpbFzeUDKOH7PTIJ1KY9M3yFnZitAJSXqYW71atZQ=
Subject key identifier:   75:D8:27:56:92:92:B5:5C:BC:6D:64:CF:D2:68:53:B7:F3:25:C7:73
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       59420ABC73B74B6EAE5E835AD57E52CAF5370143
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143315.roa
Signing time:             Fri 22 May 2026 01:50:22 +0000
ROA not before:           Fri 22 May 2026 01:45:22 +0000
ROA not after:            Fri 21 May 2027 01:50:22 +0000
asID:                     143315
IP address blocks:        240a:a299::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:42:0a:bc:73:b7:4b:6e:ae:5e:83:5a:d5:7e:52:ca:f5:37:01:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:22 2026 GMT
            Not After : May 21 01:50:22 2027 GMT
        Subject: CN=75D827569292B55CBC6D64CFD26853B7F325C773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:75:51:d4:04:b4:b2:c4:01:87:c2:25:3b:da:
                    b3:cf:2f:10:38:e9:fe:9b:07:e1:63:63:4b:23:74:
                    97:96:19:bd:70:bf:dd:28:9e:06:79:ce:17:1a:ee:
                    8a:62:48:f4:9b:e8:d5:e0:d4:da:73:ad:4c:4a:b0:
                    72:0c:d5:1b:fd:a3:7b:47:d3:99:e5:f1:86:7d:81:
                    73:2e:89:5d:41:e0:4c:01:df:6d:62:79:d2:93:99:
                    20:a8:78:a5:76:99:13:77:b1:a8:3b:d8:6f:72:92:
                    1f:62:8d:fa:4c:5b:45:f3:65:cd:bc:a9:45:13:22:
                    22:a3:be:38:9b:a9:a8:69:4f:2e:d5:95:f5:60:26:
                    6c:b4:8b:8f:59:17:1a:50:4b:f9:30:7e:1e:d3:f2:
                    98:b3:2f:1a:b8:5b:ad:da:93:1d:1c:00:e3:ba:bb:
                    ed:38:ca:c2:60:44:69:3c:2b:5b:2c:f1:06:b0:5f:
                    48:9a:65:a9:42:f8:da:cd:ca:6a:6d:bc:3a:ff:e0:
                    8b:dd:57:75:9a:77:8b:1d:45:a6:1a:6f:52:e3:36:
                    f9:21:94:57:39:b7:81:c2:c3:37:8e:1f:25:71:6f:
                    b1:b3:fd:da:a6:a4:42:63:3d:71:96:48:02:c5:71:
                    4a:fc:5d:f8:97:5f:67:c2:6b:ca:c8:e1:55:10:c8:
                    af:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D8:27:56:92:92:B5:5C:BC:6D:64:CF:D2:68:53:B7:F3:25:C7:73
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143315.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a299::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:15:79:ed:75:81:4f:c5:c5:10:10:5d:dd:5f:cf:72:9a:86:
         de:21:67:cf:19:2d:b2:e7:8d:26:73:e2:e9:94:e0:47:4f:4c:
         21:6d:55:e8:36:1b:da:43:28:83:2d:33:0a:21:76:5c:35:52:
         6f:85:e8:d7:5e:58:ff:06:4b:9f:f7:26:dd:10:1d:0b:28:0a:
         8c:49:5b:ea:a8:34:2e:5b:77:51:32:5f:a1:68:9b:20:2a:44:
         8d:ba:dd:f9:4e:65:69:12:21:79:89:b9:6b:e8:cb:18:df:30:
         25:9f:05:61:24:41:2e:fb:4b:da:31:ec:be:0e:b1:4d:78:ec:
         e9:cd:a9:fa:bf:9f:4f:d6:b7:20:93:06:f4:ca:7f:83:07:d4:
         7b:95:3d:0b:b8:77:bc:2e:de:c8:b5:69:18:21:ac:e5:8f:a0:
         25:d9:13:f8:fe:46:f6:ff:07:6b:93:39:bb:50:43:4a:80:0e:
         a2:c8:10:4b:cd:2e:ea:01:c4:e8:15:f3:9f:f9:1c:8f:38:61:
         96:8d:01:de:14:64:3c:a8:ea:0d:6a:dc:64:90:18:96:21:df:
         3e:93:d3:df:2b:61:63:86:2a:2b:d9:1a:05:01:32:b7:a3:bb:
         06:7b:52:ee:5c:3d:94:ac:91:7d:87:af:8a:12:d3:09:85:17:
         99:59:33:a8
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUWUIKvHO3S26uXoNa1X5SyvU3AUMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMTQ1MjJaFw0yNzA1MjEwMTUwMjJaMDMxMTAvBgNV
BAMTKDc1RDgyNzU2OTI5MkI1NUNCQzZENjRDRkQyNjg1M0I3RjMyNUM3NzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsdVHUBLSyxAGHwiU72rPPLxA4
6f6bB+FjY0sjdJeWGb1wv90ongZ5zhca7opiSPSb6NXg1NpzrUxKsHIM1Rv9o3tH
05nl8YZ9gXMuiV1B4EwB321iedKTmSCoeKV2mRN3sag72G9ykh9ijfpMW0XzZc28
qUUTIiKjvjibqahpTy7VlfVgJmy0i49ZFxpQS/kwfh7T8pizLxq4W63akx0cAOO6
u+04ysJgRGk8K1ss8QawX0iaZalC+NrNymptvDr/4IvdV3Wad4sdRaYab1LjNvkh
lFc5t4HCwzeOHyVxb7Gz/dqmpEJjPXGWSALFcUr8XfiXX2fCa8rI4VUQyK+PAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUddgnVpKStVy8bWTP0mhTt/Mlx3MwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMzE1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqimTANBgkqhkiG9w0BAQsFAAOCAQEAQhV5
7XWBT8XFEBBd3V/PcpqG3iFnzxktsueNJnPi6ZTgR09MIW1V6DYb2kMogy0zCiF2
XDVSb4Xo115Y/wZLn/cm3RAdCygKjElb6qg0Llt3UTJfoWibICpEjbrd+U5laRIh
eYm5a+jLGN8wJZ8FYSRBLvtL2jHsvg6xTXjs6c2p+r+fT9a3IJMG9Mp/gwfUe5U9
C7h3vC7eyLVpGCGs5Y+gJdkT+P5G9v8Ha5M5u1BDSoAOosgQS80u6gHE6BXzn/kc
jzhhlo0B3hRkPKjqDWrcZJAYliHfPpPT3ythY4YqK9kaBQEyt6O7BntS7lw9lKyR
fYevihLTCYUXmVkzqA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:00 2026 by rpki-client