Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143613.roa
File:                     AS143613.roa (raw, json)
Hash identifier:          91uLZn5u2/RRCTcaaqVnowbBSO2vyV1v7UjCOWn1j/8=
Subject key identifier:   C0:50:EA:AE:F4:7D:E5:33:BD:52:D8:DC:2E:5C:44:CF:D8:61:47:8F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0122508F2B39C7AFE15A8D9036FD13F007A0D888
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143613.roa
Signing time:             Tue 26 May 2026 02:34:53 +0000
ROA not before:           Tue 26 May 2026 02:29:53 +0000
ROA not after:            Tue 25 May 2027 02:34:53 +0000
asID:                     143613
IP address blocks:        240a:a3c3::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:22:50:8f:2b:39:c7:af:e1:5a:8d:90:36:fd:13:f0:07:a0:d8:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:29:53 2026 GMT
            Not After : May 25 02:34:53 2027 GMT
        Subject: CN=C050EAAEF47DE533BD52D8DC2E5C44CFD861478F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4e:29:a6:31:f0:bf:1f:f5:8c:56:7d:fe:47:
                    52:a9:60:be:b9:8d:e5:1d:63:53:1e:f5:89:59:00:
                    7a:7b:5a:b6:7e:5a:67:21:ad:3a:d8:79:37:17:98:
                    d4:fc:a0:5f:88:35:dc:fe:d1:67:22:b5:05:17:2e:
                    cb:32:e8:4b:3e:d5:f8:47:64:d1:4a:98:b1:11:20:
                    e0:3a:72:79:3c:42:15:ed:5b:da:0d:50:a1:64:6d:
                    44:d6:3b:fe:54:97:6d:e0:fe:fb:ab:94:b5:d9:e5:
                    92:33:bd:03:ea:40:a2:4e:79:70:48:31:9d:f9:f1:
                    60:b3:28:7c:f7:69:7e:6c:55:9a:c6:bd:92:d6:83:
                    59:1a:71:27:37:56:01:8b:b3:0a:8b:36:51:e3:99:
                    4b:d2:e9:db:56:9e:ba:6f:f4:b2:51:0b:c7:de:0e:
                    0b:a0:68:bc:7d:3b:e5:01:47:45:e2:db:c0:a2:ae:
                    99:f4:e4:c8:3b:c7:13:e3:c5:84:32:2e:15:8e:5d:
                    79:0c:17:ea:6b:0a:94:6a:36:a5:88:af:34:ea:be:
                    9d:cd:27:cb:7b:5b:ff:3a:4a:83:aa:59:bf:16:5f:
                    a1:67:21:a9:c3:ca:a5:e1:89:b1:a7:58:05:ea:e4:
                    9a:15:ce:d3:37:26:6b:6d:90:f9:05:30:d1:4f:37:
                    05:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:50:EA:AE:F4:7D:E5:33:BD:52:D8:DC:2E:5C:44:CF:D8:61:47:8F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143613.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a3c3::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:ea:8a:cb:c9:08:4b:4a:f5:5a:4e:a9:89:72:f7:4a:f7:7b:
         dc:4c:6b:05:e2:ac:56:37:0e:9a:9a:4a:cb:ac:19:a5:ae:6f:
         69:d8:57:8b:a9:1a:d9:91:c2:20:7b:be:34:d3:fb:d7:9a:0b:
         62:3f:48:8a:95:e4:00:ca:6f:d1:f7:59:2a:6c:84:50:3c:b3:
         ac:4f:a9:39:1b:a0:a7:c1:6e:d3:3f:62:72:5a:4f:51:f9:81:
         f4:75:80:75:a4:e1:63:d6:98:60:80:2e:0a:cc:96:9d:93:42:
         c2:80:82:1d:b9:11:02:d3:12:56:29:35:74:43:38:88:fc:51:
         fb:c8:4b:17:7d:cc:75:95:d7:ab:0c:ab:d7:26:e8:ba:d4:44:
         d7:28:c8:a2:d2:dc:95:07:22:2e:a9:2d:f2:7d:8b:a3:c2:54:
         f3:f6:ea:f2:ae:e5:33:ff:6b:02:6e:8f:b4:f8:59:e7:e8:d5:
         46:ce:98:ef:a8:e1:9d:7b:50:11:3e:c0:20:4e:35:5a:f2:08:
         f5:39:93:28:19:1b:94:34:bc:7a:b6:98:43:33:58:a4:6b:00:
         3d:89:f5:18:9d:36:50:2b:3f:ed:7b:22:01:97:85:8c:7d:0d:
         d3:b1:0f:8a:00:8b:3c:cf:eb:1c:44:f0:d1:59:91:03:42:fb:
         60:58:aa:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----