Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143469.roa
File:                     AS143469.roa (raw, json)
Hash identifier:          dBUT45c1YqToQdyRDpiRk+h7FURjeyOAmiH3LTCv/e4=
Subject key identifier:   10:2A:86:D7:59:24:64:62:F1:BF:76:FF:1E:96:B4:90:FD:7C:F6:93
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       091F6E6D1B7ACA5993CEDA3F7F21DB999491F331
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143469.roa
Signing time:             Fri 22 May 2026 06:58:12 +0000
ROA not before:           Fri 22 May 2026 06:53:12 +0000
ROA not after:            Fri 21 May 2027 06:58:12 +0000
asID:                     143469
IP address blocks:        240a:a333::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:1f:6e:6d:1b:7a:ca:59:93:ce:da:3f:7f:21:db:99:94:91:f3:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:12 2026 GMT
            Not After : May 21 06:58:12 2027 GMT
        Subject: CN=102A86D759246462F1BF76FF1E96B490FD7CF693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6d:80:a0:c9:60:6f:e6:54:a2:42:48:42:ce:
                    f4:f2:b5:4c:ef:17:07:0e:45:5e:1f:6b:f0:d0:cd:
                    93:86:fe:30:45:f9:f2:7c:76:bd:da:68:ca:95:72:
                    47:df:60:29:34:05:72:74:99:0a:c5:d0:91:7f:fb:
                    40:a8:dd:48:19:25:1c:79:bd:27:78:75:35:14:d5:
                    8b:9a:2c:ec:91:8c:ad:39:49:c3:88:1d:f7:5d:39:
                    c3:7e:56:3d:79:b1:94:2c:3d:07:bf:5e:cf:b2:52:
                    48:ba:bf:9d:ad:91:64:cc:fa:50:d8:34:5e:ab:af:
                    75:7d:97:83:de:94:f0:5b:40:7a:c9:1d:e5:33:33:
                    a8:52:dd:fe:0b:57:12:da:a3:24:ca:0f:3a:7a:42:
                    59:b6:85:36:b3:0e:79:64:5b:3a:d8:bb:11:5f:a2:
                    6d:0f:76:e3:ed:33:b7:da:cb:58:3f:43:e6:04:19:
                    97:4e:fb:71:5e:46:a8:ca:73:71:d2:e0:e3:eb:c6:
                    db:f2:f3:13:ba:4f:0d:2e:d9:a8:b9:bd:6c:b4:f7:
                    89:14:d4:6f:a7:7b:d8:92:c5:2d:1a:ca:26:8a:12:
                    ed:62:57:ac:72:06:6d:49:b3:74:58:de:87:70:8e:
                    33:be:eb:a9:d3:0f:a2:b7:ee:f9:9d:d0:93:2e:f7:
                    e3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2A:86:D7:59:24:64:62:F1:BF:76:FF:1E:96:B4:90:FD:7C:F6:93
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143469.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a333::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:5e:bf:c4:4b:fe:b4:9d:aa:f0:cc:42:44:f8:de:47:33:ab:
         aa:27:8a:02:9b:d6:5d:35:e9:1d:35:9b:0d:5a:2e:84:6f:14:
         6f:d3:a3:11:39:b5:10:9c:4a:6c:0b:8d:f5:f2:49:9b:5c:c2:
         84:4e:c6:f3:dc:50:a3:4d:e8:aa:8b:9a:ce:75:7e:a5:13:1f:
         e2:e1:4c:e2:66:c1:ee:ff:9f:09:63:e0:f5:17:04:7b:f0:1b:
         47:98:b5:f7:80:07:d3:19:8b:a5:f8:d5:c4:e8:39:28:c6:2e:
         92:4f:7d:3d:96:18:98:9b:4a:ee:e6:53:99:fa:78:c5:9a:39:
         90:d4:77:d3:bc:6a:c0:4b:0b:cc:9b:90:fb:5d:8f:4b:b0:91:
         d8:7b:53:e8:17:1a:b0:ab:ab:b3:d7:5b:41:55:7f:cc:91:0a:
         70:86:d8:05:0f:76:e0:23:1b:f8:97:4f:69:80:93:6e:f5:6f:
         cf:27:38:be:cd:2d:00:2d:53:65:93:5a:5d:ae:f5:bf:53:ba:
         2b:55:7b:7d:20:8e:6d:68:34:68:79:a4:97:ae:8a:1f:e4:b5:
         ae:87:a5:dc:c6:1f:df:bd:e1:bc:07:2f:18:91:fc:f1:d9:07:
         ab:c8:46:c0:16:ba:8c:20:82:ea:44:49:06:e5:13:72:3d:7a:
         f7:d7:c5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:13 2026 by rpki-client