Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143513.roa
File:                     AS143513.roa (raw, json)
Hash identifier:          PKzEslMytC48LUc74NqBsVG4P6TQgy/HuD9YBgB5a2U=
Subject key identifier:   DC:BE:35:DF:57:EB:F2:C1:82:5C:0C:25:FE:BB:75:DF:9F:EE:64:90
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       23ECB29D1FC66DE221D85F1F9EBAE26B8BF32C19
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143513.roa
Signing time:             Mon 25 May 2026 03:19:31 +0000
ROA not before:           Mon 25 May 2026 03:14:31 +0000
ROA not after:            Mon 24 May 2027 03:19:31 +0000
asID:                     143513
IP address blocks:        240a:a35f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ec:b2:9d:1f:c6:6d:e2:21:d8:5f:1f:9e:ba:e2:6b:8b:f3:2c:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:31 2026 GMT
            Not After : May 24 03:19:31 2027 GMT
        Subject: CN=DCBE35DF57EBF2C1825C0C25FEBB75DF9FEE6490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:69:6e:5e:1b:9a:e2:e5:49:98:47:db:51:0c:
                    93:1b:41:f6:1f:f4:a0:bb:df:86:f1:0b:b2:33:c0:
                    70:a2:49:85:c9:6a:d7:7f:fe:31:b7:c7:5c:44:5a:
                    21:71:e8:36:58:37:0d:3b:7a:12:39:3c:31:07:2c:
                    4d:55:75:12:47:c0:bc:3a:c6:1b:24:5e:18:5e:a0:
                    40:89:c1:4d:91:66:c0:b1:2f:f6:21:a8:0d:f4:c2:
                    e4:00:db:eb:9b:33:71:5b:e7:37:26:0e:60:93:d4:
                    a5:89:69:0e:eb:a4:59:27:7a:a4:69:0c:5b:89:4f:
                    61:fc:91:45:77:56:9e:34:5b:b8:46:4f:e1:d6:b2:
                    70:67:a3:58:ea:ea:39:87:d8:3a:45:d1:d5:5a:e4:
                    11:95:2d:9c:36:01:1a:3a:50:53:0b:42:de:d8:00:
                    f9:95:6b:5b:d5:51:f7:c6:a6:eb:3b:01:70:d2:cc:
                    c4:66:78:63:00:3f:db:da:29:19:1d:bd:7a:ff:03:
                    f4:12:14:5c:27:32:3e:7f:e9:b5:03:1a:19:c2:21:
                    2f:9b:3f:90:f2:3e:e9:c7:d1:58:ae:e7:16:ae:a1:
                    e3:85:54:a8:7a:90:4b:81:f6:11:04:af:2c:e9:c5:
                    3a:53:23:b7:61:06:fc:ef:09:67:96:de:ad:e2:43:
                    70:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:BE:35:DF:57:EB:F2:C1:82:5C:0C:25:FE:BB:75:DF:9F:EE:64:90
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143513.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a35f::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:42:ea:6b:7f:2a:0d:66:06:de:f5:ac:7c:30:61:3e:17:34:
         b7:45:12:e6:ba:1a:e5:42:ed:73:9a:f1:20:30:77:3c:25:a2:
         8f:e4:dd:aa:c3:0d:76:ff:c4:6d:2b:e7:0c:17:37:da:3e:e6:
         a9:1b:46:48:99:fb:53:ad:61:ef:c3:a7:ed:c5:ef:b3:12:01:
         a9:da:b1:a2:53:21:77:06:40:11:a0:39:e9:d9:d4:58:f5:83:
         b4:13:d5:f2:c9:39:01:a4:b3:02:cf:ee:7b:a1:8c:59:be:a2:
         59:61:c9:77:34:38:48:ad:0d:2e:53:d3:4c:21:46:3b:fd:f7:
         fe:04:7d:eb:19:40:c7:e5:b1:d3:ee:07:a1:98:4e:9f:c5:95:
         cd:2c:c1:43:b2:12:9b:d9:4f:0c:92:3d:f1:77:f4:ea:5f:bb:
         2c:5b:57:c5:69:dd:7a:91:24:9d:8b:49:2b:71:87:98:d5:47:
         59:87:e7:c1:20:93:95:7f:11:8b:6a:10:9e:4e:28:61:a4:cb:
         3b:75:05:27:24:33:13:38:de:ef:42:3f:73:e0:36:bb:37:46:
         9b:06:1c:82:2d:13:79:4c:4b:1a:5b:4b:3f:1f:04:cf:e1:86:
         c2:d1:76:06:8a:f9:1f:e9:ad:db:b7:d9:00:54:40:b6:c7:a6:
         14:6b:81:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----