Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143981.roa
File:                     AS143981.roa (raw, json)
Hash identifier:          zFi42WvRvBU/urXdgWEn1WBr07sNvsC4CORczk6+Xkk=
Subject key identifier:   C3:7D:5F:18:A0:D4:67:68:B7:68:3D:A5:CE:86:FE:F9:0F:D8:E7:BA
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3173E6DF2396D6CA17C0FE8D41612F44A841EBB6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143981.roa
Signing time:             Fri 22 May 2026 06:27:48 +0000
ROA not before:           Fri 22 May 2026 06:22:48 +0000
ROA not after:            Fri 21 May 2027 06:27:48 +0000
asID:                     143981
IP address blocks:        240a:a533::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:73:e6:df:23:96:d6:ca:17:c0:fe:8d:41:61:2f:44:a8:41:eb:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:22:48 2026 GMT
            Not After : May 21 06:27:48 2027 GMT
        Subject: CN=C37D5F18A0D46768B7683DA5CE86FEF90FD8E7BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:74:9f:38:10:36:18:b5:f1:8e:12:d6:cd:41:
                    08:15:02:09:b8:b5:7d:fa:9d:a9:19:22:17:13:0f:
                    53:58:73:21:a4:e2:3a:b3:74:0c:1f:02:68:b3:ad:
                    c1:5e:4e:31:38:0f:0a:50:b2:40:12:20:3e:1e:ab:
                    c4:7b:38:08:ae:02:1f:c3:71:98:d4:de:0b:88:2a:
                    ab:a2:4f:7e:3e:4e:10:50:6c:87:8d:f5:70:87:c1:
                    e8:ef:c4:e0:8a:46:5d:0c:bd:52:97:93:13:08:a0:
                    41:97:35:4f:b1:05:d8:c4:c3:f8:58:05:36:fb:d8:
                    2b:40:42:ff:be:d4:58:44:b3:69:dc:28:01:b4:98:
                    9f:2f:4d:fd:de:f0:bd:fc:cb:b1:17:34:2a:8e:43:
                    e4:43:26:39:9d:b7:74:a2:15:9e:f3:7e:39:38:4c:
                    d0:e7:89:51:e0:d8:e2:4b:d7:66:67:a0:14:76:3d:
                    07:75:d5:19:e4:e5:64:9a:98:46:63:83:9c:2a:84:
                    5a:f6:07:4a:c7:f6:19:b1:1e:b2:7c:8f:82:f5:0f:
                    c8:38:64:2e:09:0b:bd:63:75:61:3b:85:b9:fa:fa:
                    8e:78:e0:09:9f:d2:56:81:5b:3b:ca:ed:9c:5e:e1:
                    6f:14:df:b6:77:4a:12:9b:4c:eb:c0:10:d8:f0:22:
                    22:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7D:5F:18:A0:D4:67:68:B7:68:3D:A5:CE:86:FE:F9:0F:D8:E7:BA
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143981.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a533::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:4d:fb:d8:10:a1:d1:ec:f8:b7:6e:ad:72:cf:9b:bd:fb:46:
         cb:6a:52:df:32:41:c8:84:4f:91:ac:0f:c1:0d:a1:fc:04:13:
         e5:04:7c:6e:73:01:00:26:ee:fc:4b:0e:6a:f4:cf:82:ab:1f:
         0c:78:fe:24:55:c6:fd:4f:b8:8d:07:66:c4:50:2c:a0:ec:11:
         2b:39:08:03:f4:f1:6d:d8:e6:c6:9e:35:19:6b:6c:28:80:25:
         97:6c:fa:b3:d4:97:3c:73:2c:89:8d:c6:58:1a:0a:4a:b8:dd:
         cb:4c:37:c9:b7:78:d9:07:30:ed:72:ce:66:bc:eb:91:82:4d:
         53:1c:0d:87:ef:6d:6f:1e:50:69:9e:67:e5:eb:f7:9d:85:26:
         c0:8e:10:03:39:f5:1a:ed:e4:3e:1b:36:a5:64:0c:35:f7:2b:
         f1:31:52:2c:2c:31:32:eb:fc:bb:f4:64:8a:8e:7b:81:3c:6c:
         48:4e:7b:a1:4a:9a:23:a0:1d:cf:f2:f0:cf:bb:05:94:e7:7a:
         72:e7:38:58:28:16:3f:d2:b2:0b:bd:5a:39:19:ae:50:6f:a2:
         ba:84:f3:1b:7b:03:1a:fc:b8:da:ec:38:a6:c7:9b:1a:37:76:
         06:6d:fd:b6:07:92:12:10:3b:9a:e6:b1:34:f1:aa:9e:e3:31:
         ff:e6:c4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----