Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143374.roa
File:                     AS143374.roa (raw, json)
Hash identifier:          C8uXr++iSrdw5kr0YGQ896XFKhZM4yT0TizJPCKffUo=
Subject key identifier:   AE:11:31:0A:1A:07:B8:77:A0:70:09:AD:AB:18:49:E6:35:9D:30:11
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1D0C5D488A64A5520D4A76B7F724A72117B98F5A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143374.roa
Signing time:             Tue 26 May 2026 03:16:50 +0000
ROA not before:           Tue 26 May 2026 03:11:50 +0000
ROA not after:            Tue 25 May 2027 03:16:50 +0000
asID:                     143374
IP address blocks:        240a:a2d4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:0c:5d:48:8a:64:a5:52:0d:4a:76:b7:f7:24:a7:21:17:b9:8f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:11:50 2026 GMT
            Not After : May 25 03:16:50 2027 GMT
        Subject: CN=AE11310A1A07B877A07009ADAB1849E6359D3011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1b:32:08:1e:71:02:e3:13:d3:9e:a1:11:cf:
                    19:7b:65:be:75:38:6f:66:65:96:a9:49:77:31:43:
                    e1:f2:87:ad:c7:26:5b:22:fe:b4:5f:a7:e8:b3:c9:
                    0c:83:7c:be:45:dd:05:d9:4b:aa:94:95:4a:58:93:
                    24:aa:12:34:6e:59:1f:72:a4:0b:d2:8c:e5:0b:5d:
                    25:ea:9e:ce:f3:5a:31:a0:e2:b9:41:60:a4:27:74:
                    08:bd:ba:40:6b:8d:78:c8:37:f0:3f:c9:25:41:a8:
                    b8:48:d2:e5:6f:ed:69:cd:02:9d:8d:bb:e8:df:32:
                    02:77:b0:dc:1d:34:1e:62:97:a9:0b:b7:a2:37:6e:
                    aa:3f:51:03:b8:a7:c1:a9:e4:91:86:01:6c:c7:df:
                    98:b8:b5:99:f3:fc:ab:c5:87:a4:84:b6:ea:14:d3:
                    ff:7e:1d:a9:c5:ce:f4:f2:77:96:f7:9d:28:e2:63:
                    7b:5a:3d:98:42:09:e2:9c:36:97:b9:84:dc:21:eb:
                    ba:dd:6c:c4:ba:93:81:80:e8:e0:d7:06:18:3c:e6:
                    44:d2:b3:b5:71:7a:34:9e:c1:6f:9f:13:a8:d5:03:
                    a9:62:61:73:6e:51:14:dd:67:10:24:92:5c:d1:22:
                    14:df:ee:2d:4d:45:e4:fe:0f:18:1b:cf:75:ad:3e:
                    fa:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:11:31:0A:1A:07:B8:77:A0:70:09:AD:AB:18:49:E6:35:9D:30:11
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143374.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a2d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:a7:d9:4a:93:90:cb:2b:ec:b7:a2:31:07:8b:8e:92:f2:ba:
         6a:4c:ca:d4:38:bf:a1:4a:81:2e:fb:9b:9c:58:f2:d3:66:ba:
         16:7e:cc:3b:cd:fb:05:5b:ee:3c:5a:d2:db:82:6f:4e:14:34:
         81:ef:a8:77:3d:a5:17:5b:93:e4:d1:cd:fa:ba:5c:6e:16:fb:
         97:70:7e:f7:f7:51:ee:c7:47:ad:47:03:83:03:a8:09:67:94:
         f7:d2:cc:c5:cc:12:07:92:44:f6:44:88:a6:1c:15:bf:38:09:
         b4:3f:aa:26:62:1e:c9:f1:e8:a5:15:c1:7b:b1:28:ac:87:0c:
         f9:33:ec:87:de:35:38:4c:31:5e:ae:b7:89:b6:3e:78:ef:0b:
         66:0e:51:30:f3:c2:ff:c7:51:ab:a5:9c:2b:b8:10:b8:bb:d3:
         a9:36:1f:bc:06:a2:9d:3b:e3:fb:e4:c3:87:29:78:5d:81:78:
         cd:3e:a4:da:0c:b1:b2:30:78:44:2b:45:7a:a5:5c:57:ce:4e:
         2d:7f:99:69:0e:c7:56:5b:12:f2:16:29:d6:d4:92:10:90:ad:
         94:7c:9e:79:1a:ca:2f:bb:91:c3:7c:79:3e:bb:46:2e:ba:05:
         cf:ee:39:fd:8d:5f:34:c3:2a:8e:bc:7a:7c:85:33:3d:15:ce:
         82:63:ce:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:31 2026 by rpki-client