Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143915.roa
File:                     AS143915.roa (raw, json)
Hash identifier:          At27GUkR8YFoo/SNdCTcJs729T/ZDcgwNJRYdykMMn4=
Subject key identifier:   91:28:12:44:6F:53:EC:68:E7:50:B3:7D:22:7F:8F:EF:96:53:5D:B6
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       18CADCB72178A8F9A0A60A1E021698AD47DF9472
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143915.roa
Signing time:             Fri 22 May 2026 06:58:23 +0000
ROA not before:           Fri 22 May 2026 06:53:23 +0000
ROA not after:            Fri 21 May 2027 06:58:23 +0000
asID:                     143915
IP address blocks:        240a:a4f1::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ca:dc:b7:21:78:a8:f9:a0:a6:0a:1e:02:16:98:ad:47:df:94:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:23 2026 GMT
            Not After : May 21 06:58:23 2027 GMT
        Subject: CN=912812446F53EC68E750B37D227F8FEF96535DB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:99:70:a7:8e:b1:fd:ae:e8:8e:e8:78:a2:2d:
                    fe:da:8b:c6:d9:4f:dd:4c:bb:ec:5c:bb:52:26:6f:
                    04:50:4a:e2:40:50:30:3b:c1:3b:b9:c8:40:4e:1e:
                    cb:98:17:a1:88:8c:58:a5:3b:82:29:e4:e9:85:76:
                    4d:2b:12:3c:ba:ef:2b:12:3f:f4:92:d7:b5:82:ff:
                    dc:8e:78:21:bb:62:85:da:e0:ae:75:c7:23:7a:d5:
                    26:96:fa:0c:09:c2:89:01:2c:9d:5b:7a:72:fc:99:
                    fb:36:2c:d6:44:ab:22:70:ba:3e:4f:f1:03:67:6d:
                    ab:b0:d5:6e:21:62:3d:15:48:8a:e3:39:94:d7:e2:
                    cf:69:7e:80:30:d0:28:fc:30:28:5e:0c:8b:5c:19:
                    5f:33:80:65:77:50:4d:e5:9d:73:17:38:1a:aa:70:
                    12:bd:7a:ac:73:0e:8b:30:03:6f:f9:be:39:dd:40:
                    ec:19:57:82:33:80:55:8e:ea:1e:19:06:95:b9:1a:
                    ae:7d:a3:13:1d:dc:6b:16:d3:e5:4e:76:75:c6:b7:
                    38:2c:1c:17:41:61:d9:55:2c:9f:6f:ae:f8:8c:e3:
                    d9:ea:33:52:1f:fc:47:59:32:02:d6:ba:d9:59:c4:
                    b6:be:36:53:7d:0e:8d:c0:3d:8c:1e:0f:26:a3:e4:
                    59:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:28:12:44:6F:53:EC:68:E7:50:B3:7D:22:7F:8F:EF:96:53:5D:B6
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143915.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a4f1::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:bd:6e:a1:35:ea:f9:12:c3:a9:59:a7:c6:94:52:6a:ce:74:
         f9:6c:df:79:2c:b5:34:f7:75:0b:28:30:01:c5:89:d4:04:5c:
         eb:f9:2f:6c:94:09:4f:70:e5:1a:6f:2f:96:e6:a4:d6:fd:77:
         c7:77:a7:c3:65:43:fc:9c:3c:92:64:1c:d4:79:14:47:86:36:
         da:f0:8a:a2:46:7a:f6:db:5f:ad:ad:52:3a:7e:e7:d3:ee:75:
         65:70:71:fb:ed:c6:85:f0:03:18:97:2d:7e:d5:84:32:a1:8a:
         6d:b8:eb:af:59:88:3c:d0:46:a0:2b:9f:98:df:32:9d:ed:0a:
         cc:df:53:cc:0e:15:f3:63:14:58:61:44:05:1e:00:30:a8:b2:
         11:03:4e:ed:32:83:64:bb:b7:96:a3:82:9c:40:7e:bf:ad:29:
         a8:e2:ba:e8:58:df:af:d8:0a:2b:ea:5b:71:59:81:cf:6f:42:
         c8:80:0d:26:b3:ec:e5:a7:a7:7c:db:1b:95:91:a7:f9:be:ff:
         09:b2:a7:92:cc:0d:4b:f6:49:98:6d:2d:2d:6f:07:e4:19:91:
         c5:46:77:ca:ec:ab:ed:1b:46:94:8f:42:b1:3c:e2:68:6e:c7:
         50:4e:6b:ef:69:01:21:61:da:d0:14:75:56:f7:01:f0:cd:a7:
         7c:92:06:d0
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUGMrctyF4qPmgpgoeAhaYrUfflHIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjUzMjNaFw0yNzA1MjEwNjU4MjNaMDMxMTAvBgNV
BAMTKDkxMjgxMjQ0NkY1M0VDNjhFNzUwQjM3RDIyN0Y4RkVGOTY1MzVEQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSmXCnjrH9ruiO6HiiLf7ai8bZ
T91Mu+xcu1ImbwRQSuJAUDA7wTu5yEBOHsuYF6GIjFilO4Ip5OmFdk0rEjy67ysS
P/SS17WC/9yOeCG7YoXa4K51xyN61SaW+gwJwokBLJ1benL8mfs2LNZEqyJwuj5P
8QNnbauw1W4hYj0VSIrjOZTX4s9pfoAw0Cj8MCheDItcGV8zgGV3UE3lnXMXOBqq
cBK9eqxzDoswA2/5vjndQOwZV4IzgFWO6h4ZBpW5Gq59oxMd3GsW0+VOdnXGtzgs
HBdBYdlVLJ9vrviM49nqM1If/EdZMgLWutlZxLa+NlN9Do3APYweDyaj5FkPAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUkSgSRG9T7GjnULN9In+P75ZTXbYwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzOTE1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqk8TANBgkqhkiG9w0BAQsFAAOCAQEACL1u
oTXq+RLDqVmnxpRSas50+WzfeSy1NPd1CygwAcWJ1ARc6/kvbJQJT3DlGm8vluak
1v13x3enw2VD/Jw8kmQc1HkUR4Y22vCKokZ69ttfra1SOn7n0+51ZXBx++3GhfAD
GJctftWEMqGKbbjrr1mIPNBGoCufmN8yne0KzN9TzA4V82MUWGFEBR4AMKiyEQNO
7TKDZLu3lqOCnEB+v60pqOK66Fjfr9gKK+pbcVmBz29CyIANJrPs5aenfNsblZGn
+b7/CbKnkswNS/ZJmG0tLW8H5BmRxUZ3yuyr7RtGlI9CsTziaG7HUE5r72kBIWHa
0BR1VvcB8M2nfJIG0A==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:04 2026 by rpki-client