Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143771.roa
File:                     AS143771.roa (raw, json)
Hash identifier:          NLm+Va81cdDizAHYZzhJJVhzDJKo/rtr7uN13yKerGM=
Subject key identifier:   A6:53:36:7D:D6:63:FD:0C:BA:DB:4C:AB:88:BB:00:74:CC:61:A3:52
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5F1E40ABBED5D2C98DA38BCAB933870CC1ACE790
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143771.roa
Signing time:             Fri 22 May 2026 07:41:24 +0000
ROA not before:           Fri 22 May 2026 07:36:24 +0000
ROA not after:            Fri 21 May 2027 07:41:24 +0000
asID:                     143771
IP address blocks:        240a:a461::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:1e:40:ab:be:d5:d2:c9:8d:a3:8b:ca:b9:33:87:0c:c1:ac:e7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:36:24 2026 GMT
            Not After : May 21 07:41:24 2027 GMT
        Subject: CN=A653367DD663FD0CBADB4CAB88BB0074CC61A352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:92:24:3b:00:1e:31:0d:e8:4b:7a:1d:37:c5:
                    25:44:5b:8c:bc:12:ed:7d:d7:b6:d5:7e:42:ec:e5:
                    3e:97:3d:bd:39:16:db:3d:4e:cc:a6:ae:67:ec:4f:
                    86:a9:21:9d:1d:02:ba:17:76:9a:52:98:5c:5c:c2:
                    64:02:3f:80:e7:e3:47:3c:91:fd:89:78:99:bb:1e:
                    e4:56:d1:a6:54:77:3f:2c:1f:39:f3:f1:ae:53:0e:
                    a1:c3:79:86:aa:59:5e:21:b8:a5:56:ac:ef:7f:fe:
                    b4:02:30:22:7f:6a:7b:a0:3b:3e:09:45:c2:10:90:
                    0b:b5:e4:ee:89:8d:5f:b6:ab:22:e6:14:95:93:62:
                    43:49:f6:72:5e:6e:51:eb:75:a1:0d:e6:ff:4f:05:
                    98:f6:97:7c:e6:0e:01:ff:5b:83:0a:30:00:af:11:
                    c1:34:72:1b:4a:ca:0d:6f:6f:93:f9:76:c3:a4:f2:
                    df:94:a5:2a:d6:ee:88:42:f4:ec:b3:24:d9:88:7d:
                    35:4f:91:af:9f:0c:94:e3:e6:36:44:e4:98:90:31:
                    a0:39:d9:43:bf:75:ae:f1:bd:c8:1b:ce:97:84:0e:
                    ce:a4:28:1e:f7:08:52:ef:a2:20:7b:ee:7f:68:64:
                    e9:03:ab:07:76:4a:f1:f3:72:65:14:7f:99:ff:66:
                    13:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:53:36:7D:D6:63:FD:0C:BA:DB:4C:AB:88:BB:00:74:CC:61:A3:52
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143771.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a461::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:b9:c4:97:40:84:db:83:11:7b:8d:d8:81:ac:f3:97:53:2e:
         e5:2c:74:0b:4e:87:aa:3f:44:6d:01:71:17:a7:77:0f:a0:24:
         46:f5:f1:fa:35:a7:a9:ca:8d:cd:f8:4e:2f:28:2e:d7:07:b2:
         5c:2d:35:56:20:89:c9:db:b0:aa:25:65:16:ab:3a:b5:d7:61:
         c9:58:2e:dd:a6:80:3c:e4:c7:72:5c:ac:b7:a3:6c:ed:cd:e5:
         40:e6:e8:ca:9a:e9:51:6e:bf:8d:b3:19:c1:1c:df:58:9d:9f:
         c8:e0:73:2b:6a:88:64:ec:fd:67:ac:83:2f:56:a7:46:2f:29:
         a2:c9:08:95:48:7b:cf:8b:d2:ab:9e:3e:7c:84:2f:1d:6d:28:
         98:0b:2c:a8:93:57:82:c6:2d:12:87:fb:51:22:d2:c7:37:ca:
         aa:c2:8b:93:b7:f8:51:ba:df:4f:ff:00:df:61:f8:f2:60:05:
         36:c6:5d:ba:e0:18:40:68:20:11:60:1f:7f:b2:cb:0b:7f:2b:
         a4:4e:c4:5c:f8:f0:0f:49:c4:ad:8f:5e:78:18:65:17:51:7a:
         c5:c8:0a:0e:3a:92:4a:ab:9f:56:a5:38:cb:81:e5:d5:5c:46:
         d2:5c:78:a8:ae:01:0b:23:ae:79:70:d6:52:35:02:2d:44:74:
         30:09:59:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:30 2026 by rpki-client