Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143561.roa
File:                     AS143561.roa (raw, json)
Hash identifier:          Eezwp6F4Zfa+ser8sPrMMw6qyXmWOraxbrZx0Swr12o=
Subject key identifier:   AF:F0:86:95:A5:0D:C4:77:11:65:D2:05:C6:F4:2A:EE:D9:CA:BE:58
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3C62C3133423CCA2972BBB644079470D5D5C37C7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143561.roa
Signing time:             Mon 25 May 2026 06:28:47 +0000
ROA not before:           Mon 25 May 2026 06:23:47 +0000
ROA not after:            Mon 24 May 2027 06:28:47 +0000
asID:                     143561
IP address blocks:        240a:a38f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:62:c3:13:34:23:cc:a2:97:2b:bb:64:40:79:47:0d:5d:5c:37:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:47 2026 GMT
            Not After : May 24 06:28:47 2027 GMT
        Subject: CN=AFF08695A50DC4771165D205C6F42AEED9CABE58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e9:73:75:79:7c:c9:7d:c3:71:19:1b:d1:24:
                    a9:2a:7f:2e:e4:94:a2:0c:65:a0:fa:0f:28:c2:58:
                    7e:9e:e6:36:a5:28:39:a4:82:42:1f:dd:11:34:07:
                    19:69:f3:4b:26:ac:a2:db:68:e7:c7:f2:f5:36:25:
                    38:5c:93:0a:f7:47:c6:be:c7:80:f2:d8:b3:fa:84:
                    c6:a7:cc:d1:2f:45:96:e5:09:d4:e6:7e:e1:2b:00:
                    ca:f7:29:a9:57:fc:aa:6c:5e:33:4a:e8:f7:c7:c1:
                    6c:a6:4f:44:7e:06:bf:b7:2e:ba:5b:01:bf:eb:a6:
                    fd:de:7b:74:24:19:94:a8:18:72:e3:f5:af:56:52:
                    88:2a:de:95:b1:fb:8c:fa:bb:b7:5b:82:7f:3b:f5:
                    2b:a2:aa:48:bf:d6:61:a5:c3:ed:ea:62:2c:75:34:
                    64:0f:e5:16:4a:58:a0:27:ee:17:9b:06:38:a6:7a:
                    2e:b5:af:51:d9:2b:55:7d:97:b7:94:0f:cd:f2:37:
                    ce:83:f6:e0:7d:0a:ee:8c:c7:37:3a:99:f1:b1:57:
                    5c:60:0a:3c:81:b3:d3:e9:f7:e6:f0:21:2b:b1:a9:
                    d8:c1:8d:a6:71:3d:49:ba:c5:f5:ee:91:85:07:ce:
                    53:1d:91:a2:43:34:09:7b:42:52:b2:54:6e:b2:32:
                    a1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F0:86:95:A5:0D:C4:77:11:65:D2:05:C6:F4:2A:EE:D9:CA:BE:58
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143561.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a38f::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:6e:70:21:5b:3d:fc:39:7f:2b:aa:fa:ea:48:5f:f3:8a:9a:
         27:eb:f7:83:db:a7:29:70:32:0a:e7:58:41:4c:48:2d:a3:0f:
         e8:07:95:d5:3a:47:75:e0:d1:16:c9:98:7d:ed:fb:28:58:b8:
         8e:21:eb:0b:f8:84:ca:6a:55:eb:a1:a4:6b:79:ec:6b:ed:3f:
         35:7f:d1:a7:47:ab:ca:84:01:85:a0:4a:e6:17:73:af:64:29:
         e5:55:dd:5c:24:1f:06:f1:14:eb:6b:a9:3e:21:8d:9c:b2:5e:
         fb:72:c9:ef:7b:d6:9f:6a:c9:ae:4e:10:2f:ee:f4:d6:f0:0c:
         2d:8d:99:13:2b:d3:99:74:29:d0:9d:ea:e0:44:07:62:5b:74:
         72:4a:04:06:d1:60:60:c7:78:5a:9c:fa:9f:41:d7:b9:ee:94:
         a5:fa:c4:d9:b4:86:97:4c:b5:ea:c0:99:86:1a:98:0e:a1:89:
         9d:22:9a:98:e8:64:31:2c:bb:8d:5c:17:1d:1a:77:24:6c:e4:
         8c:2a:14:d8:cd:e2:d2:f8:5c:25:e5:6f:06:c1:a4:65:57:23:
         cc:bb:e7:52:d0:47:5d:07:85:a3:ae:b0:a7:37:6d:7b:89:d1:
         14:60:2b:5f:d8:fb:97:7b:1f:0f:fe:bd:e9:a9:d4:50:64:1b:
         8f:7d:94:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----