Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143488.roa
File:                     AS143488.roa (raw, json)
Hash identifier:          kxX1pHrGlzdMk+h5rWuztoFBYnckVAoBpT6182yR+Dk=
Subject key identifier:   5B:1C:F8:68:68:BD:4D:95:C6:08:32:4B:5B:D8:74:D9:05:A5:61:91
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       74375B641BA558F9E8FE5AB317F8B743AF55AA48
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143488.roa
Signing time:             Fri 22 May 2026 06:28:03 +0000
ROA not before:           Fri 22 May 2026 06:23:03 +0000
ROA not after:            Fri 21 May 2027 06:28:03 +0000
asID:                     143488
IP address blocks:        240a:a346::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:37:5b:64:1b:a5:58:f9:e8:fe:5a:b3:17:f8:b7:43:af:55:aa:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:23:03 2026 GMT
            Not After : May 21 06:28:03 2027 GMT
        Subject: CN=5B1CF86868BD4D95C608324B5BD874D905A56191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e3:49:90:59:85:9e:a5:0a:1f:be:c8:05:20:
                    57:9b:0d:53:49:ee:0d:0b:64:94:7f:2d:1e:7a:c4:
                    f4:cb:fa:fa:d5:f0:cd:d8:6b:12:e1:29:5e:f9:2b:
                    f0:3a:fc:84:11:c1:9b:60:28:15:a7:1f:2c:44:2f:
                    a1:e1:dc:e7:f0:cc:2d:a8:ba:6b:a1:83:9b:40:13:
                    fb:83:47:87:83:9d:07:3a:6f:6e:9e:c0:42:db:4f:
                    6d:9e:60:a7:02:4b:22:dc:6c:b1:b1:08:3e:af:bf:
                    fb:7c:8d:65:c4:ae:09:0c:c9:fe:e7:73:30:52:ff:
                    eb:22:98:4f:33:9f:81:13:e9:6d:d9:75:04:fc:85:
                    96:43:e5:4c:31:5f:c5:44:88:bd:9c:f2:fa:f6:12:
                    33:0b:12:75:7e:8a:43:3b:3d:a4:da:ba:18:54:7d:
                    76:7a:b1:04:1c:eb:07:b9:58:8a:b1:35:80:7f:9c:
                    4f:24:02:2a:7f:71:27:bd:1a:de:39:94:c3:b6:52:
                    e6:97:25:97:04:4e:62:58:f1:cb:c5:50:de:6f:35:
                    c0:31:d9:42:7d:74:50:fa:6a:97:13:be:4e:14:37:
                    bd:b8:65:28:8b:19:ad:0a:a7:ba:e1:e9:17:e4:03:
                    5c:b8:6a:31:23:81:15:e9:ef:cc:db:be:b0:fb:d3:
                    f9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:1C:F8:68:68:BD:4D:95:C6:08:32:4B:5B:D8:74:D9:05:A5:61:91
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143488.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a346::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:86:fe:ff:fd:19:13:e3:c8:0c:98:2a:db:aa:c8:02:ff:a2:
         6f:ea:e8:b4:79:75:66:99:ae:a8:97:f8:74:a5:8d:b8:2b:3e:
         81:bf:cb:27:27:7e:13:fd:a5:07:79:13:28:5a:e7:39:12:b7:
         66:f7:2b:df:8f:ff:54:a4:c9:01:b1:08:6e:1c:d3:5d:4f:7c:
         41:8c:4b:95:4e:1d:5d:ef:df:91:80:44:fc:f1:17:8c:87:d9:
         f0:25:23:94:3b:f7:be:18:93:b6:35:b1:b6:40:bf:fe:54:e1:
         f7:23:06:46:fc:28:ae:3e:d9:6d:fc:8a:ea:cd:57:e6:74:37:
         f2:78:eb:3b:bf:4e:ca:e6:cd:a0:bd:9d:e3:d9:da:5e:16:71:
         43:8e:50:af:ce:c8:0a:55:6d:bc:1b:b3:d6:e7:9b:00:b4:50:
         dc:2e:f0:e6:1f:2b:d6:34:6b:c8:76:fc:2d:e2:b2:8a:c8:88:
         22:4c:bc:62:a7:96:d4:d7:e0:bd:13:12:54:cd:20:c1:bd:c5:
         a5:9d:67:da:1e:ea:4e:9b:6d:fd:4d:0e:2b:65:0f:ec:15:a7:
         c7:07:3c:8e:78:ec:5d:34:63:50:35:0a:ce:26:85:7c:e0:eb:
         9e:80:f2:4a:31:23:8f:df:e8:60:fb:19:55:56:71:c3:af:d2:
         de:df:b2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----