Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143636.roa
File:                     AS143636.roa (raw, json)
Hash identifier:          1v3Adrh40hCaaoEs8HAMzc9IDVE5vPCPn1wc1B01WNc=
Subject key identifier:   EF:DD:0F:71:E1:32:1A:A1:C3:A9:6B:52:4F:14:51:2D:D9:2D:23:32
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       383AD23D25F07942A94F7A1C59F60C923C51C66B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143636.roa
Signing time:             Fri 22 May 2026 01:50:13 +0000
ROA not before:           Fri 22 May 2026 01:45:13 +0000
ROA not after:            Fri 21 May 2027 01:50:13 +0000
asID:                     143636
IP address blocks:        240a:a3da::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:3a:d2:3d:25:f0:79:42:a9:4f:7a:1c:59:f6:0c:92:3c:51:c6:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:13 2026 GMT
            Not After : May 21 01:50:13 2027 GMT
        Subject: CN=EFDD0F71E1321AA1C3A96B524F14512DD92D2332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2c:13:f8:cf:26:0d:c0:86:27:14:4c:ba:26:
                    f8:67:1d:e9:1d:0f:52:74:1c:30:a5:03:a6:e8:7b:
                    64:0b:62:a0:91:4d:aa:a8:05:8f:a6:05:86:9e:a9:
                    de:0b:90:f6:52:44:02:b5:26:da:04:43:09:21:63:
                    6b:23:53:d1:db:7f:a9:28:d7:3b:86:1e:fb:ea:bd:
                    b1:67:a7:2a:3c:c0:b8:72:da:35:bb:9c:fb:19:06:
                    b1:c7:44:c4:86:40:2d:8b:48:c1:f3:b8:7b:54:4e:
                    fe:8f:a9:17:c5:91:52:68:3b:8e:42:15:f8:f3:29:
                    cd:d6:8d:f0:ea:84:d2:c9:b9:82:cf:20:fb:a1:76:
                    be:6e:96:68:9e:c6:b0:31:a6:e6:d7:57:36:0b:4e:
                    c2:21:b3:1f:2f:bc:d0:c8:66:53:bf:ab:ef:e5:a9:
                    ee:74:d5:85:9b:fe:06:fb:be:58:ff:ef:ad:14:cc:
                    b1:05:75:df:57:82:df:1f:c0:a2:79:6d:1e:97:8d:
                    59:fe:2a:e9:6d:58:46:55:3a:b4:d2:12:88:84:b2:
                    c9:35:de:b1:67:48:f3:bc:fe:e4:03:00:9f:7a:bf:
                    b7:f2:66:87:5a:18:5c:97:f3:c7:9a:1f:16:2c:ea:
                    4f:87:70:7a:b7:a1:ad:90:38:91:df:6f:3a:09:b6:
                    53:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DD:0F:71:E1:32:1A:A1:C3:A9:6B:52:4F:14:51:2D:D9:2D:23:32
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a3da::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:bf:3d:8e:8d:73:b9:15:bb:b2:9c:ab:a3:a9:05:da:89:05:
         d3:7c:2b:2c:4f:e0:eb:ab:94:2a:57:e2:cf:da:ba:f8:78:c4:
         f9:e8:39:3a:0a:2d:f0:12:01:01:ff:08:e3:7e:4b:14:36:03:
         6c:db:95:80:17:fb:26:9c:24:f3:82:c4:b8:14:a5:e2:54:f3:
         00:ce:f4:a0:58:97:05:84:c3:3e:4b:82:47:c9:69:01:03:21:
         de:c9:fe:89:c6:38:5e:ac:e7:e5:f1:77:06:56:a8:7c:25:16:
         80:b2:5e:ed:20:ed:84:64:d5:27:5f:91:c9:32:9f:08:1b:1c:
         e0:14:ed:d3:e7:a5:ec:3c:cf:0b:0a:57:84:fa:26:6d:1a:97:
         a6:87:d3:16:fb:95:44:86:32:c8:02:f1:6f:7f:12:01:41:7e:
         f4:b3:40:ce:ef:da:52:64:73:11:ca:db:01:ac:83:01:48:95:
         51:eb:52:6b:d3:c1:5e:d9:16:59:9a:90:25:ca:c1:a9:e3:56:
         86:18:27:38:e6:7e:12:df:35:ea:a4:5b:da:cb:78:b9:1d:1e:
         50:58:00:4e:8b:ab:e8:89:bb:f1:16:13:6f:ac:f0:0a:ea:76:
         8d:bd:0e:4a:11:17:09:82:13:cc:fa:fb:35:ee:f9:6b:a7:a7:
         11:81:5a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----