Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143519.roa
File:                     AS143519.roa (raw, json)
Hash identifier:          WcnLpIih9FjzvvninuDXrVuu3nktOItF2M/pvXbXmUw=
Subject key identifier:   8B:EB:5B:89:42:94:24:F3:3F:57:4D:8A:5A:0F:28:2C:C3:15:06:B8
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4AA83E5C323869727BECCBD67204979A9A7CFAB7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143519.roa
Signing time:             Mon 25 May 2026 06:48:41 +0000
ROA not before:           Mon 25 May 2026 06:43:41 +0000
ROA not after:            Mon 24 May 2027 06:48:41 +0000
asID:                     143519
IP address blocks:        240a:a365::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a8:3e:5c:32:38:69:72:7b:ec:cb:d6:72:04:97:9a:9a:7c:fa:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:43:41 2026 GMT
            Not After : May 24 06:48:41 2027 GMT
        Subject: CN=8BEB5B89429424F33F574D8A5A0F282CC31506B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:4e:32:b3:a2:e5:4b:f2:89:1f:44:df:44:c8:
                    af:59:34:e0:62:05:47:0a:60:46:f0:e9:71:67:fd:
                    24:07:1f:6c:6d:47:42:6f:83:38:7a:85:02:ed:39:
                    dd:20:17:6b:a5:b4:eb:40:df:c0:7a:8d:91:a7:9d:
                    77:e0:07:be:52:0e:ee:b2:e9:d6:20:3d:32:d3:e8:
                    eb:07:c6:7e:11:80:07:c1:b4:d2:11:e2:ef:24:ba:
                    2d:73:e2:b0:2f:b2:0b:05:99:e2:f6:4f:7a:20:c1:
                    30:2e:6f:1f:39:3e:b8:6a:bb:18:cd:fa:b0:34:3f:
                    53:a0:24:b7:77:62:d1:c5:ed:c5:71:6a:47:ca:5f:
                    e9:a3:27:74:ea:75:5b:f3:f8:ff:2a:a4:49:91:eb:
                    0f:d5:df:bb:d5:d5:0d:64:40:f3:a1:53:af:d9:de:
                    72:d5:ee:3a:67:2e:f9:03:85:5f:86:65:4e:3d:ca:
                    74:0e:1f:0d:6d:cf:4f:83:72:82:5d:11:36:bb:67:
                    04:72:40:e9:bc:c5:bd:09:4b:9c:b5:59:33:f5:5a:
                    cc:3b:59:c1:d9:39:ef:df:75:a6:b6:56:ab:9e:b8:
                    30:9d:28:9e:74:3a:51:44:79:26:cd:43:0a:81:1f:
                    55:d3:60:21:73:8a:9a:23:c0:97:de:52:a8:5f:3d:
                    e4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:EB:5B:89:42:94:24:F3:3F:57:4D:8A:5A:0F:28:2C:C3:15:06:B8
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143519.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a365::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:cb:df:41:b8:0b:b6:ab:13:27:82:20:98:2c:fc:03:09:5a:
         97:a0:b9:a4:82:cf:1a:16:ee:58:e5:b1:bc:94:20:ec:6c:08:
         7f:d3:8b:c3:30:3d:0c:47:3c:5b:18:64:80:3c:07:33:ae:18:
         fe:c2:f6:77:f3:67:9a:fe:68:97:f5:b4:be:27:f1:2e:91:ee:
         59:8a:56:45:1d:6b:18:5d:a7:5f:c4:fe:23:bd:0f:dd:ad:bd:
         41:4b:a3:f0:a8:55:3e:32:f1:60:49:87:c8:98:d9:64:ab:4c:
         29:b8:3b:f6:b2:b6:53:19:6b:ad:f1:66:73:39:62:85:28:e6:
         c7:27:d1:ce:34:7a:25:6e:f4:80:ba:f7:0e:2a:6f:5a:57:92:
         25:e6:97:f8:2a:be:e1:d1:9d:6e:b0:28:fc:15:7b:bc:21:de:
         d2:77:f3:fb:20:34:39:6f:89:12:84:a7:27:ac:db:41:e9:84:
         4f:bf:4f:a2:c4:56:25:97:d5:39:36:80:63:65:9b:90:b1:13:
         35:1b:b4:ce:93:19:a1:ce:3b:91:aa:1a:6c:09:a5:57:e6:76:
         06:53:2f:07:94:81:8e:b8:ff:6c:ff:43:4e:e1:3b:d9:3c:d8:
         c5:22:12:dd:73:2f:62:92:b6:80:48:8c:f9:23:05:62:84:01:
         3a:88:90:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:57 2026 by rpki-client