Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143883.roa
File:                     AS143883.roa (raw, json)
Hash identifier:          foguXef98S1EspF26cyeppNZE2vAElIC04ASk9O33OQ=
Subject key identifier:   23:E7:5E:A6:9A:DF:89:F4:25:B4:B3:20:39:F1:51:E8:98:CF:7F:46
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       067DD7E7E60BE7A248963AFE708056B4A1CCA466
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143883.roa
Signing time:             Tue 26 May 2026 06:31:02 +0000
ROA not before:           Tue 26 May 2026 06:26:02 +0000
ROA not after:            Tue 25 May 2027 06:31:02 +0000
asID:                     143883
IP address blocks:        240a:a4d1::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7d:d7:e7:e6:0b:e7:a2:48:96:3a:fe:70:80:56:b4:a1:cc:a4:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:26:02 2026 GMT
            Not After : May 25 06:31:02 2027 GMT
        Subject: CN=23E75EA69ADF89F425B4B32039F151E898CF7F46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6d:1f:59:92:8b:e9:e8:d3:9b:57:37:d5:a2:
                    dc:e9:a3:72:1d:5c:85:6b:f9:08:16:35:c8:6b:53:
                    b8:d8:4e:0f:f1:c7:32:f7:11:a4:35:50:66:4f:90:
                    da:30:94:b8:86:27:41:57:4c:2e:c6:65:6f:49:25:
                    ff:12:e7:88:87:44:6c:7e:b2:74:5b:3c:4b:ec:25:
                    7a:86:b0:f0:d6:ce:23:17:8c:c2:e2:4d:8f:3d:d4:
                    97:8f:90:8b:69:d1:18:ec:0a:e9:15:06:34:e0:71:
                    ba:a6:fa:01:62:18:46:07:26:fc:8f:ba:45:27:27:
                    29:bc:57:7d:08:f3:99:e8:25:44:eb:14:e9:ea:52:
                    37:f6:cc:ed:ac:cb:bc:1a:2b:7d:77:aa:95:98:51:
                    d2:b1:bb:71:e1:f7:ec:18:62:d4:5e:78:b5:27:60:
                    30:ec:13:d9:8a:1c:10:de:46:11:1d:4c:1c:97:53:
                    e1:e5:fa:fe:d0:07:67:90:9d:6d:07:be:c2:53:58:
                    dd:8b:ce:94:e6:51:e4:a1:83:58:5a:c1:52:49:4c:
                    f1:6e:3c:6d:80:28:31:1e:3d:ff:1e:64:d0:c8:a7:
                    d4:fb:22:3f:7d:b9:d0:fd:c4:54:14:80:57:3b:42:
                    bb:7c:67:e3:61:0c:00:ee:6e:f6:22:36:9a:f5:65:
                    e7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E7:5E:A6:9A:DF:89:F4:25:B4:B3:20:39:F1:51:E8:98:CF:7F:46
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143883.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a4d1::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:f2:d8:fe:14:15:99:15:40:9f:ee:25:3e:03:74:54:5d:2f:
         7e:62:ec:50:ff:cf:ff:1f:ec:39:1b:d0:6f:eb:33:bb:9f:60:
         ed:d3:28:80:07:52:9e:e0:91:9a:89:8b:16:23:24:ac:ab:ab:
         95:c9:3c:aa:2c:0e:47:af:7d:ee:0f:d0:8e:57:15:f6:18:2d:
         80:9b:78:7b:02:8c:9d:9c:40:b8:4c:6e:75:e0:84:24:eb:f2:
         a3:36:a7:fd:83:aa:14:74:53:53:98:7e:d3:33:5e:df:31:65:
         59:e5:ae:9e:6a:e7:12:f8:4c:75:ec:d4:5d:85:15:76:93:85:
         30:a8:2e:a2:42:b6:84:c6:fb:f7:44:d7:83:32:78:a6:bc:43:
         11:28:cc:89:7f:25:75:79:07:8a:fa:4f:d8:45:d2:99:40:46:
         c4:43:e8:d5:19:04:9f:8d:eb:7c:cb:01:9d:16:8a:2c:8f:74:
         7d:31:c6:47:33:b0:8f:cb:c6:3c:c8:23:ae:be:2a:ea:09:69:
         7b:03:7a:50:27:2f:ee:6b:43:2b:d7:cf:0d:d1:cd:95:bf:12:
         53:6f:ef:43:36:3b:36:f4:4a:8b:a3:44:01:3c:72:28:98:20:
         42:99:c8:c3:0e:59:91:24:85:b0:b5:bb:9e:a7:77:75:c7:19:
         85:b1:38:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:36 2026 by rpki-client