Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143941.roa
File:                     AS143941.roa (raw, json)
Hash identifier:          AA3LKq9ZFaump7zbJnId3c+rRn53D7ckXXSizEnTfok=
Subject key identifier:   C8:79:2C:15:CA:68:8A:A7:1A:80:B9:CF:35:A9:E1:B1:18:F2:97:2B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3D35C306217642D929A5789455FF77E0F2E2AF0E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143941.roa
Signing time:             Fri 22 May 2026 01:50:45 +0000
ROA not before:           Fri 22 May 2026 01:45:45 +0000
ROA not after:            Fri 21 May 2027 01:50:45 +0000
asID:                     143941
IP address blocks:        240a:a50b::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:35:c3:06:21:76:42:d9:29:a5:78:94:55:ff:77:e0:f2:e2:af:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:45 2026 GMT
            Not After : May 21 01:50:45 2027 GMT
        Subject: CN=C8792C15CA688AA71A80B9CF35A9E1B118F2972B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9c:37:f7:91:f1:36:ce:20:4f:6a:ec:17:ad:
                    26:1d:fe:40:17:85:b4:09:f8:fc:35:be:9a:79:b6:
                    f2:03:63:70:dd:e2:3b:9b:ba:0f:bd:86:0f:27:8f:
                    ef:c6:7a:54:ea:e1:ea:d6:77:aa:72:79:b0:7a:6d:
                    c9:ce:a8:58:af:da:34:08:cd:95:0e:c2:86:37:bc:
                    58:f2:81:48:c9:b0:89:df:b1:0f:1c:28:46:be:cf:
                    e5:a5:4a:0b:6a:7a:f2:34:bf:52:22:ad:41:6f:fa:
                    c9:2b:73:47:46:cc:89:38:46:41:e1:97:bf:e5:fd:
                    09:fb:81:0b:49:ad:f4:9e:93:00:32:9c:55:8c:44:
                    c1:0a:63:f0:b4:53:76:8b:d2:72:31:fa:6d:59:88:
                    55:e7:b3:1e:83:86:12:d8:5f:b8:47:e7:f1:a0:b8:
                    39:7d:62:30:6c:bb:15:3e:46:76:a1:6d:d3:0a:f5:
                    af:e8:eb:07:48:d9:59:e5:81:0c:5c:4d:27:c5:8a:
                    da:45:26:8c:55:d7:7e:af:ff:5c:4d:13:93:87:91:
                    2c:d7:5c:b5:34:3a:df:bd:ef:90:d1:5a:d7:b8:ca:
                    73:3d:ad:a0:99:7c:84:89:99:65:da:6f:97:c1:51:
                    2d:a2:58:b3:01:30:f7:98:b5:dc:cb:97:af:ed:a3:
                    fd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:79:2C:15:CA:68:8A:A7:1A:80:B9:CF:35:A9:E1:B1:18:F2:97:2B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143941.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a50b::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:c0:20:85:a3:d8:de:4a:c5:c5:9f:b8:f5:0e:e6:dd:40:17:
         55:75:cc:8e:fe:bb:e1:ee:02:d6:cc:70:ee:26:ad:fb:71:02:
         77:f6:d4:0e:f2:16:7e:e7:0b:2e:8e:89:25:85:1a:68:29:68:
         b8:5c:62:64:03:d9:27:1a:67:e4:e1:a0:ce:41:23:d8:3b:6a:
         b0:ff:41:91:47:d0:0d:87:86:bb:6e:0f:08:9b:1d:f5:e4:d4:
         e8:0b:d4:29:4a:84:6e:07:a5:98:9e:51:f7:45:1f:47:42:7a:
         0c:19:8e:a9:b8:b0:7b:ca:8e:69:ac:6a:b8:80:21:bc:da:9b:
         5e:40:80:27:84:3f:47:68:20:71:04:90:4f:5b:7d:39:52:8c:
         5a:04:50:5f:ea:f5:36:3f:f2:c0:97:dc:d7:a3:9f:8c:72:0a:
         59:fe:f1:fc:c6:58:48:0d:73:7e:db:10:5c:d9:81:55:d3:68:
         c2:32:d4:56:08:be:72:17:9e:1d:ec:8e:81:d4:48:76:1b:d3:
         29:09:94:03:fb:90:1d:8d:2a:96:12:43:eb:63:aa:b8:ed:dc:
         25:e0:27:a4:0d:0f:5a:d0:2f:de:5e:64:88:a3:81:14:9b:11:
         71:26:b0:0e:e8:0b:77:64:ba:13:1a:18:e8:9f:cf:f5:15:94:
         e1:98:64:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----