Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143554.roa
File:                     AS143554.roa (raw, json)
Hash identifier:          mX4GeAj1Os1wu9DWYEFuCVJQWJ9jb8pTefX4aFzu95E=
Subject key identifier:   C9:71:C3:20:97:79:8F:A1:1C:91:27:EF:AD:55:D7:16:17:C2:C0:4F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       08CCDC7A4B17FDAEECC3CF10B5233C0530D41022
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143554.roa
Signing time:             Fri 22 May 2026 04:27:18 +0000
ROA not before:           Fri 22 May 2026 04:22:18 +0000
ROA not after:            Fri 21 May 2027 04:27:18 +0000
asID:                     143554
IP address blocks:        240a:a388::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:cc:dc:7a:4b:17:fd:ae:ec:c3:cf:10:b5:23:3c:05:30:d4:10:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:22:18 2026 GMT
            Not After : May 21 04:27:18 2027 GMT
        Subject: CN=C971C32097798FA11C9127EFAD55D71617C2C04F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:38:6a:85:9c:4a:c1:01:37:65:9e:7e:91:9b:
                    94:43:dd:e6:b1:67:7e:a0:5b:f6:cf:b7:fc:b9:90:
                    1e:e3:94:ca:f0:03:fd:ce:dd:1f:1a:ae:9b:58:85:
                    f3:29:3d:cf:56:31:ac:0d:fb:79:bc:84:d2:c2:85:
                    ee:67:fa:6c:60:35:8b:f2:cd:94:94:28:e5:8d:4a:
                    60:27:53:a9:c7:d7:5c:e6:41:78:e2:e0:3f:a2:3f:
                    49:61:9f:00:e0:a6:5f:f7:db:18:51:40:60:34:23:
                    e7:df:0c:e6:b1:fa:b9:38:07:c5:76:12:a7:a9:47:
                    93:04:9b:b3:61:9f:e3:9d:69:6d:ef:7c:58:c7:38:
                    3d:31:e4:6f:4c:6f:4a:3b:c7:3e:fd:6d:8d:81:8d:
                    c7:b7:45:68:79:84:92:64:74:4b:2c:65:55:ad:75:
                    32:ee:ae:12:50:d0:6b:54:ac:c8:e4:e5:91:8c:db:
                    a3:3c:3c:85:42:75:e5:3a:9d:e3:91:1c:14:4c:b3:
                    2c:08:34:03:10:8f:fa:75:07:98:1c:a9:8d:ac:19:
                    49:27:fb:86:7d:86:15:b2:db:5c:e6:0c:c2:c9:f7:
                    28:da:81:ae:ab:c7:07:93:45:f3:b0:10:e5:56:97:
                    66:ee:e7:bb:65:8f:2c:54:5f:a5:3b:54:8b:22:57:
                    61:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:71:C3:20:97:79:8F:A1:1C:91:27:EF:AD:55:D7:16:17:C2:C0:4F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143554.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a388::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:fe:71:f1:3b:96:85:ab:e4:3c:47:3f:07:fd:7f:13:0f:0b:
         c8:3a:ba:04:ac:3c:ea:f9:07:96:6a:be:cc:88:59:e7:2d:7f:
         65:65:9f:dd:1e:25:35:13:57:51:42:ba:ef:80:42:b0:87:81:
         2e:a8:1c:76:21:79:14:3a:f9:25:93:9b:9e:0f:01:df:9d:e7:
         19:04:89:b5:a4:26:3d:ea:4b:58:1d:3f:9d:65:08:bc:b4:b5:
         9a:27:97:f6:1a:68:98:9e:a3:20:3d:96:70:f4:30:24:e4:0f:
         5a:f9:41:f6:2d:95:79:05:e6:9a:5a:fe:b4:45:22:2b:04:b0:
         dc:a6:51:e7:25:36:da:c8:20:0e:c5:87:d0:4f:69:29:00:69:
         b8:da:d8:f2:e6:b0:c5:c2:a7:1c:f5:49:ec:67:9c:ce:ca:13:
         a6:e0:d1:80:70:52:71:22:c8:04:41:c5:53:e0:6d:d6:d1:d4:
         4b:98:f4:de:97:08:99:b4:81:37:83:43:94:a4:1f:92:31:06:
         88:07:fb:5c:9e:5c:3e:25:1a:a0:34:ea:57:d7:2e:fc:af:77:
         98:52:e8:1a:04:ef:9c:bd:3b:27:82:2f:de:ae:e7:34:b1:64:
         ad:7f:a6:55:b9:c6:34:c8:ac:58:97:2b:f7:05:9a:31:5c:c9:
         99:36:ed:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----