Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143496.roa
File:                     AS143496.roa (raw, json)
Hash identifier:          Bta/+alIIpyyfigoJzQ+ZmSPFq8RuBHIbmO1ni+EA9c=
Subject key identifier:   CD:C2:16:A4:6C:5E:D3:5B:51:F0:0E:39:2C:97:17:E7:45:01:75:CC
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       41D147653C8D9AAE2B4EEAF6AD629EA01CEEEA14
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143496.roa
Signing time:             Tue 26 May 2026 06:30:58 +0000
ROA not before:           Tue 26 May 2026 06:25:58 +0000
ROA not after:            Tue 25 May 2027 06:30:58 +0000
asID:                     143496
IP address blocks:        240a:a34e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d1:47:65:3c:8d:9a:ae:2b:4e:ea:f6:ad:62:9e:a0:1c:ee:ea:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:58 2026 GMT
            Not After : May 25 06:30:58 2027 GMT
        Subject: CN=CDC216A46C5ED35B51F00E392C9717E7450175CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c3:4c:e3:20:bc:35:b2:16:26:21:49:3e:c2:
                    82:7d:88:1c:cd:7e:fe:37:ac:9f:e6:44:98:f1:f7:
                    bf:98:c3:e5:fa:ff:8b:9f:b9:cf:13:5d:ce:01:28:
                    1d:0d:22:09:e5:fe:1d:db:bc:9c:71:fe:81:90:1b:
                    86:ff:d2:38:5f:5b:bb:ed:a0:7b:a0:6a:67:4d:2a:
                    1d:8a:61:d5:fc:30:a0:23:8b:26:53:dd:e6:01:9c:
                    d8:9e:73:62:59:eb:fe:06:13:5b:23:d6:d8:47:53:
                    c0:0d:13:b5:b9:5e:7d:b4:81:2d:c9:01:f9:f0:69:
                    fc:c2:c0:ed:d5:a7:37:30:f5:8f:d2:ed:db:93:b6:
                    95:5e:74:b7:d7:c2:68:0a:3c:16:d5:d1:b5:12:2a:
                    e9:fa:83:f9:f7:5b:1d:c4:d2:f3:46:df:e1:2c:e5:
                    9d:40:a1:33:01:71:9f:b5:24:a3:eb:42:2e:e5:c7:
                    9e:69:c9:70:4a:99:b6:c4:3b:2a:13:b7:20:4c:7d:
                    ec:3b:ce:8b:37:24:b4:9a:ac:8e:20:cc:a7:35:22:
                    8d:a9:ef:01:d2:5e:17:f0:98:0c:30:ac:48:8d:c2:
                    41:1f:59:22:f5:a1:47:c1:f5:5b:6b:2b:d9:ed:4e:
                    d5:1c:ab:74:44:1b:46:59:7f:5d:a9:23:70:a2:79:
                    9a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C2:16:A4:6C:5E:D3:5B:51:F0:0E:39:2C:97:17:E7:45:01:75:CC
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143496.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a34e::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:5d:c9:64:bd:8d:4a:a6:fd:32:30:09:2b:de:a6:a6:1c:f5:
         03:c0:31:28:85:0c:de:18:90:41:98:ad:e5:4b:91:2f:e3:74:
         03:69:5a:bd:d7:50:e4:f6:78:1a:5d:65:73:00:e0:6c:4f:45:
         e0:f1:4c:09:1e:2d:dd:7a:d2:a3:08:6e:3b:47:2c:75:9d:b3:
         48:eb:4a:47:ce:7d:59:59:17:6c:22:e7:46:73:ee:f0:07:77:
         9a:f7:4e:5d:b5:be:80:40:54:ba:f0:2e:50:fc:5f:47:5e:b3:
         9a:4b:06:27:bc:0e:9f:86:c3:1d:03:28:33:27:20:1f:84:bd:
         43:f0:04:17:11:a1:7a:11:ce:df:28:c6:29:a3:4d:8b:2c:fc:
         41:c5:a8:68:d3:ba:cb:01:6d:17:f1:87:0b:46:7c:e7:3a:5f:
         a4:d0:77:17:9b:f9:48:75:ce:8a:01:3d:28:e9:f7:bb:d9:9e:
         6f:17:e5:49:81:c5:ef:26:ad:50:42:06:5a:0a:5b:98:e6:6f:
         e2:42:68:8d:7a:ed:85:28:2b:62:8a:36:48:48:12:11:1b:9a:
         81:32:41:fb:27:30:bf:74:3a:65:1e:a9:47:32:93:5e:a3:ce:
         95:60:7c:4a:aa:f9:46:08:b5:ca:32:24:b2:48:8a:a5:a0:16:
         29:bc:c9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----