Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143451.roa
File:                     AS143451.roa (raw, json)
Hash identifier:          YVdV0Qoe1XTJN8oUgMbv/Tk6dg7JLXdgBRoNzmu9cVU=
Subject key identifier:   B8:50:69:AB:EB:E0:E3:10:3C:C1:4D:E9:19:AB:A7:82:1B:77:57:1B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       478A8D3AD7B87FACB98AB6D0A48E0C04B52A3D98
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143451.roa
Signing time:             Tue 26 May 2026 03:16:52 +0000
ROA not before:           Tue 26 May 2026 03:11:52 +0000
ROA not after:            Tue 25 May 2027 03:16:52 +0000
asID:                     143451
IP address blocks:        240a:a321::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:8a:8d:3a:d7:b8:7f:ac:b9:8a:b6:d0:a4:8e:0c:04:b5:2a:3d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:11:52 2026 GMT
            Not After : May 25 03:16:52 2027 GMT
        Subject: CN=B85069ABEBE0E3103CC14DE919ABA7821B77571B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c3:1d:28:8f:00:8e:51:24:53:c3:13:1c:5b:
                    f1:00:70:c9:c7:8d:ac:6b:e9:db:2f:ea:8b:07:d2:
                    08:ba:93:09:93:f9:aa:95:4f:b7:9e:33:fd:92:3b:
                    6a:e0:12:e2:dd:c1:9e:33:dd:c3:1a:4e:c4:cd:df:
                    37:a7:55:26:a6:dc:a1:f6:c7:3a:17:5a:33:c9:7d:
                    3b:89:e8:5d:56:8d:fd:20:f3:90:09:1f:75:0c:03:
                    b5:04:37:bc:4d:7e:a8:e8:b0:ab:c6:50:b9:f7:92:
                    c7:1e:61:11:ae:14:9e:07:98:f6:b6:c9:40:b0:92:
                    5c:6d:6b:ec:35:c6:17:77:b2:58:ae:f2:83:d8:56:
                    42:2f:20:61:ff:3f:9e:45:df:88:7b:e2:9d:90:c4:
                    85:ba:7b:a8:44:eb:19:b8:15:68:93:28:f9:e6:7b:
                    01:3a:82:87:91:7c:9c:6f:a4:f4:af:10:e2:a9:89:
                    a3:6e:f5:f6:02:7c:c8:f6:e6:ef:0d:3c:00:72:91:
                    f0:66:38:d8:a4:60:3f:ce:76:ab:54:0d:da:9d:dc:
                    fa:7f:de:2d:de:dc:95:0e:1c:01:2f:69:0a:12:ea:
                    62:ce:9a:05:5e:f6:e8:8d:ce:ad:43:1b:0c:c9:a7:
                    26:01:e0:a8:c2:fb:53:66:49:b5:d3:df:ba:20:60:
                    b1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:50:69:AB:EB:E0:E3:10:3C:C1:4D:E9:19:AB:A7:82:1B:77:57:1B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143451.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a321::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:35:23:57:55:e5:c5:09:67:8e:f5:f3:cb:e9:30:ac:eb:db:
         b0:ec:3a:cd:48:49:6c:3c:7a:5c:2f:dd:0c:45:0d:4d:d7:53:
         4c:29:d0:cf:df:d1:7d:1d:98:31:33:ea:91:af:05:c0:07:6f:
         0c:ad:95:4a:9a:f3:05:54:cb:a5:1f:60:35:68:fc:9e:24:9d:
         e1:73:13:d2:8b:a8:a7:f4:0c:cd:29:ef:35:83:2a:8b:e7:cf:
         1a:af:73:43:90:3b:a3:31:8b:48:3e:8e:18:38:d7:65:19:23:
         99:6c:e7:cd:54:8a:71:a1:17:47:81:83:c4:a1:34:e3:7e:77:
         c3:d0:96:e0:22:8e:bc:42:0b:f4:30:6c:37:38:7a:37:2c:d6:
         b5:93:fe:2f:1c:70:c5:6e:fb:ce:91:33:3a:f3:b6:d1:30:0c:
         ba:e3:46:f0:37:3b:f3:13:2f:f5:aa:e5:0d:c9:5a:1e:6d:4a:
         13:69:fc:5f:2d:35:77:42:99:cc:90:9b:e6:ea:1d:43:c4:8f:
         9f:d8:11:fd:8f:c1:e1:bf:fc:12:05:93:c3:4c:e9:d6:4b:61:
         da:6d:05:12:0f:e6:2b:f5:68:56:a9:36:97:40:6a:4e:b5:c2:
         2e:56:1c:5a:21:8c:3b:48:75:de:ab:2d:bc:c7:33:50:e9:89:
         42:3d:c3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----