Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143332.roa
File:                     AS143332.roa (raw, json)
Hash identifier:          CHu/8UP7yGfnJuiibdwzDHSqqXH7d8WXzkQAjmAIRRA=
Subject key identifier:   FD:14:92:3E:D1:61:35:4F:2D:6B:04:74:FD:C1:49:90:54:76:62:FB
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3DD3C605F78611D1D1DC7A6919935A41796C6D4A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143332.roa
Signing time:             Mon 25 May 2026 06:49:11 +0000
ROA not before:           Mon 25 May 2026 06:44:11 +0000
ROA not after:            Mon 24 May 2027 06:49:11 +0000
asID:                     143332
IP address blocks:        240a:a2aa::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d3:c6:05:f7:86:11:d1:d1:dc:7a:69:19:93:5a:41:79:6c:6d:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:44:11 2026 GMT
            Not After : May 24 06:49:11 2027 GMT
        Subject: CN=FD14923ED161354F2D6B0474FDC14990547662FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:dd:41:b3:f0:75:22:73:53:78:dd:00:8d:c6:
                    a2:6d:96:7f:ca:2a:54:b3:a6:a8:67:73:0b:55:f0:
                    ab:fb:ca:e1:74:af:7c:40:6c:96:37:ab:b0:c5:80:
                    37:b5:ef:36:a7:c6:34:03:fa:f8:c3:37:fe:ad:10:
                    dd:2c:6f:02:d9:60:49:0e:e5:b0:0e:0c:a4:f1:0b:
                    b8:3c:17:2d:a6:a0:3f:71:7a:fd:86:6e:ff:18:2d:
                    d8:8b:5e:dd:2d:91:62:d2:c0:5a:a9:11:88:a6:a6:
                    5f:52:b9:5b:bb:44:a7:d3:08:50:1d:a5:e3:d9:52:
                    ae:e5:77:d7:cb:bd:c3:d6:37:e4:39:9a:d6:54:b7:
                    ca:d0:16:3e:19:f4:55:6a:fc:95:90:ef:b1:b0:46:
                    7e:33:ec:9f:e7:c6:c9:a8:19:00:16:08:6c:f0:cd:
                    7d:02:db:12:f9:bf:8c:46:d5:0c:9f:49:de:4a:10:
                    65:9f:ad:66:ae:93:1d:bd:3c:28:ef:4e:c6:32:93:
                    cf:97:23:9a:50:2c:aa:73:81:d6:c5:89:07:de:80:
                    73:d9:94:c3:40:fc:df:70:fe:98:c7:ca:0f:33:26:
                    f4:69:1c:d5:c3:d8:a1:55:3b:cf:17:7f:9a:01:87:
                    9c:f6:f4:83:dd:42:4e:19:ae:22:00:2b:34:c8:3e:
                    d0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:14:92:3E:D1:61:35:4F:2D:6B:04:74:FD:C1:49:90:54:76:62:FB
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a2aa::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:fd:76:2f:18:75:01:94:13:45:13:99:46:de:43:66:fc:30:
         16:b8:6e:33:1e:f4:10:b6:6c:0f:8e:db:52:ee:a8:22:31:52:
         7c:89:38:a1:aa:62:11:a3:c2:0f:ff:56:b4:ec:e7:90:4a:99:
         a3:bb:3a:8e:e2:10:7c:a5:b0:68:ca:36:39:72:90:8e:39:5e:
         eb:91:b3:37:d0:ed:c0:a3:f5:cc:49:47:f7:88:9a:b8:86:8d:
         77:d6:2e:1a:60:00:ff:3b:31:a3:ba:d0:09:a4:32:be:0e:e0:
         30:fb:01:94:92:d1:65:e9:7a:81:8b:f6:f3:49:55:34:97:4c:
         15:4b:11:b9:01:3a:c4:60:6b:3d:64:cf:73:35:9c:84:af:79:
         0f:e5:29:e2:05:d4:62:8a:1c:1c:d8:82:95:86:20:63:53:b0:
         27:ff:ec:a8:4b:2a:6b:8e:76:9e:6c:63:3e:37:a3:51:92:d1:
         c7:e3:7c:37:88:cc:2d:d8:7a:b4:71:38:88:be:8d:fb:d6:2e:
         94:2b:d0:0c:29:3a:43:16:a6:c2:91:d7:52:ae:78:dc:de:fc:
         ba:ce:5c:7e:41:7b:4a:39:b0:0e:40:ac:c0:c4:4c:f8:f1:5e:
         ed:8c:80:b4:c9:42:32:34:fe:dc:56:62:79:c2:86:16:b5:58:
         66:0d:b1:86
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUPdPGBfeGEdHR3HppGZNaQXlsbUowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjQ0MTFaFw0yNzA1MjQwNjQ5MTFaMDMxMTAvBgNV
BAMTKEZEMTQ5MjNFRDE2MTM1NEYyRDZCMDQ3NEZEQzE0OTkwNTQ3NjYyRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC83UGz8HUic1N43QCNxqJtln/K
KlSzpqhncwtV8Kv7yuF0r3xAbJY3q7DFgDe17zanxjQD+vjDN/6tEN0sbwLZYEkO
5bAODKTxC7g8Fy2moD9xev2Gbv8YLdiLXt0tkWLSwFqpEYimpl9SuVu7RKfTCFAd
pePZUq7ld9fLvcPWN+Q5mtZUt8rQFj4Z9FVq/JWQ77GwRn4z7J/nxsmoGQAWCGzw
zX0C2xL5v4xG1QyfSd5KEGWfrWaukx29PCjvTsYyk8+XI5pQLKpzgdbFiQfegHPZ
lMNA/N9w/pjHyg8zJvRpHNXD2KFVO88Xf5oBh5z29IPdQk4ZriIAKzTIPtCTAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU/RSSPtFhNU8tawR0/cFJkFR2YvswHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqiqjANBgkqhkiG9w0BAQsFAAOCAQEAIf12
Lxh1AZQTRROZRt5DZvwwFrhuMx70ELZsD47bUu6oIjFSfIk4oapiEaPCD/9WtOzn
kEqZo7s6juIQfKWwaMo2OXKQjjle65GzN9DtwKP1zElH94iauIaNd9YuGmAA/zsx
o7rQCaQyvg7gMPsBlJLRZel6gYv280lVNJdMFUsRuQE6xGBrPWTPczWchK95D+Up
4gXUYoocHNiClYYgY1OwJ//sqEsqa452nmxjPjejUZLRx+N8N4jMLdh6tHE4iL6N
+9YulCvQDCk6QxamwpHXUq543N78us5cfkF7SjmwDkCswMRM+PFe7YyAtMlCMjT+
3FZiecKGFrVYZg2xhg==
-----END CERTIFICATE-----