Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143024.roa
File:                     AS143024.roa (raw, json)
Hash identifier:          JudSg3KKP8pjqqea0fS4Sl+vpK4sj/+Vde6S3TNImjI=
Subject key identifier:   CE:A0:BB:18:8A:32:BB:D9:0E:27:67:36:0B:12:EA:B9:1D:E8:78:9E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       29BC0DA184759BE49A01D438EC53A5CE5C6FBDA7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143024.roa
Signing time:             Mon 25 May 2026 01:38:08 +0000
ROA not before:           Mon 25 May 2026 01:33:08 +0000
ROA not after:            Mon 24 May 2027 01:38:08 +0000
asID:                     143024
IP address blocks:        240a:a176::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:bc:0d:a1:84:75:9b:e4:9a:01:d4:38:ec:53:a5:ce:5c:6f:bd:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:08 2026 GMT
            Not After : May 24 01:38:08 2027 GMT
        Subject: CN=CEA0BB188A32BBD90E2767360B12EAB91DE8789E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:96:db:73:cf:1b:ec:88:6a:a7:d7:75:f0:e2:
                    1f:ca:50:8e:93:59:28:e0:44:b3:a2:bb:82:74:99:
                    34:d5:63:7a:1d:81:f8:80:ee:cc:d3:70:6f:ae:90:
                    2d:74:9a:1e:fe:e7:f3:9b:2b:c7:41:39:fd:4b:e5:
                    0c:56:a8:36:bd:84:fa:8e:3a:47:ab:c4:4c:d2:57:
                    6d:b2:4b:9c:27:7a:bb:d1:00:f8:21:a4:4b:01:b3:
                    5a:e4:3a:55:46:1b:dc:8f:a2:5f:9b:da:f8:3b:dc:
                    f7:c3:b5:4c:0d:e2:99:7b:1d:d9:71:68:ab:df:72:
                    22:9a:e7:09:c2:41:06:bd:81:db:27:ac:35:8b:ea:
                    f9:91:2b:01:7e:93:e0:0d:75:39:8b:b0:4c:39:67:
                    08:04:42:12:e8:0e:d7:df:1b:59:a7:f3:0c:7e:52:
                    ea:1c:e6:11:aa:3e:df:18:1b:2d:f2:5f:62:31:66:
                    1c:20:52:6a:c6:72:68:53:f1:21:18:11:64:7d:f1:
                    bc:f9:b0:68:6c:25:ef:4f:ec:b4:95:d0:01:cc:d3:
                    8c:31:a8:da:83:75:0d:a1:b9:81:07:cc:32:4d:36:
                    42:af:8d:00:c1:dd:ec:67:de:71:5d:9c:5a:c5:9c:
                    cf:47:a9:43:2b:5c:48:c1:47:5e:60:6e:99:c5:af:
                    1a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A0:BB:18:8A:32:BB:D9:0E:27:67:36:0B:12:EA:B9:1D:E8:78:9E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143024.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a176::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:04:7a:80:86:a4:b7:1d:2b:93:80:ad:a9:f1:8b:dd:17:f3:
         00:d2:17:ac:f0:b2:88:15:58:24:95:8e:81:4c:e2:37:41:28:
         b0:6a:46:0a:36:c8:38:3e:f0:ee:b2:56:7a:dc:fa:a5:87:da:
         02:8d:6c:c7:4c:bc:dc:7d:56:18:a9:61:23:e8:31:c0:73:d2:
         67:6a:00:63:57:04:05:5c:f2:e5:1b:cc:c5:08:92:c6:cb:73:
         b0:37:63:aa:c7:60:e5:62:24:8d:76:85:7d:fc:32:36:13:1e:
         59:e8:66:ec:ed:fd:57:0e:72:36:4a:65:48:e2:a4:28:2d:58:
         6d:10:f7:84:3c:dc:2e:c5:f6:78:54:62:d0:42:e1:4c:02:0c:
         31:a8:0d:93:aa:0c:a6:8b:8a:c6:bb:21:c8:dd:bc:df:20:38:
         81:d9:3a:fd:04:79:a7:2c:fa:64:5d:bf:31:40:17:fb:06:70:
         a5:88:19:80:6c:de:c8:e0:36:bf:c0:9b:0d:5c:1c:eb:2f:2d:
         c6:42:79:29:6f:59:2e:04:f2:4e:3e:62:94:1a:ae:56:8a:be:
         01:3a:a2:26:c3:71:38:e5:46:12:aa:6d:4e:07:25:9c:04:cd:
         ee:95:b9:30:99:e6:0a:62:be:74:31:9c:e8:03:94:20:26:bf:
         7b:66:15:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----