Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143449.roa
File:                     AS143449.roa (raw, json)
Hash identifier:          ihxscQe6PL0GpjnyeIXFPCTherzToWQBNutbkQSadBY=
Subject key identifier:   10:8D:36:10:A4:C8:71:BB:BE:35:D1:81:BD:48:05:19:B8:ED:53:E0
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6830503AE22E74A8C9ED481831E67CF16A60ACDC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143449.roa
Signing time:             Fri 22 May 2026 06:58:27 +0000
ROA not before:           Fri 22 May 2026 06:53:27 +0000
ROA not after:            Fri 21 May 2027 06:58:27 +0000
asID:                     143449
IP address blocks:        240a:a31f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:30:50:3a:e2:2e:74:a8:c9:ed:48:18:31:e6:7c:f1:6a:60:ac:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:27 2026 GMT
            Not After : May 21 06:58:27 2027 GMT
        Subject: CN=108D3610A4C871BBBE35D181BD480519B8ED53E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:60:21:eb:97:c5:2f:bd:6e:80:10:1f:a0:3d:
                    ae:00:5c:5a:b8:0a:31:38:03:e9:87:52:0c:23:5e:
                    a7:6a:da:16:9f:9b:f4:c9:9b:57:87:d1:4a:a2:fd:
                    34:07:e5:33:55:f3:70:d6:8c:54:e2:b8:3c:f1:d5:
                    f8:a4:33:58:d6:e5:ce:b6:ac:f2:06:54:07:ca:64:
                    fa:fe:5b:c1:e9:47:75:b8:b9:67:b1:84:4a:ae:8a:
                    18:cb:e4:99:89:69:8f:b5:79:59:31:06:19:f6:b5:
                    8e:ea:4a:a8:03:c2:6e:07:08:83:ee:2c:57:71:00:
                    17:09:27:02:84:27:e0:c3:ec:98:b8:88:67:66:7f:
                    97:45:55:a8:4c:2a:72:58:32:13:2b:df:79:94:49:
                    3d:cc:79:b6:81:21:d5:da:15:39:85:df:6a:02:a0:
                    40:1c:50:73:ac:37:f7:5e:70:cb:db:5a:a5:77:0a:
                    83:24:1e:27:22:7a:1a:ed:0c:41:23:75:bd:5b:33:
                    ad:b8:c1:36:96:97:69:2f:c3:00:dc:16:84:eb:33:
                    09:04:3e:8c:6e:ef:b6:b9:de:bf:d3:df:ec:93:9d:
                    e7:b6:fe:b1:cb:8d:c4:df:1a:46:22:7f:a5:54:95:
                    d9:fc:17:64:de:84:58:02:32:58:e5:16:bf:c4:88:
                    20:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:8D:36:10:A4:C8:71:BB:BE:35:D1:81:BD:48:05:19:B8:ED:53:E0
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143449.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a31f::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:0c:28:9e:7e:3e:e4:63:7e:ac:88:41:50:ef:55:28:6d:b8:
         91:5a:d8:5c:67:1a:ee:d5:d7:ef:41:f6:18:0b:61:d1:12:3d:
         07:2a:af:d5:63:16:bd:cd:87:ea:6e:03:84:a5:3c:2d:93:cf:
         f4:3b:84:1e:d8:81:4b:8a:4b:6b:9a:24:06:30:bb:d7:42:49:
         07:80:f5:2d:8e:39:4c:2a:95:95:9c:15:e6:e8:eb:69:d5:79:
         31:b0:ab:fa:50:09:aa:73:53:0d:bd:51:3d:51:b4:2e:88:ba:
         1f:22:e6:7f:ec:74:aa:dd:b9:82:b3:cb:d2:9c:de:ed:79:32:
         df:5b:e7:f3:ef:e0:3b:6b:89:fd:4e:75:05:38:39:31:fd:bc:
         88:1b:a4:1d:2d:87:b5:ee:ab:16:e2:23:60:01:74:c3:7d:46:
         d9:af:5d:a1:9b:8c:ca:ad:e7:e5:d7:4c:44:46:b9:c5:dc:d5:
         22:9d:47:58:5d:0a:2d:a5:f8:41:ed:44:65:52:79:9d:36:d1:
         f2:af:04:24:b8:d7:72:dc:c5:68:a4:32:43:8e:87:62:1d:c2:
         01:d2:64:eb:92:d5:ba:1e:23:55:4d:94:cc:15:f4:df:79:71:
         c0:e5:cc:3d:64:ac:d7:c9:9e:f3:f3:bf:87:0c:e7:e2:d5:e7:
         63:03:72:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:39 2026 by rpki-client