Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143533.roa
File:                     AS143533.roa (raw, json)
Hash identifier:          pRER35YLiAMZ4Wb8sVnN3QEjRtErOaW9e6O3V1XS5z0=
Subject key identifier:   7C:A8:E1:04:20:48:EA:ED:F8:3F:AA:D8:34:95:EE:DC:FE:82:8C:28
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       57B2E8EA64B24D2CBCE04782436FF4BD51CC3A59
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143533.roa
Signing time:             Fri 22 May 2026 06:46:18 +0000
ROA not before:           Fri 22 May 2026 06:41:18 +0000
ROA not after:            Fri 21 May 2027 06:46:18 +0000
asID:                     143533
IP address blocks:        240a:a373::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b2:e8:ea:64:b2:4d:2c:bc:e0:47:82:43:6f:f4:bd:51:cc:3a:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:18 2026 GMT
            Not After : May 21 06:46:18 2027 GMT
        Subject: CN=7CA8E1042048EAEDF83FAAD83495EEDCFE828C28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:89:ff:44:b5:b5:d8:9c:2d:ac:fb:8f:bc:cc:
                    5f:85:e0:73:1f:c9:79:78:a6:a7:32:b9:fd:1f:d0:
                    60:fd:e0:48:d2:85:b6:49:42:0c:e4:19:93:c6:56:
                    ee:59:79:26:ab:87:13:1a:ef:8e:aa:0f:3d:c4:d4:
                    76:df:24:04:02:0c:0e:d3:18:c9:18:7d:03:11:48:
                    88:7c:d4:1c:eb:40:f9:7c:bc:44:0b:43:3f:80:cb:
                    1f:a4:c1:91:2a:b2:be:11:4e:ce:af:c3:03:5e:19:
                    5f:b4:b6:98:95:84:0f:dd:01:37:73:7a:7c:7f:e2:
                    31:c6:3a:37:e7:8c:7f:82:5b:38:a7:9b:51:ad:cb:
                    fe:f6:1b:4f:5b:78:2a:b1:d6:61:78:d6:05:4d:e9:
                    4f:d9:58:09:09:79:49:f7:a4:fd:65:d2:dd:d3:b1:
                    ec:f7:1e:88:78:b2:b8:c6:31:9b:2d:4b:de:fc:55:
                    cc:92:e8:28:c9:0f:bf:f3:65:09:15:5c:28:9b:c3:
                    bb:06:c6:64:bc:43:48:45:d4:a7:81:d4:4c:be:28:
                    0f:a7:23:de:6d:74:a1:b2:a9:d4:51:e1:d5:c8:62:
                    75:6b:96:61:e9:44:8a:ad:c4:44:fe:96:48:fc:c6:
                    5a:de:e5:56:9b:22:67:16:91:46:2b:0d:d3:c3:51:
                    39:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A8:E1:04:20:48:EA:ED:F8:3F:AA:D8:34:95:EE:DC:FE:82:8C:28
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a373::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:16:d2:17:43:fd:87:0e:14:99:ec:7c:e2:90:96:f8:09:e2:
         83:10:da:c9:02:32:34:90:52:6d:9a:b8:1d:a5:1e:50:64:4a:
         85:a0:8f:fb:97:77:b7:69:69:b9:2f:f5:81:d2:97:41:4f:0b:
         92:12:e5:99:16:04:4b:50:6f:c2:01:d7:9d:10:24:e6:60:07:
         d9:d0:c8:a6:f0:7a:3f:95:95:47:1d:a1:d8:f5:a8:ba:ac:55:
         a7:af:eb:c3:c5:ad:87:5a:b4:25:1c:a9:21:e6:47:bd:c1:de:
         c3:f3:e4:5e:87:87:64:75:59:ac:aa:27:09:42:44:16:49:04:
         c4:86:4e:e0:13:f7:bb:f0:3b:ba:5d:40:2e:ae:19:ae:f6:9b:
         01:46:40:5c:81:a6:4d:4e:fd:68:db:25:d2:24:29:aa:b1:dd:
         b1:5b:81:16:55:07:6b:c9:fc:92:31:e5:75:40:6f:39:49:7a:
         c9:9e:78:f1:3e:45:b0:98:3e:5b:3c:69:be:c5:9d:5e:c8:43:
         97:7c:ca:87:7a:84:ac:1b:58:16:d7:ad:e4:41:c4:32:f4:b2:
         0f:67:4a:88:9a:6d:c8:dd:a8:44:07:36:23:b2:87:a9:20:aa:
         ed:40:b9:a2:1f:91:1b:f4:37:d0:19:39:1f:24:10:ae:0c:5a:
         85:c2:8e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----