Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143020.roa
File:                     AS143020.roa (raw, json)
Hash identifier:          RSDh18W1YL3cCUzPKcfJPiSvk7qN/a0X7beUC36bhNY=
Subject key identifier:   2A:A7:04:57:18:2F:45:D7:EA:B0:E6:5C:A8:F8:F2:3E:26:CA:1D:17
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       518EF428B3A51E343C11BF5C79EC1624BFC5E613
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143020.roa
Signing time:             Fri 22 May 2026 07:41:17 +0000
ROA not before:           Fri 22 May 2026 07:36:17 +0000
ROA not after:            Fri 21 May 2027 07:41:17 +0000
asID:                     143020
IP address blocks:        240a:a172::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:8e:f4:28:b3:a5:1e:34:3c:11:bf:5c:79:ec:16:24:bf:c5:e6:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:36:17 2026 GMT
            Not After : May 21 07:41:17 2027 GMT
        Subject: CN=2AA70457182F45D7EAB0E65CA8F8F23E26CA1D17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:28:ee:4f:bb:f1:da:91:47:2c:15:4a:06:5d:
                    94:bf:71:30:39:55:f0:22:cd:e6:2c:8d:32:2b:8a:
                    2d:f8:b1:55:6f:40:98:1b:8b:1f:d4:5f:23:4a:b8:
                    13:43:38:21:55:23:58:58:f3:b9:60:54:ec:9e:92:
                    cb:56:01:37:16:c7:4b:ca:35:22:d2:f6:54:9e:8b:
                    f8:3b:f1:a7:c3:42:f2:ee:d3:21:e9:7a:84:f1:fa:
                    2b:b1:a5:4a:49:f7:c0:8b:1b:23:aa:56:24:b0:93:
                    b6:fc:4b:83:0f:29:d0:f2:c3:6f:e0:68:6e:7c:9a:
                    e1:a6:61:4d:62:f3:0b:3c:b8:d0:76:f7:c0:3e:df:
                    46:19:83:d5:01:2a:fb:03:89:28:97:7a:6a:60:96:
                    3f:4b:19:a0:70:0b:c6:e7:a2:8d:f3:a3:85:b0:42:
                    b6:96:2f:67:df:35:5f:84:65:47:a9:06:c9:31:33:
                    3e:35:44:7c:b8:b0:5c:6b:13:4e:cf:a9:2e:15:cc:
                    5b:14:71:6c:fc:9c:42:0d:5c:3e:10:66:af:96:86:
                    89:03:fc:0a:a8:4f:db:6c:8e:99:4d:c5:c9:85:84:
                    85:03:bc:63:b8:ca:f1:91:2e:a9:32:e3:e8:3f:8a:
                    05:31:b2:6d:7d:46:49:e7:b0:3e:36:08:34:52:a8:
                    1c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A7:04:57:18:2F:45:D7:EA:B0:E6:5C:A8:F8:F2:3E:26:CA:1D:17
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143020.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a172::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:cf:f4:55:8f:d6:f0:09:4f:31:b2:e1:cd:9f:f2:4a:45:71:
         c8:0c:8f:54:c3:91:c0:b7:5d:81:7e:51:fe:44:47:e0:19:82:
         1c:3d:39:cc:26:ec:ec:1c:7c:02:3c:c9:b1:df:68:40:cd:40:
         e1:3b:b5:12:0d:4b:86:77:ff:4e:3b:19:7f:30:87:2b:54:db:
         24:b8:ef:e3:4d:56:99:d9:ea:b6:c1:aa:65:8a:7d:c1:a3:26:
         36:2c:98:11:a1:bd:f3:49:d1:d2:23:f9:79:51:94:9a:9e:40:
         84:78:48:ad:ff:a0:d4:06:d7:05:42:68:2c:97:3d:5c:1b:ec:
         e9:28:de:a1:9c:25:d0:2d:52:a8:00:9c:e6:62:72:e4:82:41:
         99:53:55:c0:ab:fb:a6:43:76:1d:c2:7d:d4:d7:04:36:d8:d7:
         d3:ef:bc:f2:da:eb:7f:fc:69:80:bf:53:7d:d8:fe:b9:73:02:
         f1:cf:5d:15:83:6f:b3:01:a4:3b:4b:26:04:3e:a9:0d:08:fe:
         d1:0e:49:4f:c4:a4:c6:1a:d6:1e:4c:10:2f:21:0f:d7:bf:f8:
         8f:8e:5e:84:4a:f7:42:94:e6:e0:8e:08:07:71:5f:04:4b:53:
         ec:19:bc:ad:15:f9:af:cc:59:3d:91:54:ed:22:92:8f:43:8e:
         fc:00:b7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----