Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143830.roa
File:                     AS143830.roa (raw, json)
Hash identifier:          lPrXGRPq2STP5Yfj834t7vDpF9jE4TI15+fsf+rTTlM=
Subject key identifier:   52:39:B0:73:BA:9C:FE:58:12:8D:D0:31:18:5C:CA:70:FB:67:6D:C6
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5D4021DDDC7977537321A05F18EBBD4CFC070401
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143830.roa
Signing time:             Fri 22 May 2026 02:48:04 +0000
ROA not before:           Fri 22 May 2026 02:43:04 +0000
ROA not after:            Fri 21 May 2027 02:48:04 +0000
asID:                     143830
IP address blocks:        240a:a49c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:40:21:dd:dc:79:77:53:73:21:a0:5f:18:eb:bd:4c:fc:07:04:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:43:04 2026 GMT
            Not After : May 21 02:48:04 2027 GMT
        Subject: CN=5239B073BA9CFE58128DD031185CCA70FB676DC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4e:69:46:77:22:2e:39:f0:8e:7f:9f:53:88:
                    68:81:17:ef:88:59:6a:fe:2e:56:8d:05:f2:52:41:
                    51:45:8b:fa:03:3e:43:37:55:ec:a0:39:36:30:67:
                    73:4c:68:bc:b3:48:a5:1d:53:96:cd:28:88:01:29:
                    52:42:01:c8:aa:a6:fa:d3:ed:b9:6b:c0:df:18:07:
                    f8:3e:bd:74:23:d1:2a:a4:9f:81:6d:ce:76:67:6b:
                    6a:ea:2e:ef:d1:98:18:ca:16:bc:32:7e:44:6c:ff:
                    91:df:16:4c:a5:b9:76:ab:ba:a8:bd:f1:3e:35:72:
                    34:7c:c2:8d:a0:6d:6a:a9:2c:2e:fa:4d:53:78:94:
                    e3:74:7c:58:73:0d:6a:34:6f:97:9e:bc:08:48:9c:
                    93:e8:fd:76:db:97:16:4f:24:47:77:6f:4c:a5:d9:
                    9d:ae:16:a1:18:9e:c1:14:84:37:92:6b:6c:d7:24:
                    d9:5e:71:6e:c6:9b:9c:e4:70:3e:bd:32:c6:5d:e1:
                    03:1c:3a:fa:85:ce:44:a2:a8:a6:77:62:05:78:bc:
                    92:8a:2e:d4:5a:f7:79:df:5f:6b:b6:3e:8a:cc:47:
                    5c:f0:d2:48:d9:f3:f2:c4:22:85:f4:76:5b:9c:02:
                    0b:a4:da:91:15:70:8a:a4:1e:01:5e:62:4b:81:15:
                    e8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:39:B0:73:BA:9C:FE:58:12:8D:D0:31:18:5C:CA:70:FB:67:6D:C6
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a49c::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:3a:51:c0:e6:74:3c:43:1a:e9:12:6c:dd:2c:96:68:fb:60:
         d4:7b:0b:54:36:f8:3b:55:a3:4f:fd:d6:46:31:a1:a3:fb:c8:
         fa:66:f3:5d:b8:76:08:8b:b2:88:3f:62:fc:df:1a:20:db:93:
         aa:60:2b:bc:e3:dd:25:c2:de:83:c6:76:93:d0:26:6e:19:47:
         bc:f7:df:e9:18:9e:6d:17:cf:c9:19:32:12:4b:4b:0b:72:ec:
         a3:2a:cd:52:c9:74:c4:a1:39:03:42:69:b7:8e:14:b8:b4:31:
         18:3f:67:b8:2f:31:cb:47:81:2f:8f:9b:10:c3:d5:46:4b:f6:
         78:d8:6b:b2:a2:fd:1a:4e:88:a0:48:68:1b:a7:c5:5c:c4:58:
         f7:6f:78:2e:a8:03:70:b3:14:bb:bd:f3:94:d3:29:d9:2a:7f:
         b5:be:a6:26:bd:7e:f5:03:e3:03:a3:60:32:49:e2:02:1e:8e:
         e0:00:44:8b:35:31:08:76:d4:35:49:45:ba:39:da:50:60:42:
         a6:ca:4f:b6:c0:0e:58:04:61:da:d9:5c:e7:f3:ae:4f:7a:32:
         7b:07:47:d5:e2:f1:2f:90:e4:4f:9c:63:33:ee:4d:35:a0:c4:
         9f:28:cd:11:f9:82:3c:6d:a6:87:5c:97:21:1f:b3:cd:8f:67:
         f5:cd:56:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----