Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143992.roa
File:                     AS143992.roa (raw, json)
Hash identifier:          WievdK98iKsCTBBGWwaJd37HfevVyCsjjNF7EyQnArs=
Subject key identifier:   E6:D0:C4:96:68:E2:9D:25:3B:74:E0:B3:1E:D0:E1:11:F3:DD:E3:44
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       742D54C1E3F0B74C89CB29345A1ED517967DE3F4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143992.roa
Signing time:             Tue 26 May 2026 08:52:44 +0000
ROA not before:           Tue 26 May 2026 08:47:44 +0000
ROA not after:            Tue 25 May 2027 08:52:44 +0000
asID:                     143992
IP address blocks:        240a:a53e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:2d:54:c1:e3:f0:b7:4c:89:cb:29:34:5a:1e:d5:17:96:7d:e3:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 08:47:44 2026 GMT
            Not After : May 25 08:52:44 2027 GMT
        Subject: CN=E6D0C49668E29D253B74E0B31ED0E111F3DDE344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fb:44:ac:c7:84:40:6a:83:c8:37:86:70:db:
                    5d:ea:32:ef:e7:22:bb:b3:1f:c3:2b:80:36:fe:a4:
                    f2:02:2a:60:4b:8b:7e:8f:f1:b1:1a:ff:13:46:86:
                    e3:d0:26:7c:0b:61:51:38:3e:de:1f:9b:2a:7c:e4:
                    e9:51:da:26:f3:6b:9e:89:54:43:3e:2c:7f:2f:e9:
                    dc:8e:32:d6:1b:e8:44:4e:f6:d4:72:04:28:7f:da:
                    22:ea:47:7b:2f:fe:c7:fe:36:44:ed:79:02:5a:14:
                    0a:a9:af:b4:50:ae:f1:55:ea:6a:82:b4:46:49:f7:
                    02:16:8b:23:99:47:f9:52:a3:a9:8e:40:e5:4b:16:
                    c5:b0:f9:78:91:ab:6d:6b:90:fd:2c:a2:03:0a:95:
                    40:a4:de:d1:90:bf:7a:ce:22:e2:ed:d3:53:b3:61:
                    b3:0e:a2:22:6d:e9:8f:f5:14:6b:b1:4e:51:7e:b7:
                    d4:97:75:be:76:ad:2a:8c:74:58:ad:e7:0a:d3:2d:
                    db:a6:62:8c:54:c9:97:f0:70:eb:9d:38:24:15:14:
                    eb:da:8c:a3:b3:96:a5:9c:58:ce:09:28:04:be:d9:
                    94:99:10:0c:34:6e:af:dc:3c:2c:5b:25:bf:2a:ce:
                    f7:94:cb:f0:44:6e:48:df:11:af:44:46:d1:53:f3:
                    a6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D0:C4:96:68:E2:9D:25:3B:74:E0:B3:1E:D0:E1:11:F3:DD:E3:44
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143992.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a53e::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:76:c3:25:0f:b2:a8:55:c1:10:12:c9:43:f4:63:6f:5f:bf:
         99:55:f4:7d:39:ae:71:11:70:b4:c9:e4:b3:9e:1f:21:70:cf:
         70:c4:4a:9b:12:13:e1:f9:6b:b1:de:1b:00:a2:b4:22:bd:e0:
         68:8e:ba:79:59:97:a8:69:50:cd:da:7e:5e:3c:44:74:d7:f6:
         01:57:2b:ab:73:75:c1:9d:d2:6a:e4:19:ed:99:7b:5d:ee:1c:
         48:73:06:e3:8b:ed:27:9d:6f:65:60:68:6d:f9:08:39:d6:50:
         1c:55:20:d4:66:de:8a:41:c8:a8:f0:8a:00:69:b2:18:17:ee:
         96:82:04:44:2f:58:fa:44:c6:32:41:a9:c3:64:bd:1b:12:7e:
         cd:7a:00:e9:de:10:f8:7a:c1:8e:68:8b:a3:83:c5:7a:6d:03:
         85:86:46:ef:d5:44:1a:6b:c1:bf:12:a3:1f:34:b4:9b:05:e3:
         8b:c0:ce:be:82:44:ba:66:78:96:93:4a:e0:e9:1f:22:77:a7:
         f9:5d:63:3b:91:5c:9b:d7:55:b4:9f:74:6d:5b:50:54:4d:d8:
         f5:b0:1e:40:16:7e:27:bb:98:b0:37:b1:7f:41:7d:06:ae:ad:
         e0:bb:1b:0e:20:b4:a5:96:75:77:3a:83:f8:10:73:ae:f3:c5:
         1a:61:f3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:51 2026 by rpki-client