Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143470.roa
File:                     AS143470.roa (raw, json)
Hash identifier:          +gQBu9BYq4YpjLnUPUIy2lBlFfyYYBIm2yuKhz+q8bY=
Subject key identifier:   7A:2C:86:BC:C8:CB:E0:A8:30:67:4F:B5:D5:7F:0F:01:67:B7:14:43
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5972BA8B0144B660B9E6356E8B7A5F86D91B195F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143470.roa
Signing time:             Fri 22 May 2026 07:40:43 +0000
ROA not before:           Fri 22 May 2026 07:35:43 +0000
ROA not after:            Fri 21 May 2027 07:40:43 +0000
asID:                     143470
IP address blocks:        240a:a334::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:72:ba:8b:01:44:b6:60:b9:e6:35:6e:8b:7a:5f:86:d9:1b:19:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:35:43 2026 GMT
            Not After : May 21 07:40:43 2027 GMT
        Subject: CN=7A2C86BCC8CBE0A830674FB5D57F0F0167B71443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:de:bf:26:f1:9c:ba:8a:bc:02:d8:29:fb:e7:
                    e6:25:cc:df:2f:3c:4a:9e:3b:d9:7d:0e:aa:24:d5:
                    67:47:19:79:74:4f:79:f1:7e:81:08:3b:67:db:fe:
                    83:2c:04:a6:48:82:5d:db:8f:20:98:b1:a8:2b:7f:
                    67:b5:b2:74:5a:99:f5:ca:6d:2b:14:bb:4c:a4:63:
                    1c:fd:81:10:c7:1e:7b:9e:e0:c7:90:09:d2:ca:86:
                    a8:9c:cd:a8:da:ef:07:0e:6b:5c:f0:0f:f6:86:3d:
                    fb:fe:c8:aa:5b:4d:5e:df:0b:4f:1a:c1:9b:93:93:
                    94:ce:48:e6:5b:ea:7e:4d:a0:bd:33:3b:74:9a:07:
                    22:e7:2b:7f:d0:f0:d8:da:dd:e7:89:bc:0f:7e:2e:
                    fb:37:7d:ee:78:2d:c2:c5:3b:0c:e6:b7:ba:0d:3c:
                    f7:a8:50:2f:4a:11:ee:76:23:3c:34:5d:81:81:2b:
                    0a:eb:77:db:77:20:7d:70:f8:09:c8:92:36:f4:b8:
                    81:fe:1c:2f:c3:42:14:05:cf:cb:22:d3:e9:75:98:
                    46:ce:f5:fa:41:f3:90:f2:12:15:4c:84:60:56:27:
                    b8:c4:61:2a:1e:f6:b6:c2:d1:ad:4c:43:33:64:4d:
                    67:00:cf:6c:d2:05:44:47:d1:8a:84:05:2b:59:0f:
                    d2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:2C:86:BC:C8:CB:E0:A8:30:67:4F:B5:D5:7F:0F:01:67:B7:14:43
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143470.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a334::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:2a:81:d0:84:9e:0a:0d:38:b1:cd:74:a2:4b:3c:ae:c9:4b:
         c7:01:ec:a0:f0:1a:f9:c9:40:41:80:06:bf:b5:eb:09:a7:1e:
         5f:0e:27:40:0c:f5:80:12:2d:19:94:9d:df:97:14:1c:dc:47:
         29:fc:0a:3b:fc:2a:b4:79:96:86:78:01:49:61:4f:37:e5:aa:
         52:6a:ac:89:0b:0f:1d:a8:b5:97:f4:b1:45:76:e3:af:ac:c8:
         ec:01:97:f9:ad:e4:e0:04:68:db:98:1b:27:36:b6:13:b3:d0:
         c4:c5:43:32:79:9d:81:af:35:b7:09:1e:f2:b7:62:97:d6:77:
         5a:dd:bd:50:50:14:51:80:c3:4f:46:a2:72:71:e3:af:cf:5e:
         27:d4:71:bf:46:e4:3d:d6:a4:81:9d:f1:60:22:53:5f:cb:fe:
         d3:03:23:4e:e6:72:8b:48:bb:ee:96:18:ec:7e:99:37:eb:a0:
         dd:b3:b3:c8:d5:8a:e2:1c:fa:ab:9d:e8:9a:be:62:67:a1:b9:
         42:36:76:6c:02:5e:a9:c3:3e:77:12:eb:e9:1a:74:1c:31:1b:
         d6:85:76:94:8f:14:93:62:95:e7:f9:c9:45:97:8f:2a:2c:85:
         fb:5d:cb:27:81:10:b6:82:19:5d:80:29:23:f5:74:3d:68:00:
         c0:43:e2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----