Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143918.roa
File:                     AS143918.roa (raw, json)
Hash identifier:          qTAZtFpZ/DWHwcDbiuOl4gFvCcC7Y4mOz9bBXmnuAd8=
Subject key identifier:   71:C5:8A:73:D5:FD:2B:C4:B8:E0:7D:9C:FE:FE:B4:28:9B:69:CC:B0
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       60FEDFFE04FC86B3D41F2F8B433A2E25A8B2226F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143918.roa
Signing time:             Tue 26 May 2026 02:35:12 +0000
ROA not before:           Tue 26 May 2026 02:30:12 +0000
ROA not after:            Tue 25 May 2027 02:35:12 +0000
asID:                     143918
IP address blocks:        240a:a4f4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:fe:df:fe:04:fc:86:b3:d4:1f:2f:8b:43:3a:2e:25:a8:b2:22:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:30:12 2026 GMT
            Not After : May 25 02:35:12 2027 GMT
        Subject: CN=71C58A73D5FD2BC4B8E07D9CFEFEB4289B69CCB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e4:40:de:3b:c2:36:4c:1d:0d:2f:e1:c1:89:
                    e0:65:d8:78:fa:ee:04:54:60:87:bb:33:62:a1:21:
                    3c:83:9f:9b:cf:32:72:32:0b:5c:b0:06:69:0d:55:
                    a4:88:8f:a7:10:64:0b:a4:86:e4:2a:06:18:1a:4d:
                    ef:5b:cb:3a:42:ff:f6:94:a0:03:fd:e0:74:19:95:
                    72:0c:ee:75:95:a0:55:1b:fc:ff:03:3d:93:7c:fe:
                    2b:5f:3f:10:9c:23:fb:20:42:51:09:a0:0e:65:82:
                    1a:f1:31:15:7c:70:24:f4:ea:4c:21:81:c8:01:7d:
                    f7:ae:6a:02:89:24:c0:11:70:ab:6c:52:63:a2:58:
                    1c:54:fb:eb:08:e7:63:e8:cd:aa:07:49:27:e8:23:
                    69:0c:d9:ee:e5:16:32:fa:13:47:a1:4e:65:2c:6a:
                    3c:ec:69:f9:36:24:43:46:4c:96:55:37:bf:f3:e5:
                    c1:ef:af:e8:a8:4d:e2:15:77:14:4b:c3:94:ff:bc:
                    99:12:3b:90:ff:6d:07:e1:cc:fc:3c:d3:ca:a9:db:
                    60:ba:e1:36:ad:d9:2d:61:48:a9:9f:e5:2e:34:5a:
                    7d:ac:59:8e:ad:93:98:5a:25:f5:72:a5:0d:5a:50:
                    38:23:8c:02:f9:1a:9e:b5:03:c1:58:89:3f:75:2e:
                    1d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C5:8A:73:D5:FD:2B:C4:B8:E0:7D:9C:FE:FE:B4:28:9B:69:CC:B0
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143918.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a4f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:2f:20:ae:29:d3:7d:24:42:f3:48:4b:0c:39:68:03:ae:d8:
         c6:85:cb:3d:f9:19:47:ac:23:95:75:70:68:6b:d3:f9:74:98:
         8e:58:f3:90:0d:a6:69:3c:89:9e:c3:fb:a1:6b:f1:04:82:91:
         77:d9:52:48:82:d7:a0:c7:7e:9c:85:3d:0b:4f:75:e2:32:7b:
         84:42:aa:9e:d4:87:72:23:bd:9b:f9:be:ce:5b:9d:9e:05:20:
         3c:e8:ed:90:60:99:6b:43:a6:75:89:ae:54:88:c2:c2:03:4f:
         01:4e:bb:2d:20:55:a6:4c:c5:df:23:76:1f:77:0c:e2:a0:b8:
         f1:93:9e:31:1d:5e:f9:a8:6f:2b:a2:71:f7:df:06:6c:86:09:
         35:18:65:5f:be:82:19:1a:74:15:b1:47:b4:53:5a:07:0d:7e:
         bf:7c:1e:7b:28:d2:97:75:1c:5c:ae:42:b3:49:c0:83:f0:75:
         49:5b:4e:4c:cf:1c:44:ec:3e:6b:38:06:5d:f4:c7:bf:21:4a:
         21:12:79:38:1b:e3:81:06:c8:f1:b2:1c:ec:9b:9d:d4:3a:76:
         cd:4b:7a:f4:79:16:ea:6e:cb:14:ce:3c:ec:e3:a5:d8:eb:92:
         57:76:c6:66:e8:86:20:2b:2e:d8:b5:df:fc:8b:9c:c0:c7:d4:
         01:aa:ea:08
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUYP7f/gT8hrPUHy+LQzouJaiyIm8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMjMwMTJaFw0yNzA1MjUwMjM1MTJaMDMxMTAvBgNV
BAMTKDcxQzU4QTczRDVGRDJCQzRCOEUwN0Q5Q0ZFRkVCNDI4OUI2OUNDQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp5EDeO8I2TB0NL+HBieBl2Hj6
7gRUYIe7M2KhITyDn5vPMnIyC1ywBmkNVaSIj6cQZAukhuQqBhgaTe9byzpC//aU
oAP94HQZlXIM7nWVoFUb/P8DPZN8/itfPxCcI/sgQlEJoA5lghrxMRV8cCT06kwh
gcgBffeuagKJJMARcKtsUmOiWBxU++sI52PozaoHSSfoI2kM2e7lFjL6E0ehTmUs
ajzsafk2JENGTJZVN7/z5cHvr+ioTeIVdxRLw5T/vJkSO5D/bQfhzPw808qp22C6
4Tat2S1hSKmf5S40Wn2sWY6tk5haJfVypQ1aUDgjjAL5Gp61A8FYiT91Lh2jAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUccWKc9X9K8S44H2c/v60KJtpzLAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzOTE4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqk9DANBgkqhkiG9w0BAQsFAAOCAQEASC8g
rinTfSRC80hLDDloA67YxoXLPfkZR6wjlXVwaGvT+XSYjljzkA2maTyJnsP7oWvx
BIKRd9lSSILXoMd+nIU9C0914jJ7hEKqntSHciO9m/m+zludngUgPOjtkGCZa0Om
dYmuVIjCwgNPAU67LSBVpkzF3yN2H3cM4qC48ZOeMR1e+ahvK6Jx998GbIYJNRhl
X76CGRp0FbFHtFNaBw1+v3weeyjSl3UcXK5Cs0nAg/B1SVtOTM8cROw+azgGXfTH
vyFKIRJ5OBvjgQbI8bIc7Jud1Dp2zUt69HkW6m7LFM487OOl2OuSV3bGZuiGICsu
2LXf/IucwMfUAarqCA==
-----END CERTIFICATE-----