Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143804.roa
File:                     AS143804.roa (raw, json)
Hash identifier:          1+0COTpcvNm0DzJYdXYnb9h4oPg+YrUh24EdNfdXD0Y=
Subject key identifier:   D6:D5:64:5C:B7:0C:E2:0B:8B:8F:85:57:31:AF:DC:08:F1:DC:92:F0
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3230A53EA2292F4F4EBED41E1D8670D2A3F77D58
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143804.roa
Signing time:             Fri 22 May 2026 04:26:49 +0000
ROA not before:           Fri 22 May 2026 04:21:49 +0000
ROA not after:            Fri 21 May 2027 04:26:49 +0000
asID:                     143804
IP address blocks:        240a:a482::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:30:a5:3e:a2:29:2f:4f:4e:be:d4:1e:1d:86:70:d2:a3:f7:7d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:21:49 2026 GMT
            Not After : May 21 04:26:49 2027 GMT
        Subject: CN=D6D5645CB70CE20B8B8F855731AFDC08F1DC92F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:01:55:ea:35:75:ee:a4:b4:76:18:6a:e8:9d:
                    bb:59:23:ca:55:2d:17:db:4b:c7:c1:cd:99:72:92:
                    8d:f5:03:6e:8b:d7:71:1a:53:96:86:9d:b8:88:cc:
                    3b:8f:78:f4:00:39:49:c1:71:24:4e:5b:ea:67:61:
                    75:bf:14:78:64:f2:cb:51:46:e6:c5:e7:ff:45:ae:
                    b6:3e:c2:c6:50:f8:d3:d2:f0:f9:a4:78:75:4f:fb:
                    05:e3:e7:21:9f:d5:81:17:31:3e:74:ce:5a:45:8f:
                    e1:19:54:5b:53:ce:e2:61:a2:41:20:df:42:14:94:
                    48:4c:11:e2:6e:c8:d5:a5:36:5e:8a:bf:11:3e:1f:
                    bb:59:a8:c1:52:9f:57:1b:e9:06:3f:eb:8f:08:38:
                    21:68:94:52:ca:1e:91:ca:b1:b4:97:77:26:d5:74:
                    9a:e6:6f:d2:86:2e:65:3b:fa:a9:c8:5e:5f:67:fd:
                    7f:59:9f:75:63:63:be:e9:9e:3e:76:63:95:9d:f8:
                    dd:e4:4b:35:18:d4:f4:54:a4:7a:9e:5f:ba:a8:74:
                    c1:0f:05:0d:a0:41:35:15:5a:5c:1f:2d:1b:30:db:
                    07:c2:e8:e8:f6:ea:4a:19:e1:c9:bc:4a:53:65:16:
                    42:4e:f6:7f:7f:69:35:4e:f0:68:0e:d5:b0:d8:c5:
                    9e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D5:64:5C:B7:0C:E2:0B:8B:8F:85:57:31:AF:DC:08:F1:DC:92:F0
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143804.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a482::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:a3:e7:57:3a:72:2b:0e:aa:fd:f8:bd:80:f9:03:df:bc:5b:
         a7:4e:9d:fe:4f:ab:b7:48:e6:d3:2d:e5:44:de:3d:7a:10:40:
         79:7c:51:43:1b:6d:f3:78:7b:1e:4f:d0:7b:42:b7:e3:91:16:
         06:ac:2f:03:57:c7:c6:d9:57:f7:b6:92:60:be:2b:f7:e3:f8:
         aa:8d:b9:f5:f7:04:09:a7:e8:25:f0:76:d0:4a:a0:16:09:23:
         66:2f:bb:1b:49:23:61:58:77:da:dc:49:55:ad:e7:9a:b0:cf:
         42:0f:13:ec:f7:b3:52:5a:35:f8:e0:a7:6f:2f:42:9a:a1:0f:
         e1:41:ed:b9:38:d1:67:df:ec:f3:17:6d:af:6f:1b:35:0c:b0:
         dd:05:98:64:7a:ad:67:9d:81:d2:ab:a3:f1:01:4e:ec:b0:27:
         fd:a2:fd:4e:13:8b:f1:cb:fd:e2:7c:a1:ab:3a:bf:c0:e6:2c:
         6a:ac:80:de:31:9b:dd:5f:b1:5e:72:83:74:7e:ac:98:38:25:
         f7:a3:c6:38:9f:a5:6f:d9:9f:cf:82:6f:73:f6:22:b8:3c:b2:
         f8:ea:19:f3:aa:1e:7d:7c:f6:76:e2:84:56:75:19:1b:79:78:
         37:53:29:9d:9d:e8:42:43:a5:09:e1:44:3b:a4:26:45:7b:f7:
         e7:6b:f3:54
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUMjClPqIpL09OvtQeHYZw0qP3fVgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDIxNDlaFw0yNzA1MjEwNDI2NDlaMDMxMTAvBgNV
BAMTKEQ2RDU2NDVDQjcwQ0UyMEI4QjhGODU1NzMxQUZEQzA4RjFEQzkyRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpAVXqNXXupLR2GGronbtZI8pV
LRfbS8fBzZlyko31A26L13EaU5aGnbiIzDuPePQAOUnBcSROW+pnYXW/FHhk8stR
RubF5/9FrrY+wsZQ+NPS8PmkeHVP+wXj5yGf1YEXMT50zlpFj+EZVFtTzuJhokEg
30IUlEhMEeJuyNWlNl6KvxE+H7tZqMFSn1cb6QY/648IOCFolFLKHpHKsbSXdybV
dJrmb9KGLmU7+qnIXl9n/X9Zn3VjY77pnj52Y5Wd+N3kSzUY1PRUpHqeX7qodMEP
BQ2gQTUVWlwfLRsw2wfC6Oj26koZ4cm8SlNlFkJO9n9/aTVO8GgO1bDYxZ6jAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU1tVkXLcM4guLj4VXMa/cCPHckvAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzODA0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqkgjANBgkqhkiG9w0BAQsFAAOCAQEANqPn
VzpyKw6q/fi9gPkD37xbp06d/k+rt0jm0y3lRN49ehBAeXxRQxtt83h7Hk/Qe0K3
45EWBqwvA1fHxtlX97aSYL4r9+P4qo259fcECafoJfB20EqgFgkjZi+7G0kjYVh3
2txJVa3nmrDPQg8T7PezUlo1+OCnby9CmqEP4UHtuTjRZ9/s8xdtr28bNQyw3QWY
ZHqtZ52B0quj8QFO7LAn/aL9ThOL8cv94nyhqzq/wOYsaqyA3jGb3V+xXnKDdH6s
mDgl96PGOJ+lb9mfz4Jvc/YiuDyy+OoZ86oefXz2duKEVnUZG3l4N1MpnZ3oQkOl
CeFEO6QmRXv352vzVA==
-----END CERTIFICATE-----