Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143023.roa
File:                     AS143023.roa (raw, json)
Hash identifier:          XRiVPLJNEUkdWb+fr+NzPXSh1f30NC8NavPVnCW+hpw=
Subject key identifier:   B3:24:1C:01:87:6C:E6:AD:E4:97:A9:B3:47:1A:D1:06:76:57:B1:4D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4DD13A9AAB9FB261638025F36E2FBA9A36A8F24D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143023.roa
Signing time:             Mon 25 May 2026 03:19:47 +0000
ROA not before:           Mon 25 May 2026 03:14:47 +0000
ROA not after:            Mon 24 May 2027 03:19:47 +0000
asID:                     143023
IP address blocks:        240a:a175::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d1:3a:9a:ab:9f:b2:61:63:80:25:f3:6e:2f:ba:9a:36:a8:f2:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:47 2026 GMT
            Not After : May 24 03:19:47 2027 GMT
        Subject: CN=B3241C01876CE6ADE497A9B3471AD1067657B14D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:68:cd:99:e9:bc:5c:7c:69:00:1d:72:9b:7a:
                    d9:d7:95:fd:b1:c0:0f:23:34:f3:4d:38:f2:30:c9:
                    68:95:c3:8d:bf:26:d9:ad:f9:37:16:04:67:37:c6:
                    d0:57:79:2f:fb:64:91:bf:b8:0f:19:26:3f:65:d3:
                    e7:16:3d:a3:fa:c7:46:fe:4b:7f:37:88:2b:39:2c:
                    b6:96:b9:16:36:43:d0:d3:5d:a8:4e:5d:59:e3:cf:
                    69:58:19:99:fc:30:a9:f0:29:9a:65:90:28:fb:5e:
                    83:c3:8c:3b:cd:d8:07:03:34:b3:da:ee:5c:ba:f5:
                    cd:f5:86:1f:c4:40:ed:8d:fc:2d:25:73:7f:ad:f1:
                    c5:33:09:86:73:cf:5e:e6:2f:7c:38:40:5a:3b:ec:
                    3d:ff:ad:60:5c:6c:3f:e5:d1:b9:ca:81:8d:ca:83:
                    2e:01:1f:06:23:0e:ba:3b:07:50:b4:a5:0a:96:f0:
                    bb:78:71:ad:b1:ce:f3:46:1f:ba:a2:91:e5:99:65:
                    f2:d6:c6:e4:d9:9f:f0:f1:7e:32:36:33:d9:b4:d3:
                    d3:3e:36:59:2c:87:b0:eb:02:16:e6:23:bf:0f:26:
                    f8:d6:7f:e6:a3:53:6c:98:54:1a:4b:42:ac:ae:5f:
                    cf:5b:67:e8:2d:89:5e:78:4a:6a:cc:23:31:43:5f:
                    7e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:24:1C:01:87:6C:E6:AD:E4:97:A9:B3:47:1A:D1:06:76:57:B1:4D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143023.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a175::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:a1:66:8c:82:2a:d8:3a:e5:ca:c9:2b:a9:e3:0e:59:7e:ae:
         e9:fb:57:3c:e4:0f:f3:9d:7d:e3:00:46:2d:da:3c:50:cf:ec:
         a1:77:93:6f:0a:5a:27:36:df:45:12:8e:12:dd:41:0d:c3:fd:
         a6:d6:51:37:55:bb:0c:af:fb:4d:51:dc:bd:cf:68:60:fb:f9:
         a6:04:c7:e4:39:74:bb:f3:e1:81:12:27:30:e3:43:56:2b:d3:
         3c:f3:18:1e:6d:47:2a:4a:5a:ee:01:14:c0:50:b8:97:c2:5b:
         d5:cf:b0:89:b4:a4:66:8a:e3:7e:c9:84:60:52:33:ac:41:f1:
         de:77:b0:ab:22:11:9e:26:4b:e4:0d:ad:e2:ee:fe:19:22:14:
         95:65:55:d6:99:91:a4:d5:84:42:05:aa:a2:97:f4:15:a3:33:
         65:2b:a8:16:6f:f2:39:68:73:04:e1:48:6b:c5:b6:de:56:d4:
         51:75:83:83:0c:9a:d2:81:11:ea:32:e4:42:ba:eb:83:24:67:
         77:83:8a:4f:a4:5a:c0:0f:01:40:2a:27:0c:1e:f4:1f:97:24:
         24:d4:41:ee:ca:e0:24:07:e8:6b:f4:3b:df:f8:e2:44:5a:34:
         47:90:1c:ee:83:bf:a3:12:3b:a5:7c:7d:b1:ca:ce:9b:cf:f5:
         70:e7:f3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----