Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143439.roa
File:                     AS143439.roa (raw, json)
Hash identifier:          Dz7NDMevqEE5NDbK8NsCspX9ETarWoNyTB7T+tif5tE=
Subject key identifier:   9D:36:A3:3C:05:04:D2:0F:58:9B:44:61:21:5B:79:7B:0A:86:D1:A1
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       467AEBB80E76AD3C12BA872865F9995148B8EBC8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143439.roa
Signing time:             Fri 22 May 2026 01:50:45 +0000
ROA not before:           Fri 22 May 2026 01:45:45 +0000
ROA not after:            Fri 21 May 2027 01:50:45 +0000
asID:                     143439
IP address blocks:        240a:a315::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:7a:eb:b8:0e:76:ad:3c:12:ba:87:28:65:f9:99:51:48:b8:eb:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:45 2026 GMT
            Not After : May 21 01:50:45 2027 GMT
        Subject: CN=9D36A33C0504D20F589B4461215B797B0A86D1A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d2:db:6a:ad:54:93:ec:84:60:7b:3b:ac:1e:
                    04:bd:1b:55:25:0a:7c:25:2c:2f:ae:df:7c:e8:54:
                    0e:f7:78:cc:0a:28:50:e7:d8:a2:39:8b:94:1e:f7:
                    f9:1c:12:48:ef:55:5b:de:f4:4c:ec:7a:d7:21:02:
                    d3:d8:6d:14:59:f7:52:1d:e7:e4:02:64:20:ce:60:
                    68:4d:15:1e:e4:e6:fb:89:0d:c9:1f:7e:d4:b2:2b:
                    4f:15:e3:f8:13:25:07:5c:f0:8a:fd:96:0e:fd:8b:
                    39:93:9d:cf:72:71:aa:3c:b9:8f:15:5c:b4:20:35:
                    cb:f3:37:b5:93:f0:1c:c6:c9:61:76:73:51:95:94:
                    49:8c:b2:9e:2e:90:d4:2d:24:9c:ba:d4:9e:c2:b3:
                    dd:bf:be:a2:40:5a:58:2a:5b:1e:3a:6e:e6:bb:08:
                    1e:e7:1d:11:30:97:d1:1c:c1:64:07:91:5f:a1:09:
                    b7:b7:65:6f:80:93:f0:49:88:80:1f:73:38:de:aa:
                    e9:d9:76:16:d6:18:83:ab:91:95:74:63:00:ac:8e:
                    8a:1b:62:1c:0c:66:6e:01:97:ff:d0:23:59:e0:42:
                    56:09:cc:4d:c8:4f:54:dd:dd:d0:6e:14:ff:c8:5c:
                    8e:9b:e0:96:aa:66:ca:9f:5d:ee:cc:42:8b:64:54:
                    a4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:36:A3:3C:05:04:D2:0F:58:9B:44:61:21:5B:79:7B:0A:86:D1:A1
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a315::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:05:2a:f9:1e:cb:85:78:93:5a:87:48:87:34:29:0c:c7:71:
         08:70:a9:62:99:0d:af:76:76:74:2b:57:92:0b:1f:1e:af:84:
         1a:4d:04:ef:8d:fb:18:89:73:2f:32:a5:f8:5e:22:f9:a0:57:
         8d:5b:6b:ad:2c:f5:0a:64:f4:a5:eb:f1:e5:7f:19:f6:f7:c0:
         f6:96:72:f0:fd:d1:6e:6c:40:b8:2d:75:5a:cf:61:8a:97:c6:
         e9:72:d8:11:78:ff:f5:a0:27:89:55:cd:7a:d0:ca:91:80:4d:
         40:ef:a2:88:4a:3a:71:b7:18:d7:40:21:f4:7b:01:a8:7f:0c:
         0a:57:a6:4f:13:29:8f:3b:e5:b2:ee:ab:e8:a9:89:fc:8f:76:
         86:12:ab:d2:2b:76:56:d7:75:76:c8:e8:ca:19:00:fe:8c:26:
         23:3a:a0:de:2e:0d:c7:99:38:db:41:f4:fb:86:d3:c5:8b:d8:
         34:39:8c:29:28:f9:b1:2b:0e:1e:6c:cf:21:8b:22:f6:df:d7:
         d9:9c:e8:e4:ee:4a:de:88:2d:8b:67:01:ae:64:29:2f:99:88:
         d3:da:95:a3:31:5a:36:18:2c:aa:e4:a9:7f:e7:3a:f5:65:23:
         81:97:98:ae:2c:1e:f2:00:a0:05:34:8e:ed:67:00:90:9a:4b:
         5e:33:7b:67
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIURnrruA52rTwSuocoZfmZUUi468gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMTQ1NDVaFw0yNzA1MjEwMTUwNDVaMDMxMTAvBgNV
BAMTKDlEMzZBMzNDMDUwNEQyMEY1ODlCNDQ2MTIxNUI3OTdCMEE4NkQxQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC60ttqrVST7IRgezusHgS9G1Ul
CnwlLC+u33zoVA73eMwKKFDn2KI5i5Qe9/kcEkjvVVve9EzsetchAtPYbRRZ91Id
5+QCZCDOYGhNFR7k5vuJDckfftSyK08V4/gTJQdc8Ir9lg79izmTnc9ycao8uY8V
XLQgNcvzN7WT8BzGyWF2c1GVlEmMsp4ukNQtJJy61J7Cs92/vqJAWlgqWx46bua7
CB7nHREwl9EcwWQHkV+hCbe3ZW+Ak/BJiIAfczjequnZdhbWGIOrkZV0YwCsjoob
YhwMZm4Bl//QI1ngQlYJzE3IT1Td3dBuFP/IXI6b4JaqZsqfXe7MQotkVKQFAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUnTajPAUE0g9Ym0RhIVt5ewqG0aEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqjFTANBgkqhkiG9w0BAQsFAAOCAQEAfwUq
+R7LhXiTWodIhzQpDMdxCHCpYpkNr3Z2dCtXkgsfHq+EGk0E7437GIlzLzKl+F4i
+aBXjVtrrSz1CmT0pevx5X8Z9vfA9pZy8P3RbmxAuC11Ws9hipfG6XLYEXj/9aAn
iVXNetDKkYBNQO+iiEo6cbcY10Ah9HsBqH8MClemTxMpjzvlsu6r6KmJ/I92hhKr
0it2Vtd1dsjoyhkA/owmIzqg3i4Nx5k420H0+4bTxYvYNDmMKSj5sSsOHmzPIYsi
9t/X2Zzo5O5K3ogti2cBrmQpL5mI09qVozFaNhgsquSpf+c69WUjgZeYriwe8gCg
BTSO7WcAkJpLXjN7Zw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:30:16 2026 by rpki-client