Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143539.roa
File:                     AS143539.roa (raw, json)
Hash identifier:          3xq/IbxNsuYtwb2lKxYZdWf1ufapwkrtzDL/RojoeAQ=
Subject key identifier:   02:DA:ED:87:BB:E3:1F:CF:D9:6F:9D:C7:E0:36:27:FB:39:E4:74:EA
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       44B76F36BF29D27EB12D87684CC707F544185801
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143539.roa
Signing time:             Mon 25 May 2026 03:19:15 +0000
ROA not before:           Mon 25 May 2026 03:14:15 +0000
ROA not after:            Mon 24 May 2027 03:19:15 +0000
asID:                     143539
IP address blocks:        240a:a379::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b7:6f:36:bf:29:d2:7e:b1:2d:87:68:4c:c7:07:f5:44:18:58:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:15 2026 GMT
            Not After : May 24 03:19:15 2027 GMT
        Subject: CN=02DAED87BBE31FCFD96F9DC7E03627FB39E474EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:dd:5c:5b:e5:4a:c7:9c:4e:34:31:e3:d4:f7:
                    a3:35:24:9e:6e:1c:34:ce:70:dc:e3:14:f1:e6:eb:
                    35:6e:78:f7:5d:b6:a9:4a:e8:98:3b:89:d8:02:68:
                    dc:0e:3e:66:e3:b9:90:46:b1:ae:55:8f:e9:33:1a:
                    35:00:e3:b7:4d:11:83:56:f6:cd:5c:59:a4:a0:a5:
                    0f:49:b1:53:ba:d2:63:d5:62:6c:a2:a9:ce:14:37:
                    47:41:c4:66:59:b8:54:72:6e:21:9b:7e:84:37:b6:
                    d6:7a:2f:9d:c6:e9:20:a6:72:9a:b1:38:35:ef:48:
                    24:8d:fd:a1:34:0b:60:a4:9f:f0:83:20:d8:2c:e7:
                    fd:b7:b5:b1:e1:e9:3f:bb:c0:7e:23:f1:12:64:13:
                    9b:f0:99:d9:7e:76:2a:98:57:45:58:6d:37:e7:29:
                    98:09:3f:62:1e:ee:ee:0a:4d:a2:cb:09:09:6e:8d:
                    7f:af:f9:46:1d:7f:27:96:24:13:cf:fb:5a:9c:a4:
                    22:2e:48:43:c0:c4:e5:5f:e3:58:d8:b1:65:cb:a5:
                    eb:8f:58:9d:8d:a6:2b:8b:69:19:a2:cb:8b:0c:b2:
                    cc:25:9d:f1:a0:39:a2:b4:9e:ba:33:ad:5d:29:21:
                    f6:78:10:ea:81:1f:93:53:10:71:37:3b:93:3a:7f:
                    3d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:DA:ED:87:BB:E3:1F:CF:D9:6F:9D:C7:E0:36:27:FB:39:E4:74:EA
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a379::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:ea:e0:35:36:d5:ad:84:de:62:a4:f0:d2:66:5b:fd:ef:9b:
         bb:7a:a6:8f:56:d8:eb:80:26:ed:86:c4:ce:29:71:b9:37:99:
         3f:70:33:2b:a0:4a:71:54:58:93:23:cb:8a:fa:40:d4:02:95:
         e4:7d:c0:cc:95:07:df:2e:74:ca:f4:06:a3:e1:80:c8:71:90:
         9c:80:4d:5f:4b:fd:37:52:11:dc:43:da:4e:f3:23:48:c1:64:
         bd:52:73:45:e8:f7:d4:f8:dc:6e:7f:e3:2a:73:6b:34:e0:d5:
         bd:8e:95:71:fe:8f:90:b4:f6:f4:f5:85:6b:c5:0f:35:0f:28:
         f1:23:78:3e:c8:df:94:f4:31:60:1b:e1:bf:4f:b9:19:6b:ef:
         69:ac:e2:c5:8b:c0:3a:15:27:2a:05:ea:b9:09:38:94:45:bb:
         86:63:cf:c2:93:73:50:0f:87:62:53:ad:f9:50:e2:82:ce:52:
         7a:ff:f9:f4:a5:25:8d:06:89:c5:07:a8:b3:14:ef:ee:8c:47:
         48:64:5f:a9:5b:d3:bb:0d:32:d2:33:86:b7:91:f3:0e:fe:48:
         44:c3:02:6e:c9:e1:bb:6e:57:a4:f8:8f:16:17:85:1f:29:72:
         f9:7d:bf:0c:38:1b:b0:23:0e:ea:fb:57:3c:b9:de:7f:21:e4:
         6f:ab:73:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:39:01 2026 by rpki-client