Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143364.roa
File:                     AS143364.roa (raw, json)
Hash identifier:          ZkgSKZOJZhXCI9nyVpL2mXc4noDSNXPkOXUHS1y4hYI=
Subject key identifier:   33:0D:33:6E:94:F7:7A:85:0C:EE:81:B4:1C:C2:F3:76:FF:D2:0C:7B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1C97F71F6464A21A4973A32056C474CF52FC576D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143364.roa
Signing time:             Tue 26 May 2026 03:17:07 +0000
ROA not before:           Tue 26 May 2026 03:12:07 +0000
ROA not after:            Tue 25 May 2027 03:17:07 +0000
asID:                     143364
IP address blocks:        240a:a2ca::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:97:f7:1f:64:64:a2:1a:49:73:a3:20:56:c4:74:cf:52:fc:57:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:12:07 2026 GMT
            Not After : May 25 03:17:07 2027 GMT
        Subject: CN=330D336E94F77A850CEE81B41CC2F376FFD20C7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:51:af:3f:8e:5a:72:fa:0b:79:be:0b:4a:c5:
                    37:03:fb:5f:fe:e2:e1:32:13:79:a6:75:cf:9b:d9:
                    fa:6e:4b:68:69:d2:56:be:66:bd:08:0a:25:ce:3f:
                    d9:bc:79:26:15:3a:45:e5:5f:75:96:16:54:cb:28:
                    39:d1:1b:75:7e:1c:fe:2e:f3:29:6f:7d:49:20:9a:
                    9d:37:ca:33:72:41:96:e4:cb:aa:be:50:33:ff:b6:
                    99:fc:29:06:29:9a:e4:65:ca:61:00:34:44:20:49:
                    c6:9b:67:69:2e:09:de:21:11:89:bc:5e:b4:a0:b4:
                    e0:83:20:91:77:35:30:bd:bd:b5:0e:ed:5c:18:93:
                    42:c0:b3:c8:b3:bd:35:01:35:ef:5b:65:13:f4:6e:
                    d6:2f:e4:89:ed:f3:12:34:80:90:23:b9:df:93:82:
                    5c:20:25:18:20:20:24:59:34:62:09:fb:54:00:5b:
                    ae:29:24:c3:00:a8:cf:df:e5:bc:f0:ac:f3:22:a3:
                    e6:57:c6:ca:bb:30:25:6a:b1:75:94:1f:a5:d7:8a:
                    ea:91:62:5f:ec:ce:a6:c6:36:3f:f5:96:e0:b2:3e:
                    8c:8f:f0:96:a4:a1:bc:79:4b:36:58:0f:56:aa:bb:
                    ae:aa:b5:47:4a:60:b0:d3:25:6d:60:58:0a:6f:9f:
                    01:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:0D:33:6E:94:F7:7A:85:0C:EE:81:B4:1C:C2:F3:76:FF:D2:0C:7B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143364.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a2ca::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:7e:32:0b:a4:53:7e:c1:18:20:d4:2c:ba:06:df:5b:ab:d0:
         6e:1d:25:fe:f8:51:df:20:a4:a1:86:97:e6:fc:2d:1d:5f:81:
         c9:7c:ae:1e:33:41:3f:59:32:bc:84:12:60:d4:64:96:0a:59:
         c4:d1:7c:a2:73:d2:8d:8d:79:bf:cb:6a:8a:90:76:c9:49:dd:
         28:61:04:31:b3:b2:b5:09:b7:e5:39:98:bd:ae:2f:7e:6e:62:
         a1:db:62:6c:bb:d1:74:09:d1:07:78:c0:13:51:b7:df:c4:b5:
         da:e1:67:c1:c3:f0:49:65:87:08:62:18:fa:23:ec:8b:07:b5:
         d0:a6:f1:0f:74:11:ab:f6:e4:40:72:eb:f2:3c:c7:ca:4b:15:
         ee:e3:22:03:f3:4f:e4:25:96:26:1c:b7:43:82:21:53:ae:2f:
         b5:7b:fd:21:cb:39:a5:53:83:68:96:b9:c4:6a:fd:79:32:b2:
         3a:ca:6b:be:de:45:a5:b4:6a:69:08:b8:1f:9a:8c:5b:0e:56:
         cb:42:62:0c:5a:80:63:85:0c:11:02:0b:7e:09:84:bc:b3:96:
         cf:e8:00:bf:e8:4a:61:ab:59:dd:47:1e:b8:32:34:85:c6:6f:
         0a:c4:ef:fa:71:a4:8e:2d:3d:b5:2a:27:ca:81:3d:ec:e2:37:
         2f:6d:e0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----