Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143344.roa
File:                     AS143344.roa (raw, json)
Hash identifier:          YOBfkPYGXQTvb87cu1i648hKyhdP0RYoXWRV+DF1Gp8=
Subject key identifier:   EE:E8:76:9B:EB:30:E4:62:34:02:1C:52:2A:36:96:CF:2B:93:8F:EE
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       500D42189DB98116CE2A1C658FEAF2D232E02420
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143344.roa
Signing time:             Fri 22 May 2026 07:08:56 +0000
ROA not before:           Fri 22 May 2026 07:03:56 +0000
ROA not after:            Fri 21 May 2027 07:08:56 +0000
asID:                     143344
IP address blocks:        240a:a2b6::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:0d:42:18:9d:b9:81:16:ce:2a:1c:65:8f:ea:f2:d2:32:e0:24:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:03:56 2026 GMT
            Not After : May 21 07:08:56 2027 GMT
        Subject: CN=EEE8769BEB30E46234021C522A3696CF2B938FEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cd:d3:af:a0:e0:7b:d2:0a:09:b9:c5:4d:5d:
                    70:24:dd:88:29:eb:49:30:9b:7f:5d:9a:e2:92:76:
                    80:2d:82:a7:de:44:02:42:a4:da:57:a2:92:d0:ed:
                    ce:7d:74:30:65:79:29:b4:1f:c2:7c:a6:93:0f:9d:
                    db:6f:1b:14:1c:3f:2d:83:08:8a:70:e8:57:f5:23:
                    2a:d5:38:d6:14:e4:3c:f5:a9:fc:f3:ef:3e:67:38:
                    b8:89:f1:63:f2:00:8a:11:77:17:5f:9d:9f:f3:cc:
                    f5:5c:62:a9:3c:b2:0b:f9:4f:c7:41:94:4a:81:31:
                    b9:e5:dd:da:de:c6:15:fd:89:c4:97:fa:15:57:f8:
                    61:64:d0:9f:f3:85:05:e0:0b:b4:47:77:3c:31:a7:
                    bd:df:d8:36:43:5f:10:eb:c6:1b:44:30:08:fc:80:
                    ba:ed:cd:4a:be:60:fc:96:88:77:5c:80:8b:d2:a4:
                    0a:1c:cd:ec:0b:b2:77:6a:c6:f2:3d:21:4f:95:e6:
                    89:de:40:50:66:7d:e0:57:3d:ef:bf:1d:17:49:39:
                    73:87:f0:1b:24:43:4b:c2:15:75:bc:13:60:42:b3:
                    9e:65:45:91:74:cd:50:17:94:c1:2f:18:02:1b:d2:
                    2e:d8:db:1d:d5:66:8c:4d:8f:2a:ea:76:ee:cd:26:
                    cc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E8:76:9B:EB:30:E4:62:34:02:1C:52:2A:36:96:CF:2B:93:8F:EE
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143344.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a2b6::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:f4:0e:ad:b7:f6:7b:98:a7:d1:d6:db:0a:68:c4:13:21:59:
         f7:68:72:ee:8b:91:33:ca:13:38:d5:6a:e8:a9:3a:eb:0a:32:
         af:43:c1:62:9b:e8:24:a2:60:5a:16:8d:63:e8:94:36:89:1f:
         a6:22:c6:f2:eb:38:fd:ac:31:63:96:0e:47:7d:11:73:bc:4d:
         df:0b:1a:fa:a0:15:17:50:86:44:ae:7d:c7:3d:15:18:66:79:
         74:91:36:c6:f9:20:98:ff:68:63:c4:a8:0b:e6:8b:f7:a3:35:
         6a:89:4c:6f:e0:8c:67:f5:30:bb:4f:0d:ad:16:69:ed:0b:09:
         a9:fd:70:74:9e:54:aa:cb:55:92:9e:02:b1:5d:06:4b:ec:77:
         61:26:2d:aa:d6:3d:24:62:0b:2c:06:bc:3b:0b:91:83:72:20:
         da:d8:51:8e:00:9e:64:2e:6c:8c:83:5a:bc:fb:9d:a4:2d:36:
         19:98:9e:1b:71:0e:ff:6a:3c:54:3a:8d:75:6f:d5:32:2c:79:
         23:9e:d5:d1:f4:8e:92:c9:42:5e:3c:be:52:b5:5d:da:09:52:
         26:33:fd:24:d3:8c:d7:7f:cf:1a:11:17:33:9f:78:4b:e9:6a:
         29:8e:1d:98:e8:b4:c2:b2:22:e5:16:ad:b1:d8:8b:29:01:e6:
         cb:82:a5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:10 2026 by rpki-client