Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143654.roa
File:                     AS143654.roa (raw, json)
Hash identifier:          hg0m+Z0GcetbequHZe2JLF4JFIZGQ8v4HNqfrVrYVpY=
Subject key identifier:   90:D0:58:A4:13:67:14:08:2F:82:B6:A9:CB:15:24:11:64:21:1A:7F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       08F3394258F8212487362DDD1A7970EAADE981D7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143654.roa
Signing time:             Mon 25 May 2026 06:48:46 +0000
ROA not before:           Mon 25 May 2026 06:43:46 +0000
ROA not after:            Mon 24 May 2027 06:48:46 +0000
asID:                     143654
IP address blocks:        240a:a3ec::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f3:39:42:58:f8:21:24:87:36:2d:dd:1a:79:70:ea:ad:e9:81:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:43:46 2026 GMT
            Not After : May 24 06:48:46 2027 GMT
        Subject: CN=90D058A4136714082F82B6A9CB15241164211A7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fb:70:cd:b3:c8:36:8f:ca:f3:b9:85:3f:fa:
                    71:4b:7c:1f:2b:20:bf:8a:1e:56:5e:3c:a3:8a:ab:
                    35:d4:ad:1d:58:59:65:3b:f7:ae:6a:19:d6:81:2f:
                    e4:c8:8a:60:04:1c:15:96:44:02:8d:76:b7:1e:4a:
                    c7:d1:f1:b4:45:2f:8a:ca:cd:47:2d:66:2a:83:f4:
                    8b:7f:af:bb:2d:71:24:54:7e:33:b5:83:92:68:d7:
                    30:0b:22:2c:ce:0b:61:95:a3:cc:c3:e0:84:af:c9:
                    4a:ea:fd:4f:d7:71:ad:42:16:3f:00:59:d3:85:9f:
                    16:cb:83:03:55:a5:e7:bd:78:51:58:e4:38:11:82:
                    de:02:cd:f7:54:37:e2:96:43:84:9f:98:81:df:94:
                    8a:6f:24:91:72:46:54:96:8c:eb:4e:17:32:da:74:
                    8e:23:18:bf:e1:45:b2:8f:30:4d:fe:da:e5:ff:0e:
                    e2:d5:e4:73:79:35:45:54:ba:48:57:85:e2:99:bc:
                    57:81:9f:b2:ec:c4:3e:d6:2d:17:b1:0c:0b:ec:35:
                    64:c1:64:2f:0b:c5:ed:96:1f:a6:bd:f1:be:a5:7e:
                    cf:56:f5:2a:10:86:ea:ff:61:a9:a3:1f:0c:6c:ed:
                    5a:02:18:03:cf:06:e7:6f:ab:d3:ff:00:ec:34:8f:
                    de:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D0:58:A4:13:67:14:08:2F:82:B6:A9:CB:15:24:11:64:21:1A:7F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143654.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a3ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:38:78:ea:0e:7b:78:89:cb:04:be:b1:14:79:91:51:39:f2:
         39:83:f9:c7:a4:2d:cd:70:1a:67:c8:2e:06:57:83:9a:1b:c3:
         19:82:6c:f2:da:05:50:b8:3f:c0:79:a8:11:00:d5:7b:b8:bb:
         f4:92:6b:1b:fc:61:ef:d7:40:b4:88:91:63:d8:2f:f9:d5:59:
         18:ea:ca:ef:87:a9:ee:8e:91:38:10:4e:bb:4c:29:34:05:ee:
         8e:62:e1:66:68:21:4b:45:f9:0b:0d:b2:8b:67:96:a9:c5:ed:
         f6:f7:68:12:e5:08:a8:17:89:32:a0:17:15:eb:a9:ea:c2:a3:
         68:b3:03:97:6b:6f:35:bb:2e:21:71:1c:6c:21:ff:75:50:0f:
         2a:c6:79:fd:7a:07:31:c6:41:b5:f2:dd:7f:18:fd:48:5c:49:
         28:0d:5b:09:66:01:8d:2b:b9:6c:5c:14:83:7b:25:53:e6:c9:
         e7:3f:70:bb:92:f5:1a:29:22:11:45:72:b0:f3:6b:3b:99:83:
         cf:57:7b:3e:b6:b6:2b:66:c8:72:77:45:c3:81:b8:ca:3b:24:
         83:b8:f2:2f:cc:98:c6:21:5d:f6:a0:73:63:fe:94:75:ca:39:
         f5:a5:2b:b2:3a:92:9f:7f:fc:0f:df:1b:20:a0:6d:8b:59:fc:
         ce:49:77:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----