Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143014.roa
File:                     AS143014.roa (raw, json)
Hash identifier:          ocGN2yCB5nDyBvSjZjE72CigRUvot+PtoBefrVWSUKM=
Subject key identifier:   65:F0:EA:B6:39:F0:BC:58:17:4F:E8:3D:7B:30:18:70:9C:3D:8C:56
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7119DBF29D7CF2ABA99385EE5FA5ED61EBE9DD75
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143014.roa
Signing time:             Tue 26 May 2026 06:12:50 +0000
ROA not before:           Tue 26 May 2026 06:07:50 +0000
ROA not after:            Tue 25 May 2027 06:12:50 +0000
asID:                     143014
IP address blocks:        240a:a16c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:19:db:f2:9d:7c:f2:ab:a9:93:85:ee:5f:a5:ed:61:eb:e9:dd:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:07:50 2026 GMT
            Not After : May 25 06:12:50 2027 GMT
        Subject: CN=65F0EAB639F0BC58174FE83D7B3018709C3D8C56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d6:d6:cb:98:57:08:1f:98:1c:bd:ca:30:e5:
                    f1:dc:de:09:d8:e4:82:04:91:e8:f6:d0:97:16:5a:
                    10:14:cd:d5:08:1d:39:0a:8b:35:2e:88:ff:0c:89:
                    8a:fe:d9:0b:d5:41:a1:fa:91:7b:ca:58:b1:bb:23:
                    c1:0d:0f:4b:9b:bc:ad:75:0c:93:97:1c:e6:3b:91:
                    51:a7:c6:c4:62:2e:cb:1b:58:81:30:17:2d:2a:58:
                    6a:08:fb:6d:1d:ec:5e:47:30:4e:47:1f:cf:b2:ef:
                    ed:60:89:3e:57:c1:aa:1c:d5:81:33:48:57:e4:2f:
                    3c:cf:1b:13:c5:65:de:52:38:04:b6:b3:f8:cb:69:
                    78:15:28:5a:b7:26:5e:ee:16:60:ee:48:2e:0a:f6:
                    1d:5e:00:e6:f2:11:f8:34:d0:0f:e6:0a:ab:f5:47:
                    67:e0:ba:ed:52:53:ee:05:64:4e:df:90:f7:11:6d:
                    99:44:1f:f3:8e:3f:8e:85:4d:6f:cf:31:ff:8f:9a:
                    94:e1:6c:67:f8:9c:c4:56:9b:1c:8d:5f:05:5c:2f:
                    5c:2e:72:7e:69:17:e4:12:c3:04:04:37:7d:66:39:
                    32:18:d7:be:cd:df:bb:9b:da:17:45:fa:44:c2:3b:
                    01:30:8c:a5:35:cc:62:75:c3:5b:3e:b7:37:59:16:
                    bb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F0:EA:B6:39:F0:BC:58:17:4F:E8:3D:7B:30:18:70:9C:3D:8C:56
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143014.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a16c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:52:a2:a6:c7:93:b8:dc:af:7d:fa:13:92:cb:39:45:e5:aa:
         0f:52:18:9d:07:2e:58:8d:26:6c:14:2a:61:05:d9:6d:9f:ea:
         9b:2c:94:dd:5e:2c:4e:31:84:50:b2:8f:75:ed:07:c8:74:5b:
         a7:d1:86:6c:a2:7e:75:c1:f2:ed:5a:d6:f5:27:f3:80:5c:b0:
         0b:a8:9f:89:be:45:83:a0:f2:fc:e6:d7:77:55:55:d5:d4:6d:
         75:72:2b:de:3d:67:0f:a3:ca:ea:c7:9c:39:2e:64:5a:37:27:
         98:92:9b:1a:2e:5a:ad:62:06:1d:42:5c:51:b3:bc:8f:49:2a:
         04:c8:ae:39:e6:18:0c:31:6f:98:c0:a9:4f:33:75:f6:2e:70:
         1e:49:ea:64:b7:fe:ff:91:f6:55:32:17:e9:cf:39:34:5c:c9:
         6c:3b:a3:e2:cd:c3:b9:18:ca:36:90:f4:33:53:85:c1:ab:c6:
         d3:ab:27:6a:6e:82:e7:04:5d:ea:da:31:83:98:e5:fa:73:b0:
         91:73:8a:1f:4e:e3:64:db:60:ff:54:30:1b:43:24:9b:69:c0:
         ee:6a:87:f6:64:6b:e6:f6:df:53:d8:de:89:be:ff:f8:b7:fe:
         bf:7d:3a:55:aa:b9:3b:0d:70:f8:2a:77:ed:4d:e1:5f:b3:12:
         db:fa:c7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----