Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143811.roa
File:                     AS143811.roa (raw, json)
Hash identifier:          frA5DyRgmLcw7hgixm9wGdmz3SJZ5vXWl3uiIzTX2uA=
Subject key identifier:   F6:30:6B:62:69:DE:E2:9A:16:89:A3:D3:52:3C:C1:85:7F:ED:D2:4D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       714CEB8236CFA3EDA04F208DEB6BE8E1FEDB9596
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143811.roa
Signing time:             Mon 25 May 2026 03:19:08 +0000
ROA not before:           Mon 25 May 2026 03:14:08 +0000
ROA not after:            Mon 24 May 2027 03:19:08 +0000
asID:                     143811
IP address blocks:        240a:a489::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:4c:eb:82:36:cf:a3:ed:a0:4f:20:8d:eb:6b:e8:e1:fe:db:95:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:08 2026 GMT
            Not After : May 24 03:19:08 2027 GMT
        Subject: CN=F6306B6269DEE29A1689A3D3523CC1857FEDD24D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f5:74:43:97:30:09:5f:6a:b7:b7:74:91:68:
                    26:c5:63:52:ac:42:c8:08:96:0d:18:fc:e1:d5:1a:
                    62:7e:9c:8f:d5:65:07:86:67:39:e9:f2:d4:4d:a6:
                    9d:30:f5:9a:e4:5a:cd:a9:77:12:cf:9b:32:8f:5c:
                    7f:f9:1d:84:57:27:7f:f6:b8:cf:c6:bb:05:83:c6:
                    8c:14:d9:92:f4:36:c7:84:93:8e:c2:bf:30:8e:85:
                    f1:19:3c:a3:d2:8b:cf:72:ff:3c:1a:90:d7:3e:63:
                    41:be:5b:ec:99:8a:4d:ab:3d:52:88:c8:f8:b8:be:
                    a1:83:26:e6:5a:a3:37:93:26:b0:69:83:c6:4a:ba:
                    a2:6b:1f:8d:78:fd:28:04:a4:52:f7:49:8f:35:a3:
                    d5:9c:25:c6:b9:55:2f:d4:14:fb:05:14:b2:ee:7f:
                    d5:a6:3d:bf:bd:97:2f:ab:bc:4f:ee:20:a3:93:d4:
                    5e:86:83:12:b5:93:28:03:d0:01:f3:4c:a1:87:b1:
                    de:9c:d7:4f:d9:a8:9b:c5:20:41:ff:52:76:61:0b:
                    84:4d:6e:8e:3a:03:34:c0:02:b8:1e:d7:9e:c7:5a:
                    5e:85:b7:99:36:0e:8b:aa:69:0c:38:32:65:76:49:
                    e8:63:90:86:23:04:f2:60:f1:19:fe:84:a0:65:4c:
                    ab:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:30:6B:62:69:DE:E2:9A:16:89:A3:D3:52:3C:C1:85:7F:ED:D2:4D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143811.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a489::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:fb:8c:62:a9:27:2f:2b:fe:2b:07:dd:9f:2a:9f:62:28:90:
         65:17:32:41:f4:ce:fe:49:8c:f6:5a:20:dd:38:f9:a8:b0:ba:
         1e:a7:b3:27:43:8f:01:04:61:b9:70:63:58:6f:25:34:1a:a7:
         a0:3b:ae:49:0d:0a:32:c3:84:af:ad:45:bf:26:85:7e:cf:0c:
         17:44:21:c6:f4:54:8f:06:cf:58:31:cc:a8:14:ce:f1:5e:97:
         98:79:a6:0d:73:6d:a1:c0:ed:2f:c7:c7:d7:2a:43:21:85:2f:
         77:90:42:49:29:82:f1:96:99:8b:ba:14:05:d5:66:63:cd:77:
         cc:8a:57:c3:61:7f:38:33:30:16:f3:57:52:ce:f5:1e:69:d2:
         e2:2d:1a:e2:81:11:be:5b:fa:b9:97:97:2c:b8:b5:a9:a0:a2:
         e0:42:9d:83:df:46:d1:17:80:48:51:fc:8d:6a:55:76:0b:3c:
         2f:2a:65:4f:bc:bf:b6:2f:2a:a5:c9:23:a0:8c:f6:cf:98:fc:
         ef:ba:b8:73:bc:ec:19:00:b5:06:9f:95:73:e5:bd:4c:de:e8:
         48:6e:d4:16:d8:4c:e5:4d:65:7e:f4:8a:f3:f9:5b:31:83:ab:
         7c:e1:d0:ef:e4:ab:5f:2f:18:f1:1b:6c:69:56:91:e6:b1:c1:
         15:73:de:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----