Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143616.roa
File:                     AS143616.roa (raw, json)
Hash identifier:          8ShMRlNXo6xEOeqHd/m6XFvYAMIXVpoVqs80a4LTK2o=
Subject key identifier:   03:4A:C4:14:59:FE:DA:F5:65:5D:3A:A7:9D:BA:8F:B4:75:C0:56:96
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       780122ADA1FF1532EB1B777DACEB376CD859F647
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143616.roa
Signing time:             Fri 22 May 2026 01:50:36 +0000
ROA not before:           Fri 22 May 2026 01:45:36 +0000
ROA not after:            Fri 21 May 2027 01:50:36 +0000
asID:                     143616
IP address blocks:        240a:a3c6::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:01:22:ad:a1:ff:15:32:eb:1b:77:7d:ac:eb:37:6c:d8:59:f6:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:36 2026 GMT
            Not After : May 21 01:50:36 2027 GMT
        Subject: CN=034AC41459FEDAF5655D3AA79DBA8FB475C05696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3e:dc:58:c6:6b:e7:60:9d:2a:fb:da:7c:59:
                    49:7f:87:d5:06:d8:04:3d:24:77:45:0c:9c:ef:5e:
                    15:d9:bd:09:f3:44:ca:6e:c9:29:f1:17:18:fd:15:
                    43:10:42:28:97:b4:fa:87:1a:b2:f7:b7:5d:f7:d8:
                    22:73:ac:55:87:d6:1a:6b:a0:7f:8d:33:6a:43:f4:
                    9a:c5:f5:a7:19:3f:28:c5:89:73:2a:52:a8:94:12:
                    48:a8:81:5b:03:1b:52:de:ee:c3:ee:6f:33:2b:c9:
                    81:dd:26:62:95:1f:5d:5f:b9:a5:93:83:af:e7:57:
                    46:5c:c0:a3:4c:dd:90:f1:42:1d:38:d9:50:75:71:
                    a3:f8:47:fd:d5:cd:0d:97:2b:fd:73:19:da:b6:63:
                    d1:86:6e:8e:a2:6f:b6:a3:a6:da:25:ee:e4:30:93:
                    38:19:d7:69:35:f0:e2:9e:05:d6:2b:0c:65:d8:71:
                    c5:a9:fe:23:6d:86:be:a0:1b:a3:7f:2e:c1:bd:79:
                    3f:8b:57:da:7a:63:01:89:d9:19:fe:11:51:fa:c0:
                    86:27:27:6a:4d:f0:31:94:a7:a1:0f:08:52:8f:72:
                    c1:75:03:6a:7b:2b:6a:2a:94:cf:14:64:cb:f8:49:
                    e9:90:4c:6a:84:42:fa:f4:76:8e:bb:7e:ce:ed:a3:
                    c6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:4A:C4:14:59:FE:DA:F5:65:5D:3A:A7:9D:BA:8F:B4:75:C0:56:96
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143616.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a3c6::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:11:9e:e2:c7:14:dc:f3:2b:c0:85:4b:f0:e7:f9:72:e3:b7:
         a7:e3:7c:3a:1b:a2:00:a7:42:68:b1:98:b5:07:a6:aa:3c:61:
         54:9f:12:5b:a9:b1:cd:f9:c0:c4:62:76:da:6c:2e:d0:84:34:
         20:0d:b9:39:19:a5:56:d1:b7:6f:de:eb:8b:7f:23:ea:15:13:
         f5:0d:8e:e6:e8:29:ed:f2:ab:53:68:4c:c4:a7:c6:a6:c5:77:
         19:f8:f9:84:d0:17:a3:34:05:cd:4a:0e:32:e4:76:b5:df:ef:
         a2:ec:10:cf:94:71:3e:d1:d9:bc:e2:cf:02:b8:54:2a:c8:89:
         a8:96:df:cf:fe:9b:b9:51:9a:c1:23:99:19:c5:13:5f:e5:6a:
         c7:18:88:17:db:5e:aa:bf:12:ac:c7:c4:b4:54:ae:a3:41:a2:
         74:34:12:ca:20:5e:17:56:57:21:22:47:7c:db:e7:2b:24:9c:
         83:16:36:2a:a3:a9:f9:40:12:49:e0:06:20:cd:5c:a8:c1:46:
         09:eb:4a:90:46:dc:0c:aa:d9:4e:24:25:46:ce:73:ed:a1:aa:
         6f:b5:b5:18:73:42:ad:9d:1b:b1:d4:f4:5d:38:e2:d2:2b:d5:
         0e:d1:e6:86:5b:9f:48:d0:ed:c6:ae:79:49:2c:cd:e2:5e:84:
         08:60:83:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:19 2026 by rpki-client