Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143951.roa
File:                     AS143951.roa (raw, json)
Hash identifier:          6RnJqPWl1CRdqiNwg7W1PeSvkxWJOvQV3nh2WnORKyM=
Subject key identifier:   75:68:E4:43:CA:B6:24:FB:35:D4:23:3F:DE:C2:C7:27:32:B7:3E:DA
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3616DF541C01D52DDA5E0E750794010FBE94B176
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143951.roa
Signing time:             Tue 26 May 2026 06:13:01 +0000
ROA not before:           Tue 26 May 2026 06:08:01 +0000
ROA not after:            Tue 25 May 2027 06:13:01 +0000
asID:                     143951
IP address blocks:        240a:a515::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:16:df:54:1c:01:d5:2d:da:5e:0e:75:07:94:01:0f:be:94:b1:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:08:01 2026 GMT
            Not After : May 25 06:13:01 2027 GMT
        Subject: CN=7568E443CAB624FB35D4233FDEC2C72732B73EDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:18:a3:e5:89:66:93:14:05:88:09:c5:6c:cc:
                    58:b2:ec:07:f4:b4:21:f1:d9:ab:76:11:24:a2:43:
                    7a:f3:38:a5:40:a1:2a:46:0a:7a:64:fd:89:0f:81:
                    36:f3:3c:63:95:00:68:be:3c:a4:a9:6f:51:e5:ce:
                    64:f8:91:2a:7e:59:36:a1:7c:91:df:c7:97:bc:3e:
                    9d:54:9b:d0:74:71:2f:4c:f6:0f:4e:a1:02:cd:ec:
                    9b:d9:5d:80:84:bc:2a:e3:5f:1e:83:e5:16:e4:70:
                    ef:03:c9:1a:9a:1f:21:f9:5a:e0:93:88:89:c3:98:
                    01:ea:bd:d6:b0:17:21:95:24:62:b9:3f:21:85:17:
                    2f:2a:6a:d1:b4:d2:a0:d1:1d:51:e9:21:20:d8:39:
                    55:dd:fd:ce:00:12:17:5a:95:55:38:7e:e6:52:b7:
                    4b:29:4c:95:9d:15:54:75:17:95:04:b7:d3:7e:01:
                    ba:0c:76:f4:4f:b8:39:63:aa:58:06:38:cc:5c:5f:
                    29:98:5b:6b:97:f3:1a:74:14:4f:81:9a:a3:f9:e0:
                    d0:8e:86:55:8c:06:2b:ab:63:70:7a:5e:6e:b8:96:
                    3a:c6:bc:0b:65:ac:5a:67:c4:08:ce:8a:0b:9f:a4:
                    85:1b:fa:9f:bb:68:c5:ca:e9:04:d0:3a:c5:36:13:
                    f6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:68:E4:43:CA:B6:24:FB:35:D4:23:3F:DE:C2:C7:27:32:B7:3E:DA
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143951.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a515::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:19:86:a7:4a:ab:e3:3a:7e:73:1f:e9:fc:e2:4a:70:dd:7f:
         ff:36:3c:1b:fb:44:57:d4:5b:9a:cf:ca:97:58:a7:da:9c:0f:
         21:73:54:66:f2:07:d4:12:93:69:44:74:e3:d5:86:da:a8:e3:
         df:fd:b8:7f:f7:19:b9:c1:6f:fd:a5:34:b0:37:e3:65:76:f5:
         22:6a:41:6a:13:0e:81:b4:80:75:8f:93:6c:5d:5f:4a:46:25:
         4f:7f:99:47:e0:41:da:42:eb:bd:f8:14:73:b4:57:6f:30:f6:
         2f:d8:ab:c5:24:d4:ad:49:83:ea:98:4c:66:f6:2e:a3:e4:a6:
         bf:f6:58:82:16:33:8d:8e:04:93:fb:5d:ad:13:37:2b:49:3f:
         36:63:f1:28:d1:00:64:b4:ef:30:17:1a:49:59:d9:d4:f3:08:
         fb:00:92:57:4c:93:57:d5:bd:91:33:12:c7:fc:1b:32:c9:bc:
         55:8f:63:6d:f1:75:37:de:36:d9:bc:30:7c:a0:c1:ae:68:58:
         0c:b8:c8:8c:a9:9d:7a:d3:f8:51:d2:b8:cc:39:4b:fb:c5:70:
         eb:21:f1:2a:7e:b1:70:6f:c4:48:15:38:cb:fc:ae:01:86:e9:
         e3:15:e4:70:70:7e:3b:d5:55:c4:06:25:46:ee:9d:d7:1d:c3:
         d3:3d:f2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----