Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143632.roa
File:                     AS143632.roa (raw, json)
Hash identifier:          87bFGPYRMKRhqlWNxVubuYKa86H7tcJaUjeSLEsOXjY=
Subject key identifier:   76:C1:F5:B9:9B:1C:03:ED:31:75:04:00:15:24:F3:CF:B8:DB:64:B2
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       31D4661ED3DB116A6F8BA518814EB14850562356
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143632.roa
Signing time:             Fri 22 May 2026 06:28:06 +0000
ROA not before:           Fri 22 May 2026 06:23:06 +0000
ROA not after:            Fri 21 May 2027 06:28:06 +0000
asID:                     143632
IP address blocks:        240a:a3d6::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d4:66:1e:d3:db:11:6a:6f:8b:a5:18:81:4e:b1:48:50:56:23:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:23:06 2026 GMT
            Not After : May 21 06:28:06 2027 GMT
        Subject: CN=76C1F5B99B1C03ED317504001524F3CFB8DB64B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7d:6e:57:9c:71:93:a7:2f:d7:99:20:f0:41:
                    0d:41:a3:8e:df:17:2c:01:c5:08:25:77:86:16:68:
                    0f:f1:cc:d6:5a:aa:48:60:d7:89:6e:7d:1e:00:ab:
                    74:f8:e1:0e:81:ac:7e:e0:1b:65:b6:bb:6f:93:41:
                    79:42:d7:eb:2b:b2:58:24:a3:d9:8b:24:12:18:65:
                    cc:fb:ad:77:d3:5d:64:af:c5:36:3d:7a:3b:65:34:
                    3b:ff:85:95:28:d3:5f:60:2a:0c:31:42:56:d7:a4:
                    eb:87:21:ae:0f:8d:81:df:70:53:78:08:ed:ca:5f:
                    8d:a9:60:3b:54:39:85:3e:43:5e:3d:8c:86:3a:0d:
                    5a:df:8a:1f:f0:76:7a:00:fa:ec:bd:ae:f4:9b:50:
                    6a:1e:e0:7d:f2:f6:f1:27:c5:ae:34:77:f7:ed:ff:
                    c2:2a:44:3d:a1:8a:04:df:af:2e:f7:06:86:00:5b:
                    44:1d:4f:3e:8b:f8:3c:ca:b5:6f:49:b6:3b:19:f9:
                    96:f7:c9:fa:93:62:4e:11:13:7f:ec:a9:24:73:4b:
                    06:ac:e3:27:77:86:9b:31:ce:1b:79:a0:f9:62:1c:
                    90:ac:a0:80:59:19:0f:c8:04:43:8c:4a:52:64:13:
                    82:d5:6c:bb:d3:bb:c4:6b:11:5b:60:e3:c9:ff:41:
                    44:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C1:F5:B9:9B:1C:03:ED:31:75:04:00:15:24:F3:CF:B8:DB:64:B2
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a3d6::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:f0:ca:df:ce:5a:20:dd:43:55:dc:e8:3c:df:21:35:be:34:
         6e:c0:51:c1:e5:d6:77:55:46:44:70:42:46:e8:fa:d4:4b:67:
         cc:d0:5e:40:fc:32:b5:22:d3:df:fd:7a:16:36:6a:37:ab:5a:
         c5:4e:7e:57:78:bd:8e:dd:d4:08:0c:59:f9:11:76:b3:44:61:
         41:17:9f:50:91:28:64:53:ea:6a:8d:95:6a:17:83:1b:51:f4:
         c6:b4:f8:dd:0b:58:bd:51:b6:4e:ad:e2:e0:bd:db:c5:45:a6:
         64:44:0d:d1:32:d3:42:8c:fe:21:f4:04:df:e0:9a:f3:d7:ce:
         f9:7d:2b:62:fe:cf:c8:3b:dd:bf:2b:62:15:ff:a5:7f:ba:1c:
         cc:42:ef:0f:cd:ff:ed:09:8b:e1:1e:fb:b1:ed:81:89:2d:7d:
         a3:66:7b:e5:df:0d:a9:82:e2:02:9d:c3:03:ef:8c:14:48:3e:
         e4:d0:4e:94:48:4c:f5:6c:36:9b:d4:dd:d4:7c:23:60:b8:92:
         bb:ed:9a:0d:e1:48:3d:12:7e:6e:b9:0a:88:e2:a9:34:57:2b:
         12:1e:ef:cc:d7:dc:34:31:ac:1d:b0:ba:18:82:4a:e2:c7:07:
         e0:fb:9a:2c:af:86:33:7a:c1:68:73:12:8c:a6:2b:21:d7:1c:
         1a:1e:be:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----