Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143543.roa
File:                     AS143543.roa (raw, json)
Hash identifier:          cS3bjiWD1JL5oc4bhJy7Ia7TulKMPHrwTgC5P1A0aqs=
Subject key identifier:   FE:18:02:B0:B5:37:9A:4E:7C:4B:18:9A:AD:B8:E6:57:4E:11:9B:53
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5F5AEE2ABB2644B09A166FC50A03FD5DA072D992
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143543.roa
Signing time:             Fri 22 May 2026 02:48:04 +0000
ROA not before:           Fri 22 May 2026 02:43:04 +0000
ROA not after:            Fri 21 May 2027 02:48:04 +0000
asID:                     143543
IP address blocks:        240a:a37d::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:5a:ee:2a:bb:26:44:b0:9a:16:6f:c5:0a:03:fd:5d:a0:72:d9:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:43:04 2026 GMT
            Not After : May 21 02:48:04 2027 GMT
        Subject: CN=FE1802B0B5379A4E7C4B189AADB8E6574E119B53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:81:23:5b:01:b7:39:58:31:26:af:ea:9b:36:
                    c8:fa:26:4a:c2:1f:2f:73:c8:a5:dc:ed:d1:14:89:
                    28:f4:7f:96:3f:e2:f3:9a:b0:3f:48:e9:c5:69:0d:
                    3b:e9:84:16:cb:4c:98:8f:42:c3:ba:1a:5d:61:7f:
                    76:74:ad:67:41:86:2f:20:65:eb:52:0e:e0:ab:94:
                    8d:dd:a7:e3:e8:8d:aa:59:4d:b9:76:fa:d9:8a:fe:
                    36:f6:e3:fe:f5:47:7b:eb:dd:4f:a1:e2:ff:d0:a3:
                    37:c1:df:b2:46:3d:d0:69:95:77:9c:d5:20:29:75:
                    35:75:eb:f7:26:66:5d:a1:23:a7:47:b6:5f:d5:eb:
                    63:c4:3a:e9:d9:e8:90:b0:da:58:b3:cb:d8:a2:27:
                    92:96:60:78:ce:90:32:76:5d:38:6b:1b:5d:59:d9:
                    e4:6d:16:1c:be:15:3c:db:37:a2:ed:c9:ed:07:6a:
                    ac:4a:88:ab:d3:b2:c5:1f:f4:ba:36:38:38:aa:b0:
                    7f:cf:61:30:f4:13:22:ab:4d:47:8b:ed:72:16:d1:
                    bf:07:20:bd:e6:48:7a:2b:d8:38:c6:e3:0d:ac:f4:
                    b8:85:4e:16:8f:b3:0b:86:2c:6f:bb:75:ce:78:a9:
                    67:5e:02:d9:0f:3f:a4:58:0e:91:79:cd:b8:ed:60:
                    5d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:18:02:B0:B5:37:9A:4E:7C:4B:18:9A:AD:B8:E6:57:4E:11:9B:53
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143543.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a37d::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:9d:ff:eb:66:9c:c5:56:96:95:0a:d1:a3:72:ed:26:14:60:
         e0:67:80:b6:06:4e:93:a6:c7:29:a0:56:8a:09:c9:e2:9b:d2:
         97:3e:d4:96:00:a5:e1:fb:2b:ab:ba:2e:5b:40:92:45:a3:28:
         3d:e0:95:20:8e:2a:3e:53:77:67:e9:81:77:c6:8e:5b:2e:65:
         6a:d0:d7:aa:c5:2f:63:d9:86:a3:88:f1:0f:e7:ad:41:e2:c9:
         1b:34:bc:d3:15:b4:b9:cd:74:e7:23:67:f2:2d:c9:29:0c:8e:
         f9:61:5a:f8:8b:54:12:66:9e:8c:2d:f0:7c:0f:d3:7a:4a:a1:
         f3:24:ec:bc:b6:c9:ec:54:dc:ba:5b:e5:1b:d4:67:69:40:13:
         18:c7:69:6a:37:bf:13:e5:e7:22:9e:92:95:51:44:56:20:02:
         5f:f8:01:b7:59:bc:1a:16:66:e2:8b:58:57:02:55:d2:5d:e7:
         87:b5:ac:5c:19:0d:77:04:04:8f:8a:8e:6d:2b:e3:09:65:92:
         44:fc:83:3e:4b:4d:a1:da:a9:64:39:07:8b:a0:d5:8c:75:97:
         5c:8a:47:9c:44:f5:a7:c7:91:5d:96:62:9f:be:85:8d:13:c5:
         f8:03:76:f4:a5:aa:d1:64:3b:55:a9:a2:f4:b3:d4:53:2e:c8:
         54:8d:3b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----