Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143747.roa
File:                     AS143747.roa (raw, json)
Hash identifier:          mMjnUv15muRQ60z0Y/+UgFIzXIjPyLREr/mWsVo3oVY=
Subject key identifier:   6C:E4:F8:97:8C:BA:67:3C:73:86:2A:D2:D5:A6:17:B5:B7:CF:9F:E7
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       275A94D70D80DF1E7A19F93F8EFEA52EDA54DA9A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143747.roa
Signing time:             Fri 22 May 2026 06:58:35 +0000
ROA not before:           Fri 22 May 2026 06:53:35 +0000
ROA not after:            Fri 21 May 2027 06:58:35 +0000
asID:                     143747
IP address blocks:        240a:a449::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:5a:94:d7:0d:80:df:1e:7a:19:f9:3f:8e:fe:a5:2e:da:54:da:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:35 2026 GMT
            Not After : May 21 06:58:35 2027 GMT
        Subject: CN=6CE4F8978CBA673C73862AD2D5A617B5B7CF9FE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6f:89:b2:5b:a5:87:c6:f0:5e:aa:9d:19:95:
                    c7:01:6d:ae:8d:74:35:c1:17:65:30:89:7b:1b:99:
                    d2:24:e7:e7:bd:95:44:69:c6:a3:e2:de:83:ef:3d:
                    2d:15:d7:4d:69:a1:9b:ba:f2:f1:97:cb:ac:29:3b:
                    5f:b5:bd:b7:dd:43:78:e3:b1:71:2f:48:b1:df:98:
                    31:08:73:39:f9:29:eb:5a:26:af:02:73:4f:1a:66:
                    7b:71:44:52:8c:22:6d:32:58:5e:c2:9f:e2:4c:89:
                    c7:66:08:fa:47:30:6c:6a:55:4f:a9:f6:a2:b1:82:
                    b6:f3:f6:45:a5:3c:5f:c7:dc:a5:81:87:20:60:a3:
                    4b:99:73:8d:c1:7e:c7:74:3d:b9:bf:2e:20:c7:19:
                    70:6a:bf:4d:9a:05:6b:a0:bd:33:90:f7:63:9c:6a:
                    18:e3:ec:77:b6:4a:e5:43:ef:c8:fd:cf:80:b2:4a:
                    60:c6:8a:3b:87:6a:36:6a:27:03:01:83:9f:18:6e:
                    39:95:9d:72:3f:a3:17:1c:4f:85:67:c4:21:bf:fd:
                    c4:c7:d3:9e:b3:ea:7a:b0:0f:01:04:5e:33:30:fc:
                    cf:fd:e0:84:ae:2a:79:5f:8e:c7:c5:cb:38:65:33:
                    5c:55:e0:db:6f:49:53:50:10:62:59:fe:56:ec:c5:
                    95:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E4:F8:97:8C:BA:67:3C:73:86:2A:D2:D5:A6:17:B5:B7:CF:9F:E7
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143747.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a449::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:da:31:9c:26:3f:07:f4:18:b7:9b:07:67:9d:a6:24:a2:77:
         9c:6c:2a:e8:4f:db:33:e0:95:10:81:6d:a2:a9:a1:5a:30:f3:
         6d:6b:de:cf:76:8f:98:c0:9d:87:e0:f6:1b:48:d2:02:98:16:
         c7:2f:70:84:27:9b:fd:6f:70:4a:10:97:d4:07:31:69:d4:92:
         a9:57:18:00:cb:a8:70:fe:30:d7:4f:18:0d:ac:bc:b9:71:6d:
         e2:26:54:7a:b3:00:86:25:4a:5e:dd:4b:fb:1c:22:98:75:9e:
         5c:e6:7e:60:03:7d:01:7f:29:7e:74:b8:59:82:d7:fe:52:10:
         f3:b5:5e:ec:42:1a:6f:41:cc:8f:8c:49:09:eb:bd:9b:6f:33:
         8f:42:23:5d:a0:13:62:ee:03:b3:c4:d1:07:d0:92:46:e7:2b:
         73:63:32:f0:9a:9a:f3:4d:88:87:c7:47:a8:94:62:de:6c:67:
         f9:60:5d:84:67:97:80:c5:bb:f4:d5:74:a6:b1:34:3b:4c:ea:
         57:12:d6:34:10:0c:52:7f:2d:5d:a7:aa:d1:e7:13:2d:79:64:
         8e:93:be:d5:0e:c5:72:cc:60:1d:00:36:77:ae:d9:22:4b:b6:
         de:8f:ac:90:27:26:6f:48:12:6b:1b:92:76:14:d4:55:e1:5d:
         2f:97:a4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----