Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143375.roa
File:                     AS143375.roa (raw, json)
Hash identifier:          nbGtobqIhgCilI2DpNI7rtM9z9JYcSSkX4MsQc9IRZg=
Subject key identifier:   6A:10:C1:46:A6:47:FC:EC:85:88:48:FD:CB:76:93:10:5F:6B:34:46
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2DD7A63EACAF49F3A9CD09A4F2EB2F225CEE88F9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143375.roa
Signing time:             Mon 25 May 2026 01:20:08 +0000
ROA not before:           Mon 25 May 2026 01:15:08 +0000
ROA not after:            Mon 24 May 2027 01:20:08 +0000
asID:                     143375
IP address blocks:        240a:a2d5::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:d7:a6:3e:ac:af:49:f3:a9:cd:09:a4:f2:eb:2f:22:5c:ee:88:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:15:08 2026 GMT
            Not After : May 24 01:20:08 2027 GMT
        Subject: CN=6A10C146A647FCEC858848FDCB7693105F6B3446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:81:f0:4e:7c:93:d7:6c:8f:22:9a:ca:89:e5:
                    b1:b1:ce:87:55:4b:de:a0:5c:a4:1e:9c:71:6b:71:
                    7d:f3:ea:53:d9:ec:55:d3:a1:4d:ea:93:5c:9c:4c:
                    6b:ae:96:ca:1a:12:60:2a:ce:39:92:97:d3:6f:51:
                    58:2c:57:3f:e0:4a:71:07:dd:ce:d4:9b:fc:04:b1:
                    d8:af:3c:fc:50:96:5d:bb:58:50:0c:fd:fd:5e:73:
                    73:82:1a:0c:00:54:0a:e1:1e:09:e6:c8:d0:ba:5d:
                    7a:bc:be:1a:be:46:2e:e3:0b:10:bc:d6:2b:12:50:
                    50:b3:34:22:bf:de:61:06:15:1e:d9:90:0e:94:e6:
                    87:9b:27:78:6c:d2:66:2c:63:a9:d7:3f:86:f7:a2:
                    ab:c5:53:38:24:b1:73:42:63:42:78:79:cd:66:dd:
                    f4:6c:c9:82:97:cb:70:29:ee:d2:15:21:46:fe:5f:
                    97:0b:ea:74:de:fc:52:f2:78:c8:9a:6a:8b:1b:45:
                    91:2c:27:dd:20:9d:a6:ad:40:af:ef:05:15:d2:6f:
                    86:18:db:d4:7e:f6:e1:a0:a6:cf:a8:0d:b6:7e:68:
                    21:fc:a8:8e:76:42:f5:cf:5d:a8:af:b5:ff:ee:e6:
                    60:30:42:83:2a:8c:75:1e:9f:d5:37:a2:00:13:b0:
                    ae:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:10:C1:46:A6:47:FC:EC:85:88:48:FD:CB:76:93:10:5F:6B:34:46
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143375.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a2d5::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:2d:68:03:c4:26:10:f3:5e:4e:ad:97:f3:65:bf:08:2e:67:
         4e:21:1b:89:16:bb:1f:21:1f:9f:f5:9f:cc:ef:ed:5d:cd:a8:
         a6:dd:1d:fd:6c:36:86:47:f4:64:7a:2b:8f:e7:cf:d3:f2:e3:
         f2:a5:65:0b:36:78:1a:81:b9:0e:ee:72:21:45:fd:d9:f0:4a:
         c6:65:01:6c:b8:e6:f3:f0:08:ae:9f:88:c8:c5:c0:c3:d8:f2:
         1a:01:d7:1b:f2:47:18:79:cd:75:37:8d:60:f8:06:8b:fe:39:
         0b:19:2b:03:18:75:97:e2:53:05:38:15:c4:d2:c7:8d:3b:cd:
         35:8e:ee:f9:f3:eb:1c:5b:ef:74:ac:4c:8c:ce:12:25:69:c2:
         16:73:35:3c:c2:0c:f4:ec:3d:ce:b5:d0:3b:38:0c:72:7e:83:
         fc:04:29:d1:1e:ed:cb:6d:1d:aa:7b:58:76:6c:a9:4f:b9:cb:
         a7:fb:03:03:3b:ac:b3:94:a5:71:ca:cc:b5:cd:b6:fc:2d:c8:
         1e:96:fc:f0:06:3c:5d:fb:f9:16:0e:f8:26:66:7e:46:9f:df:
         b4:6d:a7:5b:35:30:70:28:ce:b7:bf:4c:84:9b:d2:ba:ae:e9:
         9e:02:c4:f9:09:b2:79:1d:fc:9c:34:59:d3:6f:6a:51:d5:0b:
         fb:ad:78:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:59 2026 by rpki-client