Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143010.roa
File:                     AS143010.roa (raw, json)
Hash identifier:          m8/euh5AU2oIY0AfR5BDcfiZfbK0boc6VtrotohdsMg=
Subject key identifier:   B2:29:B8:14:A5:BE:63:39:1E:C1:D9:EE:A0:11:6C:3D:C6:F3:D2:D8
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       152E9EF03FE4836E6B981509ED41748800EDAF4B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143010.roa
Signing time:             Fri 22 May 2026 06:05:27 +0000
ROA not before:           Fri 22 May 2026 06:00:27 +0000
ROA not after:            Fri 21 May 2027 06:05:27 +0000
asID:                     143010
IP address blocks:        240a:a168::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:2e:9e:f0:3f:e4:83:6e:6b:98:15:09:ed:41:74:88:00:ed:af:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:00:27 2026 GMT
            Not After : May 21 06:05:27 2027 GMT
        Subject: CN=B229B814A5BE63391EC1D9EEA0116C3DC6F3D2D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bf:ea:01:8f:ad:04:d7:73:03:b7:54:7b:b7:
                    b0:06:72:2a:d1:38:41:9f:f8:93:5a:c9:d7:bc:ab:
                    47:37:07:c1:54:6a:3a:e2:38:8c:cb:8e:1f:e4:f2:
                    90:07:65:9e:1c:fb:52:65:2a:1e:39:3f:f7:72:8b:
                    f3:7d:ee:54:60:84:c0:35:ef:af:8d:ae:36:d3:e9:
                    ec:9e:ed:e4:cb:28:bd:14:74:65:dd:46:4f:5b:23:
                    e9:de:8c:5e:ab:16:4e:8a:1d:8b:45:fb:1f:64:96:
                    48:1c:e9:dc:84:a2:36:87:42:df:07:b8:ad:5a:f2:
                    36:5c:78:87:40:9b:53:3d:88:0b:96:82:bd:a5:9f:
                    5b:1e:f3:c6:42:a7:ea:b0:72:16:17:dd:07:db:dc:
                    de:3a:75:61:8a:0d:3c:c0:ff:0c:d5:7e:b1:65:97:
                    e8:13:01:05:51:6d:1d:52:78:21:68:2d:45:d7:b4:
                    67:56:cd:b3:bc:31:a7:58:43:d3:d3:f9:14:39:4e:
                    61:84:f7:9d:a9:2e:75:5b:63:b9:a9:2c:50:15:b1:
                    87:21:36:e9:bd:1b:60:19:26:f8:96:a5:ea:1a:2d:
                    36:0c:01:bd:d0:55:e8:3b:e9:60:68:49:b3:70:23:
                    f9:fd:bf:ba:8b:9d:d8:82:3a:67:cf:85:95:e9:4c:
                    86:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:29:B8:14:A5:BE:63:39:1E:C1:D9:EE:A0:11:6C:3D:C6:F3:D2:D8
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143010.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a168::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:c1:e8:ad:79:f0:ee:ac:54:69:84:78:79:95:66:7d:a1:3e:
         b7:0c:60:94:e7:cd:d9:bd:0e:a3:41:0f:18:7a:c1:99:26:da:
         5b:58:83:0a:e3:d1:da:41:08:2a:58:20:1a:19:7d:70:cf:34:
         53:d4:15:11:9f:e7:f0:0b:9d:95:c2:a5:93:f0:37:db:8f:62:
         ea:e0:fa:a2:41:cc:82:9a:b5:ed:54:e6:34:96:e9:cb:ff:4d:
         d6:49:d7:10:31:96:75:ca:89:24:1c:df:51:36:cb:75:c4:f3:
         8b:82:92:9e:4c:f4:19:11:84:fd:b8:79:e7:28:9b:66:d6:64:
         e1:1c:ed:f1:b8:b5:7b:72:84:5f:15:e3:79:58:2a:e7:42:c8:
         ba:0e:f9:a3:06:ab:5a:3c:b9:07:35:b3:b8:a4:65:0b:03:9b:
         f8:fe:cb:f8:84:1f:6b:b3:f5:f0:a6:ab:31:08:6e:32:e7:0a:
         5f:03:ab:30:eb:84:cd:bb:5c:f0:23:ef:e9:b4:59:cb:31:34:
         46:40:28:69:a9:89:5b:fe:40:3c:01:62:00:92:61:94:1d:fd:
         45:d4:8d:e8:57:b3:aa:17:41:93:cb:01:bf:64:3d:16:34:d1:
         6b:33:10:c0:95:04:03:8c:dd:3b:b5:9a:88:48:dd:61:a2:32:
         19:89:0d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----