Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143388.roa
File:                     AS143388.roa (raw, json)
Hash identifier:          S/KNf4ogbSNifdprFDcn4sL+56yWfGh/lwRXNG00GjI=
Subject key identifier:   AC:8C:A0:A4:D3:91:51:6E:21:29:F7:90:CA:8C:3F:6E:92:5C:8A:F1
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3151EA408701F340B6A9B7D6D4568521B07FA417
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143388.roa
Signing time:             Fri 22 May 2026 06:05:30 +0000
ROA not before:           Fri 22 May 2026 06:00:30 +0000
ROA not after:            Fri 21 May 2027 06:05:30 +0000
asID:                     143388
IP address blocks:        240a:a2e2::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:51:ea:40:87:01:f3:40:b6:a9:b7:d6:d4:56:85:21:b0:7f:a4:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:00:30 2026 GMT
            Not After : May 21 06:05:30 2027 GMT
        Subject: CN=AC8CA0A4D391516E2129F790CA8C3F6E925C8AF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7f:8a:9f:23:44:1d:d0:ac:76:a9:23:1c:b0:
                    fe:d3:bf:19:c9:b0:ef:27:87:35:6c:88:72:2a:9d:
                    67:66:91:d7:4e:11:be:41:d0:c2:c4:d3:e9:c9:10:
                    53:42:07:e8:b1:7e:77:fd:5e:1a:a1:34:7a:1d:ea:
                    57:64:fa:09:dc:5c:51:5d:db:59:40:91:61:c8:e3:
                    6a:0d:99:e8:82:41:d5:64:05:75:dd:93:36:99:f4:
                    48:94:82:88:ba:60:bd:94:cd:6c:72:e0:97:fa:80:
                    18:e3:a3:e7:2c:e6:9f:cd:71:4f:a9:3a:93:34:09:
                    7f:b5:d2:47:56:cf:53:4c:32:9c:e1:9d:2f:da:ee:
                    fb:2c:7b:05:e5:4c:b4:08:47:9f:e3:79:0e:76:06:
                    fb:a1:b1:5f:b8:97:41:2e:e1:33:76:9e:f4:19:55:
                    6a:b6:2b:b6:4b:d3:2e:78:6c:27:f2:93:b9:a9:6a:
                    59:c0:89:57:a4:f2:6b:bf:32:95:ba:07:6d:01:44:
                    b6:a9:86:20:61:d7:07:66:0c:fa:f2:1c:3d:6a:b6:
                    e6:ad:f1:d0:c9:b6:85:7d:6e:73:aa:6d:1f:d6:46:
                    c1:d7:9c:7c:09:d2:17:1c:ca:49:43:f3:e0:2b:e1:
                    b0:38:f9:5f:76:77:fb:48:85:53:4d:58:74:eb:e4:
                    5c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:8C:A0:A4:D3:91:51:6E:21:29:F7:90:CA:8C:3F:6E:92:5C:8A:F1
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143388.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a2e2::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:ac:9f:fd:31:37:87:9a:9f:bd:ed:9a:ce:ee:d7:54:af:13:
         4c:26:10:2b:49:e9:cc:2a:1e:ce:44:fa:2c:6f:dd:3c:50:e8:
         57:4e:49:6c:e0:ba:fb:11:e4:e3:56:d4:d7:0e:76:c7:8a:40:
         af:73:30:d4:52:de:b0:10:c6:1d:71:1e:84:3c:9e:87:9c:34:
         10:fa:dd:77:8a:f9:e7:62:20:d6:8c:47:06:7d:95:31:12:f1:
         a5:06:90:77:35:39:7d:ef:d1:c8:db:1b:f1:0a:ca:39:65:98:
         ae:02:b2:c4:d7:74:4b:cd:7a:3f:27:e3:b4:58:8d:89:9e:98:
         4e:3e:93:2b:18:8b:c4:f6:2f:78:64:a8:3c:5d:3e:17:e3:44:
         5f:1e:5d:25:83:35:76:e6:cc:e1:69:a7:ee:aa:37:6c:52:38:
         d3:79:1f:c6:d8:eb:fc:04:bf:e9:70:82:20:66:54:06:00:6f:
         99:07:f7:50:bb:a9:66:79:83:9c:75:8e:ce:72:2e:e2:7c:60:
         a7:66:6b:6d:26:e0:8a:82:6b:c3:3b:79:cb:f9:ca:98:b9:a7:
         1d:45:4e:a1:32:f3:40:f8:11:c7:13:2c:df:3d:38:35:b2:ba:
         9c:f6:9e:85:db:dc:1d:ac:5a:eb:2f:bd:e7:f6:e3:26:de:a8:
         73:aa:bd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----