Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143774.roa
File:                     AS143774.roa (raw, json)
Hash identifier:          sWGoSPyMeO9DcPUifizPtFD7G5pp/M6z9zuGs/nkmN4=
Subject key identifier:   AE:86:C3:D7:F7:0E:84:36:A7:56:C9:71:3F:DE:85:C9:22:32:35:B2
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       220A2914CEDA5716940E0790D850061E740F3617
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143774.roa
Signing time:             Fri 22 May 2026 01:50:26 +0000
ROA not before:           Fri 22 May 2026 01:45:26 +0000
ROA not after:            Fri 21 May 2027 01:50:26 +0000
asID:                     143774
IP address blocks:        240a:a464::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:0a:29:14:ce:da:57:16:94:0e:07:90:d8:50:06:1e:74:0f:36:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:26 2026 GMT
            Not After : May 21 01:50:26 2027 GMT
        Subject: CN=AE86C3D7F70E8436A756C9713FDE85C9223235B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ad:a1:c2:88:70:d3:91:48:87:5d:96:0a:fc:
                    64:ed:77:16:b9:90:ec:5f:5f:f0:a9:77:e3:8a:92:
                    97:93:64:cb:a3:8c:44:9f:7f:aa:43:6f:1d:4a:45:
                    f4:0b:ee:33:4a:b8:09:6a:e2:6c:7b:30:81:58:30:
                    d4:30:70:92:a3:52:68:81:88:a9:4c:c5:53:e5:d9:
                    9e:05:c2:97:05:87:39:f7:a3:bd:03:9c:8f:eb:95:
                    f5:67:5a:b2:b4:8e:eb:8f:89:ef:53:dc:9e:38:85:
                    3c:a5:90:81:14:26:ec:66:1a:ae:a6:40:44:de:21:
                    79:53:70:b0:36:5a:f7:90:83:52:30:dd:8a:42:3b:
                    c2:70:2e:db:fd:67:3e:65:6e:c9:93:5b:a6:d9:db:
                    1f:ec:02:6b:77:88:95:33:62:e4:ca:98:15:27:57:
                    91:8a:09:d6:ba:a4:8c:9e:9b:30:31:0f:ef:b6:b3:
                    e5:0a:df:89:24:e0:16:2a:8b:34:b6:ce:15:d1:08:
                    2a:0b:3e:d1:ea:dd:a2:86:eb:95:94:96:77:52:9c:
                    53:61:84:ac:2c:49:0d:01:9d:6f:79:22:c6:a0:6b:
                    3a:a7:16:21:0a:52:93:71:25:04:ae:64:12:f3:21:
                    eb:54:a5:82:84:e1:fe:e4:0f:67:b7:52:ef:30:67:
                    70:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:86:C3:D7:F7:0E:84:36:A7:56:C9:71:3F:DE:85:C9:22:32:35:B2
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143774.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a464::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:e9:7a:55:6c:06:ae:39:b7:2c:d1:43:d8:7f:13:04:87:f0:
         0f:f1:4b:3e:f0:33:7d:e2:24:f8:2c:2d:af:72:c9:f5:b5:65:
         0d:e8:13:62:6e:05:b7:1f:54:31:16:23:81:36:9e:96:3e:bd:
         97:85:7a:86:ed:5c:2f:a6:0e:ea:fe:ea:52:3a:56:01:5b:bf:
         4d:e0:21:82:2e:3a:89:5d:7a:73:f3:80:0f:c7:ad:37:e1:8e:
         c2:57:d2:2f:b0:4d:94:ee:20:6d:6a:20:6a:b5:ea:d0:be:7b:
         06:e1:7e:3e:2b:cf:a3:d3:f1:a0:69:22:d5:37:73:c3:fe:db:
         aa:3c:46:16:d9:d5:6f:06:97:8b:72:f2:92:ad:2f:b2:f0:72:
         dd:ec:80:26:0a:c5:7b:ff:a8:39:30:6c:96:6e:f5:b8:a1:ec:
         46:78:d9:56:6d:ce:21:30:a4:e1:7d:72:b1:0c:b9:5c:c5:f9:
         81:15:c1:30:84:c1:3c:b6:bb:f8:aa:7e:94:4c:88:12:48:4d:
         15:aa:e7:eb:33:06:57:fd:f4:3b:33:5f:17:57:52:b5:36:6b:
         f4:31:66:a7:d5:4d:3e:81:fb:76:30:36:f8:ce:35:9c:7f:1c:
         00:d6:19:51:ba:cb:fe:c7:6a:28:45:56:7a:77:d5:bc:47:17:
         94:28:3f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:49 2026 by rpki-client