Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143619.roa
File:                     AS143619.roa (raw, json)
Hash identifier:          j/KvlxSzpSXn/oC6QPF0HzUpMIdj0HEfIFxuPBrsD34=
Subject key identifier:   86:5E:37:D8:ED:FA:EB:D4:40:E4:2E:3D:50:1F:32:9F:8C:0C:82:C0
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       55A0291A1908F6466D074BA2A6C42039518E50AD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143619.roa
Signing time:             Tue 26 May 2026 06:12:55 +0000
ROA not before:           Tue 26 May 2026 06:07:55 +0000
ROA not after:            Tue 25 May 2027 06:12:55 +0000
asID:                     143619
IP address blocks:        240a:a3c9::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a0:29:1a:19:08:f6:46:6d:07:4b:a2:a6:c4:20:39:51:8e:50:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:07:55 2026 GMT
            Not After : May 25 06:12:55 2027 GMT
        Subject: CN=865E37D8EDFAEBD440E42E3D501F329F8C0C82C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:16:74:23:54:81:b8:02:95:1a:d3:ad:da:74:
                    6b:2d:29:19:36:80:ff:65:49:d7:89:91:53:2f:dc:
                    d8:66:a0:7d:db:20:1b:5e:b3:bf:21:3e:7b:d8:41:
                    b4:01:bf:e2:5d:ad:90:39:f4:21:74:fd:b8:89:cb:
                    90:b0:cb:bf:17:e7:0a:ae:52:86:5c:48:a0:a0:48:
                    1f:9b:9b:c2:12:5f:90:cb:57:1b:c1:9b:ef:da:99:
                    0b:28:fd:0d:9d:01:09:90:36:55:7b:bb:a7:ec:08:
                    ba:2d:47:9c:66:55:91:07:79:4d:ed:4d:cd:7c:a6:
                    f1:16:a3:18:a9:02:e6:fe:e9:b5:18:df:2e:c4:4d:
                    b3:22:30:85:c6:0c:4f:c0:17:54:90:02:d3:c3:fd:
                    3e:6c:72:fa:68:7e:ad:2b:ad:93:ee:91:c9:8e:f5:
                    25:6c:25:bc:97:a3:69:d0:aa:6f:ed:10:16:4d:33:
                    dc:7e:39:c9:cb:17:32:3f:85:e8:5b:44:fd:f7:c6:
                    0f:6d:57:91:ec:2d:78:9c:a5:d5:a2:f9:53:f1:92:
                    72:2c:2c:fb:93:5b:c2:26:97:7d:60:41:4e:20:4b:
                    fb:f0:16:fa:58:af:43:84:7e:c9:11:8e:e0:db:ea:
                    33:66:e7:c0:b1:c8:9a:3d:1d:80:40:1c:e7:71:c8:
                    e3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:5E:37:D8:ED:FA:EB:D4:40:E4:2E:3D:50:1F:32:9F:8C:0C:82:C0
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143619.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a3c9::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:1a:0d:99:c2:95:3d:98:cb:d7:53:bc:8f:c5:77:08:f1:86:
         ea:7d:d2:20:20:39:e3:3e:a1:4e:07:2d:31:8d:39:a5:fd:94:
         f9:2e:91:b4:2b:5e:06:e2:99:3d:49:a6:01:09:38:fe:05:63:
         13:f0:34:0c:32:0f:cf:b1:52:d9:13:17:fd:36:a9:20:ea:1b:
         ab:28:8a:18:b3:53:da:bc:e2:5a:00:12:bc:27:b3:9f:d7:5a:
         80:73:b6:fb:64:3b:57:05:64:15:e4:c6:9f:93:9d:df:33:8e:
         cc:37:c9:92:0f:b4:dc:55:ee:ac:fe:9e:9c:e6:c4:b7:06:08:
         d5:fa:31:5c:09:1b:08:2e:a0:58:7f:55:9d:26:ab:26:dc:56:
         e7:49:ea:58:ce:cf:b5:4e:ca:e4:33:cd:07:60:12:09:52:f0:
         a5:58:cc:93:8c:d6:c5:e1:d9:a5:5b:3e:69:d0:5e:76:23:f6:
         f7:37:66:dd:85:42:17:6f:5b:ee:db:52:d3:36:3f:d1:08:9f:
         4a:e7:7b:b6:42:e5:20:75:56:7d:26:60:5a:ed:73:db:a3:c6:
         e1:20:e9:7c:ec:0e:77:26:0b:96:27:50:75:46:b7:52:4f:1d:
         7a:72:b8:eb:a0:d9:67:94:55:40:0f:e2:96:dd:9f:df:d7:ff:
         76:22:34:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----