Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143359.roa
File:                     AS143359.roa (raw, json)
Hash identifier:          5WN21nOojvnEq1Z7t409IusNmYs/pAzKipu+/a+uFQs=
Subject key identifier:   07:38:20:09:E7:68:96:C2:86:C8:74:D0:86:25:0C:EC:4A:C1:D6:CD
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5C17A6E04DEF8635D950EDAD7267388E0B8E53D8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143359.roa
Signing time:             Tue 26 May 2026 06:30:59 +0000
ROA not before:           Tue 26 May 2026 06:25:59 +0000
ROA not after:            Tue 25 May 2027 06:30:59 +0000
asID:                     143359
IP address blocks:        240a:a2c5::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:17:a6:e0:4d:ef:86:35:d9:50:ed:ad:72:67:38:8e:0b:8e:53:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:59 2026 GMT
            Not After : May 25 06:30:59 2027 GMT
        Subject: CN=07382009E76896C286C874D086250CEC4AC1D6CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:84:34:44:f8:80:da:d4:84:e5:7f:b3:ed:59:
                    81:35:18:1d:39:f9:98:3a:07:cc:e1:82:a9:cc:6e:
                    1c:0b:8c:7a:74:bb:25:d7:87:72:b3:72:c5:dc:e5:
                    95:2a:24:fd:3b:0d:48:af:39:dc:d4:a3:3f:0b:04:
                    46:21:0e:0e:4a:3e:c2:cf:00:32:e5:28:71:be:ed:
                    02:30:81:a1:7f:8b:56:9b:0f:e5:52:e8:7a:25:d6:
                    f3:7e:00:55:0c:c0:f9:37:88:b9:87:a8:94:48:0a:
                    00:37:0e:55:eb:3e:2a:0b:bf:08:2b:55:c2:54:07:
                    9e:12:1c:c1:4f:85:fa:d7:cc:17:13:cc:5d:5c:a3:
                    e4:a3:3f:17:73:93:fa:e2:d6:62:2c:64:06:ed:18:
                    8e:18:81:cd:97:17:a2:0c:85:5c:0e:3e:99:bc:64:
                    27:1e:a9:c9:c0:26:0c:58:47:f7:0a:67:d7:55:ba:
                    a7:8e:b1:4b:67:90:b9:08:0a:53:dc:d3:6d:f0:d8:
                    fd:98:6b:75:b1:e8:bb:ba:23:a4:9a:c1:a5:6d:11:
                    10:a3:c9:09:ca:89:0c:ca:93:82:6f:0d:73:9c:03:
                    cf:d5:c6:d6:39:48:6e:0e:de:33:1d:59:f8:66:d2:
                    6e:3d:00:50:d9:68:4d:4f:2c:f8:f6:6c:75:5f:e2:
                    ae:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:38:20:09:E7:68:96:C2:86:C8:74:D0:86:25:0C:EC:4A:C1:D6:CD
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143359.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a2c5::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:af:97:30:8b:b1:7d:f9:aa:37:4a:e7:19:1a:56:6c:8a:31:
         af:35:c9:11:36:44:9e:fd:26:18:33:29:5e:d1:28:f0:87:13:
         9e:21:3b:57:8b:6a:84:21:1e:9a:3a:c9:7b:25:25:75:a5:cb:
         5a:1d:3a:37:c7:fb:cf:99:22:1a:93:38:a8:ad:1f:eb:ab:08:
         d1:a7:8b:42:7a:c8:19:9f:1d:4b:93:1a:56:49:55:a1:51:c7:
         84:2f:ca:15:b8:d5:ee:c9:e4:0f:7a:a8:93:36:d0:86:1e:01:
         f6:f2:17:94:51:5b:51:f3:4c:70:b3:32:34:e7:45:1a:30:6c:
         9c:ab:7e:07:09:68:73:f4:1a:f3:47:ed:48:27:fe:b3:30:52:
         9a:e1:ba:8c:d1:c2:e9:61:a1:5b:28:f0:d0:30:4d:e7:15:03:
         ae:05:ff:f5:02:3a:57:f7:ab:0b:73:08:5b:74:8d:bc:f3:0d:
         aa:48:d3:08:00:af:f5:56:9f:eb:6f:0e:b8:0c:53:ec:13:21:
         d2:60:e9:11:c7:35:18:a6:a9:e0:4c:ea:5d:45:d0:0d:f9:dd:
         6f:5d:ab:55:50:b1:d2:1a:68:1b:2e:1c:da:9b:b9:8d:31:0c:
         f2:ee:83:be:7b:ce:c2:59:f4:54:05:08:20:01:3f:80:b4:e4:
         90:a5:54:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----