Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143003.roa
File:                     AS143003.roa (raw, json)
Hash identifier:          pAakaSIKL1EfkZSeQfulnR8XsxJI6oyQ0NYv/Xb9KMs=
Subject key identifier:   F2:04:B0:AB:9E:A0:09:1B:DA:1F:C5:B7:DF:0F:01:39:D6:69:BE:F1
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       315F1B3C2AB0E773852586B0420E06FA49111890
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143003.roa
Signing time:             Fri 22 May 2026 07:09:06 +0000
ROA not before:           Fri 22 May 2026 07:04:06 +0000
ROA not after:            Fri 21 May 2027 07:09:06 +0000
asID:                     143003
IP address blocks:        240a:a161::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:5f:1b:3c:2a:b0:e7:73:85:25:86:b0:42:0e:06:fa:49:11:18:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:04:06 2026 GMT
            Not After : May 21 07:09:06 2027 GMT
        Subject: CN=F204B0AB9EA0091BDA1FC5B7DF0F0139D669BEF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:97:bc:02:e2:67:be:bc:b5:9c:46:f1:b3:70:
                    8c:cc:02:a9:32:01:6a:ea:cd:d5:70:67:4f:18:9b:
                    a5:2e:4d:46:58:d6:55:b8:ee:93:5c:3c:78:3a:b2:
                    2b:1e:44:8c:47:ab:93:59:fb:c6:06:a9:c9:31:f6:
                    51:8f:88:22:fc:64:ac:a2:b8:50:2c:ee:40:0f:48:
                    23:f6:6d:ad:4a:e7:56:a0:b8:c6:29:72:f2:59:07:
                    a0:05:79:27:53:e7:ad:0c:28:3d:fa:4b:e1:3f:47:
                    bd:2d:36:f8:66:a0:e2:ee:4e:58:cc:b0:f3:3f:d0:
                    76:52:d7:e4:9c:9e:99:55:25:58:cd:4f:93:31:3f:
                    62:50:2c:55:e6:d1:9e:a8:6d:69:31:e9:46:9e:31:
                    c9:3e:01:d8:18:8e:43:57:59:2b:ea:a7:0a:9b:a0:
                    32:e3:99:25:4a:30:a3:4c:32:ad:f5:d6:3b:34:ad:
                    7a:ac:35:20:40:1e:8f:69:99:40:31:69:f1:7f:a6:
                    5a:ac:05:56:dd:c4:5f:ee:67:92:9f:8f:61:34:17:
                    c3:b6:ff:bd:b7:1a:ab:bd:f7:16:5a:3e:42:c1:0b:
                    94:4f:44:85:2a:02:fd:11:bd:39:c7:c8:e5:2e:b2:
                    62:17:21:a3:07:cb:93:4f:f1:aa:f9:d1:49:20:e5:
                    68:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:04:B0:AB:9E:A0:09:1B:DA:1F:C5:B7:DF:0F:01:39:D6:69:BE:F1
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143003.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a161::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:39:4a:22:ea:de:71:3b:69:be:89:6d:64:b8:80:5e:5a:98:
         9f:ad:12:e6:e0:70:f5:77:e8:fb:c1:0e:53:d0:7d:b2:a5:aa:
         65:f3:11:fc:90:04:fc:03:99:19:7c:16:1e:b9:15:23:b1:39:
         55:99:79:5d:4b:b2:0d:d4:ac:37:b2:e6:f6:fc:0d:c4:19:d3:
         ca:5e:f0:7a:3f:56:fa:54:78:2e:39:dc:89:17:e3:af:1d:f6:
         32:7e:2a:6c:22:d6:34:64:7b:ba:6c:a6:f7:73:28:fb:fe:bd:
         4e:46:d7:49:15:ad:51:51:26:41:b9:00:e6:c6:98:f7:2a:18:
         81:c6:db:1c:fa:5a:95:dc:8c:bb:98:3e:71:ee:8c:0e:7a:9d:
         a5:f5:54:54:69:a8:74:3d:7b:75:ca:63:fb:e3:bc:74:41:29:
         37:12:11:79:14:a3:26:13:19:5a:ac:98:fe:48:fc:ad:28:ac:
         7f:a5:6c:38:19:11:a4:a8:b2:7e:10:b2:68:cc:29:17:5b:ff:
         42:39:9a:5b:7d:53:53:3b:09:f7:6d:35:6a:84:a5:7b:01:d6:
         ab:b2:84:68:00:2b:9f:e1:d6:a5:ec:0b:bf:b0:7d:6d:ee:0c:
         48:c5:6d:e5:90:1c:f7:70:61:f1:d3:dd:2b:0f:0e:2a:00:b7:
         59:a2:22:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----