Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143021.roa
File:                     AS143021.roa (raw, json)
Hash identifier:          RHe4b+cMdaBr//WW55g8qGlaXXFDQ/IkqxzaebGpliU=
Subject key identifier:   06:EA:C4:AA:71:EC:B0:B2:69:F2:7A:95:DD:BE:1B:75:EC:E5:AA:4A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       66C286A6FD5277895FF8868BC880841743E7FA9B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143021.roa
Signing time:             Fri 22 May 2026 01:50:23 +0000
ROA not before:           Fri 22 May 2026 01:45:23 +0000
ROA not after:            Fri 21 May 2027 01:50:23 +0000
asID:                     143021
IP address blocks:        240a:a173::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:c2:86:a6:fd:52:77:89:5f:f8:86:8b:c8:80:84:17:43:e7:fa:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:23 2026 GMT
            Not After : May 21 01:50:23 2027 GMT
        Subject: CN=06EAC4AA71ECB0B269F27A95DDBE1B75ECE5AA4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ef:fe:dd:1c:a9:8f:59:e9:6b:44:8b:34:35:
                    bb:d6:b8:64:1c:c0:61:29:d8:98:1c:aa:a7:09:a5:
                    52:63:93:40:2c:ca:7d:d3:b0:91:ae:ab:e5:15:9d:
                    ba:4d:cd:81:45:54:94:b1:6c:8a:83:6b:1d:64:29:
                    78:6b:ed:cb:f7:0a:6f:b8:04:f9:e9:3b:32:7b:8a:
                    40:5e:54:7b:6c:71:69:4d:44:67:a8:f2:00:03:80:
                    ef:89:c0:99:bd:b1:f4:24:bf:fd:4f:25:e9:a2:f1:
                    e5:0b:48:c9:f9:b9:ed:71:f7:d5:dd:fa:ed:4f:b8:
                    d0:28:ee:3b:d3:4d:36:f7:7c:8d:3d:6c:2c:87:e0:
                    38:a7:ef:36:5b:b6:3a:67:99:75:52:a6:b1:cb:e8:
                    eb:38:59:75:45:28:ed:1a:c2:06:3f:ad:5b:ee:a6:
                    73:c9:87:98:0d:47:1d:5a:f6:59:2c:0f:c2:dd:30:
                    9e:bc:00:35:fb:ac:ab:1b:c1:bf:10:c5:67:1e:33:
                    ea:a3:39:c2:72:17:8e:f9:a3:a6:b8:15:9f:96:06:
                    6f:08:d6:e5:17:2e:71:51:df:85:d0:54:5f:33:3a:
                    fc:5b:8a:b5:a2:ce:e5:a1:3e:ee:98:54:fb:d2:a8:
                    00:79:2e:32:51:bc:cb:9f:b3:86:75:93:be:2e:e7:
                    7f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:EA:C4:AA:71:EC:B0:B2:69:F2:7A:95:DD:BE:1B:75:EC:E5:AA:4A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143021.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a173::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:ce:01:9c:c1:cd:52:5d:6b:da:2f:f0:37:76:f2:10:42:11:
         6f:3d:2a:24:52:60:81:fb:3a:c9:f3:8b:ed:96:3c:1a:f4:0e:
         1c:18:32:96:3c:d8:c0:08:72:e6:46:81:a9:9d:e8:c8:d7:46:
         45:78:61:1e:56:8d:1f:c7:37:b1:77:56:ce:31:72:70:6e:a7:
         a8:6e:40:4c:f2:7b:90:a4:10:c1:b8:5c:ab:6f:ad:2d:1f:3a:
         f8:ef:87:b8:ec:9e:11:45:90:11:77:d8:16:56:61:c4:2b:f9:
         28:5a:e2:6f:85:ea:42:4d:24:fb:a7:38:82:a1:0f:73:1c:da:
         62:c5:6f:6a:eb:70:b6:6e:05:db:bd:b2:52:62:6a:81:10:71:
         e3:21:e6:c6:3a:17:8b:2a:ed:74:cc:4a:bb:e5:bd:d3:56:04:
         28:54:9e:a0:49:56:5b:42:f6:cc:eb:d9:4f:38:53:f5:a6:c8:
         2a:54:42:b3:d8:29:33:14:37:c1:13:10:8b:5e:c0:78:82:80:
         a0:09:08:21:f5:99:5d:26:c6:7e:c1:02:28:9d:ee:21:d8:d8:
         1f:a4:59:0b:a4:57:35:a6:9e:73:05:34:14:f9:79:46:62:19:
         de:d5:1f:19:df:f1:77:91:5c:a1:06:76:1e:44:d7:82:29:a5:
         17:79:e5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----