Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143471.roa
File:                     AS143471.roa (raw, json)
Hash identifier:          QdW1h3j58ZdeFFmcvZvlSmFpOzxd/znpBOlcct6fhsQ=
Subject key identifier:   2A:8B:51:CF:E0:A7:26:6B:5C:CB:31:96:46:D2:18:8E:0D:D3:3C:BF
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0187B93DE4C2FAAF027C4376A0075578D780B7A7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143471.roa
Signing time:             Fri 22 May 2026 04:26:42 +0000
ROA not before:           Fri 22 May 2026 04:21:42 +0000
ROA not after:            Fri 21 May 2027 04:26:42 +0000
asID:                     143471
IP address blocks:        240a:a335::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:b9:3d:e4:c2:fa:af:02:7c:43:76:a0:07:55:78:d7:80:b7:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:21:42 2026 GMT
            Not After : May 21 04:26:42 2027 GMT
        Subject: CN=2A8B51CFE0A7266B5CCB319646D2188E0DD33CBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d4:e5:9b:7f:95:e0:01:0a:76:e4:b4:5f:18:
                    5b:6b:e2:bd:21:da:86:18:c6:c6:6c:09:7b:da:c6:
                    0e:e4:c9:f8:36:bc:b8:1b:9f:23:d1:bb:55:7e:75:
                    e5:6a:2d:5a:c0:f3:cb:d4:c9:a0:43:92:d2:74:38:
                    30:fe:da:7e:ef:cc:95:c1:e1:b2:7b:ff:96:73:cc:
                    c3:4b:84:08:1f:9e:0d:0c:d6:2f:07:ed:d6:86:c5:
                    78:48:ad:82:00:d4:11:5f:1f:c9:81:6c:fc:cd:18:
                    f5:3e:0a:f6:a0:24:69:a8:ab:c0:06:05:33:04:4c:
                    27:c3:6e:1f:c0:60:66:e2:56:6a:b8:bd:58:78:4d:
                    f2:80:3f:b9:a7:e7:e6:00:fc:88:21:03:d6:8d:7d:
                    35:3c:20:07:56:d3:9d:9d:bf:3d:02:2f:55:04:fd:
                    96:7a:42:0e:25:74:ce:60:9f:02:f4:4a:d8:7f:78:
                    8e:7c:31:fb:7d:e9:81:3f:8b:ff:25:fa:48:49:5f:
                    cd:3c:a7:7e:5f:34:a7:f4:ae:a0:a6:62:b3:44:04:
                    a7:3d:0f:54:5e:9c:ce:38:7c:de:0a:a9:73:53:39:
                    d0:b6:27:8d:53:8b:ec:e7:9d:86:23:f5:c4:f1:11:
                    23:ce:2d:84:d9:0e:0a:88:7a:c8:86:fc:3a:3e:5b:
                    21:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:8B:51:CF:E0:A7:26:6B:5C:CB:31:96:46:D2:18:8E:0D:D3:3C:BF
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143471.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a335::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:9d:21:fe:74:10:2e:48:0f:2a:b7:8a:01:b5:8c:f3:4b:12:
         0b:69:25:c5:ea:50:a3:ba:3e:27:54:93:d1:30:0b:84:03:12:
         1d:1f:c7:3f:69:c0:d7:d4:8c:84:27:18:bc:20:9d:07:4c:89:
         ca:6e:1f:6d:5a:f1:0f:1c:b9:94:28:41:b4:8d:0d:45:1b:24:
         4d:01:72:0c:d6:b4:56:da:e5:66:c9:03:d3:28:85:fa:ab:8a:
         87:41:b2:20:57:66:b4:7b:fe:df:9b:e7:22:b7:d8:01:a7:f6:
         9d:0f:f9:34:90:07:fc:f1:14:6a:98:2e:78:d3:dc:9e:bf:85:
         98:2c:e2:65:b7:cd:5b:86:67:19:07:90:27:1a:74:6c:de:cd:
         7b:23:87:11:2d:2d:2b:58:b1:e1:b7:6a:49:84:48:a3:06:dc:
         b6:5c:e1:2c:3e:1e:83:9e:99:fd:3b:78:85:34:3d:69:82:73:
         8d:89:0d:06:d0:97:73:c2:04:f5:f9:61:12:55:c2:7c:d3:3d:
         0b:68:d0:b1:7c:b6:f5:14:08:43:b9:fb:8a:7e:30:8d:3a:88:
         a7:69:79:a3:f3:76:26:d7:7d:70:4e:a1:17:2d:d3:7c:da:ca:
         82:5b:4b:c3:74:f6:ea:00:ea:8c:30:9a:9e:7a:a4:51:c8:df:
         50:9d:43:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----