Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143776.roa
File:                     AS143776.roa (raw, json)
Hash identifier:          W3J945T0PPq77Zg94LMNj95Kqbt+v7dFN1PwXzSjHug=
Subject key identifier:   CD:C3:7F:3D:57:39:40:93:B3:56:05:CE:CC:30:2F:D4:4E:45:9C:0A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3CEF09CB6BC57F0FB61D074BCB7FA393805B6C19
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143776.roa
Signing time:             Tue 26 May 2026 02:35:18 +0000
ROA not before:           Tue 26 May 2026 02:30:18 +0000
ROA not after:            Tue 25 May 2027 02:35:18 +0000
asID:                     143776
IP address blocks:        240a:a466::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ef:09:cb:6b:c5:7f:0f:b6:1d:07:4b:cb:7f:a3:93:80:5b:6c:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:30:18 2026 GMT
            Not After : May 25 02:35:18 2027 GMT
        Subject: CN=CDC37F3D57394093B35605CECC302FD44E459C0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:45:0e:8d:c1:30:ca:c0:bf:a3:93:af:dd:ef:
                    62:6d:37:29:04:a4:39:06:e0:fe:1c:29:e1:e6:45:
                    87:b2:65:d8:12:a4:50:7c:31:18:08:50:93:d8:9c:
                    55:79:3a:a4:eb:4d:34:bf:25:e7:15:b2:74:30:eb:
                    d0:ea:c9:c6:48:4b:30:c9:09:2a:2a:a9:e4:1a:de:
                    b2:6c:60:f2:78:e4:64:26:59:73:92:7b:25:1d:63:
                    94:99:9c:71:26:0d:71:7c:4b:70:63:4c:14:96:07:
                    ba:fc:34:c6:9f:5e:3e:93:94:fb:68:d8:30:ab:31:
                    07:dd:9d:f5:28:7f:02:ea:e2:50:f6:07:59:3a:ef:
                    7b:36:6c:12:a7:41:3d:a0:3e:76:2e:38:4f:9d:91:
                    70:83:16:c9:b2:23:09:f5:31:73:f2:b0:16:2c:1d:
                    b2:88:09:1e:68:7b:47:49:8d:a3:96:a4:05:73:73:
                    0c:d0:6a:e8:ee:e0:1c:bd:c8:15:f0:4e:4e:6b:83:
                    12:ee:51:31:95:04:6d:4c:e9:69:39:8d:30:fb:cd:
                    dc:3b:79:03:8a:9e:01:c8:67:07:a8:f6:57:7e:20:
                    82:62:4d:ef:86:4f:17:3f:a8:46:b0:be:d0:9e:10:
                    0f:f5:62:2a:82:92:4f:4b:83:a7:38:e4:32:96:e2:
                    42:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C3:7F:3D:57:39:40:93:B3:56:05:CE:CC:30:2F:D4:4E:45:9C:0A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143776.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a466::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:23:f7:f3:e2:f4:19:29:3a:fb:a6:d3:a0:29:33:8b:a6:bd:
         58:08:ff:d3:13:d4:12:f2:b3:ce:e6:d4:26:c5:45:55:83:80:
         c0:bb:5e:b6:c7:2b:51:ad:7a:c0:2c:c7:6e:c9:66:cf:05:ed:
         7f:5f:aa:67:e0:23:12:a4:da:5c:08:b9:c2:98:2e:34:45:d9:
         2d:a9:47:ce:83:dc:bd:51:7c:2c:b5:52:00:bf:11:1b:9c:d1:
         6c:31:ca:1b:38:24:3f:01:38:89:93:8a:44:0e:a8:7b:ff:c0:
         16:e6:e5:fc:ca:67:5b:eb:df:1e:c7:eb:64:78:9a:e8:0f:4b:
         28:9f:f9:53:a7:08:75:6f:15:d3:fe:22:01:ee:97:39:97:fc:
         37:86:50:4c:5f:f4:22:da:3b:f7:80:f0:37:8e:bf:d9:f9:1f:
         e8:e5:78:a2:c2:57:73:e0:c0:b5:28:02:7e:42:44:72:17:37:
         d0:19:f3:3d:a0:0a:fc:c3:e6:9d:7a:72:3e:36:5f:b6:17:a7:
         59:67:d8:fd:2b:68:c9:05:16:a5:62:a5:60:48:da:ed:4a:1d:
         e9:e5:44:cd:ff:91:5f:e7:38:49:6c:99:24:b6:fe:c7:d8:ce:
         0d:41:90:17:c7:76:a3:c6:9b:bf:3a:29:f3:93:18:cf:d3:bc:
         8d:db:2b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:11 2026 by rpki-client