Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143829.roa
File:                     AS143829.roa (raw, json)
Hash identifier:          ujdQaZo+eupAPRQDRI9Ax4Aj/iuv5/GvsaAcKx4f0ss=
Subject key identifier:   99:27:D5:D3:B3:C1:73:C3:76:E1:DF:C3:B9:5A:B6:B4:A2:A8:EE:51
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1F04DC0D595F53B2CC23518F79A9CBBDBF3F3E23
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143829.roa
Signing time:             Fri 22 May 2026 06:27:36 +0000
ROA not before:           Fri 22 May 2026 06:22:36 +0000
ROA not after:            Fri 21 May 2027 06:27:36 +0000
asID:                     143829
IP address blocks:        240a:a49b::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:04:dc:0d:59:5f:53:b2:cc:23:51:8f:79:a9:cb:bd:bf:3f:3e:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:22:36 2026 GMT
            Not After : May 21 06:27:36 2027 GMT
        Subject: CN=9927D5D3B3C173C376E1DFC3B95AB6B4A2A8EE51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fd:d9:25:57:e0:40:77:69:50:89:e3:9d:7a:
                    e3:10:02:23:c1:8c:f3:bf:60:ec:1b:bf:a5:29:4a:
                    bb:e2:67:12:35:67:07:44:1d:80:65:1a:f1:e4:77:
                    87:79:8f:f4:d4:5a:ac:87:a8:0b:38:f0:53:c2:be:
                    cc:e2:e0:40:04:ec:5a:de:1d:6c:3b:fc:47:74:c4:
                    9d:4b:cc:15:13:91:72:f8:78:4c:04:84:a1:cf:b3:
                    d5:7d:9d:c9:3e:99:83:d5:30:fa:32:7f:a1:76:b5:
                    05:5f:b2:7d:27:fa:ac:87:de:b1:5b:7b:c8:ca:08:
                    46:33:58:e4:b8:e7:c9:30:8e:d8:17:70:e9:3e:43:
                    4c:59:c7:9b:2b:b3:d3:d8:5b:7d:59:e8:2d:90:9c:
                    c9:b6:3e:56:b2:e3:75:34:8a:20:20:4c:ec:82:9d:
                    71:21:77:9b:04:78:9c:c9:f4:de:ce:15:5b:11:bb:
                    01:04:39:e5:8c:77:26:0a:f1:a7:c5:90:5e:49:91:
                    f6:76:e2:e9:ca:72:09:c3:c0:b3:26:16:71:49:88:
                    21:be:72:1e:a5:a1:97:28:9a:68:1f:9a:02:97:a1:
                    bf:39:d3:22:97:37:1b:62:1c:13:a5:ec:c6:a1:71:
                    2a:ef:f4:f3:bf:d5:cf:d6:d3:58:c1:74:34:5c:18:
                    33:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:27:D5:D3:B3:C1:73:C3:76:E1:DF:C3:B9:5A:B6:B4:A2:A8:EE:51
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143829.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a49b::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:05:01:29:73:01:2e:11:7d:4a:79:07:4a:f3:f7:2d:82:3e:
         3c:5f:06:e0:c0:06:05:37:35:e1:ac:82:da:d8:da:9c:fb:39:
         c4:3c:89:b9:81:25:27:26:3f:9b:63:b9:0f:70:e5:68:57:8d:
         50:e2:ef:1d:2c:76:57:05:e8:b8:ef:07:b2:24:58:3a:a7:b8:
         98:58:08:78:94:bc:16:9a:df:77:d9:ce:73:2e:79:55:4f:0a:
         ca:cd:bd:c9:21:8a:02:62:49:a3:72:6c:c9:88:28:05:61:91:
         84:c9:7d:0a:4d:1e:7e:29:c8:2e:87:02:05:39:2e:3f:dc:7a:
         0a:39:06:6c:bb:6a:fc:90:dc:f9:74:71:59:9a:b7:5d:1a:07:
         30:1e:6b:e2:28:ec:41:be:a4:ce:5c:30:f8:5e:e2:6f:49:0e:
         46:0d:45:46:d1:7c:6b:6e:31:6c:04:dd:ef:50:0e:bb:bc:ba:
         82:be:cf:e0:ef:d7:a1:63:86:f8:66:1c:3c:10:90:33:99:a0:
         7b:45:f1:bd:25:d9:6a:17:c6:2c:2d:d8:d8:f2:5c:6b:b6:0d:
         a6:67:9d:c7:39:4e:45:e9:dc:66:89:d3:29:ee:69:1f:84:40:
         54:47:d3:3b:6f:0a:89:1e:56:92:8a:f4:b1:10:38:ff:57:12:
         87:94:20:02
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUHwTcDVlfU7LMI1GPeanLvb8/PiMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjIyMzZaFw0yNzA1MjEwNjI3MzZaMDMxMTAvBgNV
BAMTKDk5MjdENUQzQjNDMTczQzM3NkUxREZDM0I5NUFCNkI0QTJBOEVFNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk/dklV+BAd2lQieOdeuMQAiPB
jPO/YOwbv6UpSrviZxI1ZwdEHYBlGvHkd4d5j/TUWqyHqAs48FPCvszi4EAE7Fre
HWw7/Ed0xJ1LzBUTkXL4eEwEhKHPs9V9nck+mYPVMPoyf6F2tQVfsn0n+qyH3rFb
e8jKCEYzWOS458kwjtgXcOk+Q0xZx5srs9PYW31Z6C2QnMm2Play43U0iiAgTOyC
nXEhd5sEeJzJ9N7OFVsRuwEEOeWMdyYK8afFkF5JkfZ24unKcgnDwLMmFnFJiCG+
ch6loZcommgfmgKXob850yKXNxtiHBOl7MahcSrv9PO/1c/W01jBdDRcGDO7AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUmSfV07PBc8N24d/DuVq2tKKo7lEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzODI5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqkmzANBgkqhkiG9w0BAQsFAAOCAQEAtQUB
KXMBLhF9SnkHSvP3LYI+PF8G4MAGBTc14ayC2tjanPs5xDyJuYElJyY/m2O5D3Dl
aFeNUOLvHSx2VwXouO8HsiRYOqe4mFgIeJS8Fprfd9nOcy55VU8Kys29ySGKAmJJ
o3JsyYgoBWGRhMl9Ck0efinILocCBTkuP9x6CjkGbLtq/JDc+XRxWZq3XRoHMB5r
4ijsQb6kzlww+F7ib0kORg1FRtF8a24xbATd71AOu7y6gr7P4O/XoWOG+GYcPBCQ
M5mge0XxvSXZahfGLC3Y2PJca7YNpmedxzlORencZonTKe5pH4RAVEfTO28KiR5W
kor0sRA4/1cSh5QgAg==
-----END CERTIFICATE-----