Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143892.roa
File:                     AS143892.roa (raw, json)
Hash identifier:          5eDnkpjOl8oyRITTsJ/+v8p89evMMq36JaYs0lYiKvs=
Subject key identifier:   EB:DE:C6:5A:60:F8:69:89:D3:40:D3:6E:C0:FE:9E:25:CC:82:F6:BA
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       62627E3B2C4C17357472D1CA1180BEBF8EB35658
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143892.roa
Signing time:             Fri 22 May 2026 06:05:32 +0000
ROA not before:           Fri 22 May 2026 06:00:32 +0000
ROA not after:            Fri 21 May 2027 06:05:32 +0000
asID:                     143892
IP address blocks:        240a:a4da::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:62:7e:3b:2c:4c:17:35:74:72:d1:ca:11:80:be:bf:8e:b3:56:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:00:32 2026 GMT
            Not After : May 21 06:05:32 2027 GMT
        Subject: CN=EBDEC65A60F86989D340D36EC0FE9E25CC82F6BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c8:0e:3a:a3:7f:56:73:ed:07:88:e3:26:ec:
                    7d:8b:1d:a5:2a:ac:05:ab:10:35:83:2a:de:9b:7d:
                    76:86:47:9f:3e:51:ba:43:32:8a:7e:75:b8:df:f2:
                    7d:4f:10:10:6c:6b:48:6f:53:3a:df:97:4b:7f:3d:
                    a1:3a:9d:4f:7d:6d:1a:82:65:29:2d:73:0e:e1:68:
                    97:3f:b8:77:ea:a6:cf:d9:4e:26:0d:ea:ee:c9:3e:
                    fe:f3:09:c4:90:10:03:69:0c:33:d8:b1:e3:78:a4:
                    21:4e:c2:4f:1d:7e:ab:0f:c8:10:f3:9c:45:ed:da:
                    86:30:6a:75:c5:c9:21:19:35:92:6d:83:a4:a5:de:
                    84:30:1b:e0:57:cf:b2:69:91:b2:e2:46:99:7e:f9:
                    d3:00:79:39:ce:89:68:bb:00:a3:c2:86:84:5e:6a:
                    38:1f:19:a0:b1:44:07:37:17:e9:c2:e4:4d:64:a3:
                    5a:ee:89:d2:fa:a4:d6:d6:bb:c9:45:55:68:95:7e:
                    b2:99:5d:27:98:d2:f8:70:d7:41:0e:02:db:94:a9:
                    5a:24:d9:c6:f6:ca:2b:56:b3:fe:c6:94:01:28:7f:
                    60:5c:67:3c:3f:c1:f1:85:4e:7c:92:ea:c9:44:ed:
                    3a:66:fc:2d:54:ba:64:73:ad:c6:17:2d:55:d4:7a:
                    a3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DE:C6:5A:60:F8:69:89:D3:40:D3:6E:C0:FE:9E:25:CC:82:F6:BA
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143892.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a4da::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:03:7f:69:1a:37:1a:2a:37:54:16:02:62:b6:81:81:86:72:
         6d:43:8a:57:ab:55:38:9f:06:08:cb:f0:1f:83:65:31:4b:cc:
         11:fb:01:75:ed:c2:24:d8:bb:4b:9e:73:96:63:0d:38:de:46:
         24:01:0c:0a:84:52:77:90:69:46:7a:86:f4:9e:b4:d2:4a:9e:
         37:42:d4:e4:6a:d4:53:8a:4e:a6:3f:c4:7f:6c:f6:58:d6:49:
         76:d8:bc:9e:1d:24:11:b1:a3:6e:b1:6f:0d:79:b2:46:f5:ff:
         62:e3:44:97:45:28:0e:a2:45:67:14:c1:34:26:54:18:b9:24:
         bc:3e:23:a5:47:82:6f:18:53:4f:39:26:90:f7:72:f4:5a:45:
         65:5a:bb:5f:a8:43:3a:d1:25:18:a2:34:72:4c:6d:ae:7e:cc:
         7c:6b:60:07:d6:f4:87:85:22:c8:92:ee:83:9e:cb:fb:21:ad:
         43:7d:1c:55:60:7d:b9:ec:6a:13:b8:90:dd:66:c7:f5:d5:1c:
         54:4e:ae:f0:5d:e7:c5:95:a1:fa:93:1d:54:38:8f:c6:32:98:
         fc:72:94:12:41:7c:ef:5e:8e:df:c0:62:6a:78:69:e0:bd:5e:
         c1:53:b7:13:62:28:fd:01:97:fd:d5:ac:bc:78:70:f2:fc:32:
         c8:f7:22:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----