Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143034.roa
File:                     AS143034.roa (raw, json)
Hash identifier:          wz7ktMxFcvyh8ui59+K0q6H5vCI+NfZiZ/jWgtvO3EE=
Subject key identifier:   48:E6:B3:45:6D:8C:95:01:B6:08:04:C9:BF:6A:60:E4:A3:39:1F:EA
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       18450D1B0D2CC502E6F01CA1B9FA94FD0715534D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143034.roa
Signing time:             Tue 26 May 2026 06:12:53 +0000
ROA not before:           Tue 26 May 2026 06:07:53 +0000
ROA not after:            Tue 25 May 2027 06:12:53 +0000
asID:                     143034
IP address blocks:        240a:a180::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:45:0d:1b:0d:2c:c5:02:e6:f0:1c:a1:b9:fa:94:fd:07:15:53:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:07:53 2026 GMT
            Not After : May 25 06:12:53 2027 GMT
        Subject: CN=48E6B3456D8C9501B60804C9BF6A60E4A3391FEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:3a:22:4f:5d:f1:81:3e:04:1d:19:69:1b:b0:
                    73:bf:0a:e9:24:04:95:ef:8c:d8:4b:93:b8:b7:e4:
                    a0:70:a8:ed:86:cc:6c:47:48:ce:7d:ea:70:25:af:
                    32:22:c0:8a:86:5e:00:3b:50:c6:5c:68:b3:76:31:
                    65:cb:56:94:3f:ba:13:ad:46:24:8c:87:9f:f9:8e:
                    a4:3e:b2:5b:40:c1:7b:4a:d9:c6:03:01:fa:bc:4e:
                    6a:c5:ce:e3:63:92:94:43:7a:8d:60:4d:d5:26:d4:
                    21:bc:8d:07:dd:a0:bf:58:a2:ff:2e:3b:37:e9:9f:
                    e7:49:8b:d5:49:7a:f7:df:e0:6b:1f:86:05:ed:1e:
                    6d:a6:64:6f:6c:54:21:35:de:e0:ee:6c:9a:ff:ea:
                    21:f2:7e:c9:8a:bc:98:4b:59:8d:8b:43:2e:4b:29:
                    3e:8b:53:b5:9d:09:a1:95:99:48:d3:f2:60:39:e2:
                    35:0d:77:95:79:17:af:31:64:db:d5:9d:ff:b4:dc:
                    73:03:ba:55:57:41:e4:91:92:2f:14:5c:36:08:a3:
                    8a:7d:b8:b1:46:db:fd:28:99:31:2b:37:ec:ec:d5:
                    fb:c8:a1:e1:46:18:d8:e7:e0:3c:7a:2c:77:4a:94:
                    38:78:d6:94:f2:92:50:f7:56:2b:da:17:92:b3:1b:
                    6d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E6:B3:45:6D:8C:95:01:B6:08:04:C9:BF:6A:60:E4:A3:39:1F:EA
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a180::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:f1:69:2a:91:4a:da:7d:40:31:7e:00:07:ca:85:cd:26:93:
         05:b3:e5:57:61:e7:6b:ec:a4:21:ae:3c:c2:a1:f9:9c:34:c1:
         5f:f1:a8:9e:93:0d:11:82:49:a1:8a:e5:b6:50:e3:d7:38:ca:
         4a:17:b3:26:1a:37:aa:d7:c4:82:6b:db:54:a3:f9:5a:1d:d9:
         0a:9e:de:2b:80:2a:e1:30:ad:b4:88:22:bc:d1:c0:aa:2c:fd:
         30:15:aa:97:fe:57:24:9b:00:69:7d:01:da:28:ab:a9:6b:24:
         51:a3:82:24:2f:51:7f:04:b7:9d:55:5a:06:82:76:42:d5:46:
         00:50:00:1b:ff:1c:eb:e2:47:3d:76:78:60:db:26:4b:56:8b:
         a2:0c:f8:18:f2:2a:af:42:05:9e:07:52:0c:37:49:09:5e:64:
         1f:35:60:90:73:aa:94:d8:3d:6a:e1:41:aa:7d:dd:7b:3a:30:
         6d:18:fe:b8:e2:bf:67:5c:78:5c:3c:3e:dd:6e:8d:b7:5b:59:
         46:4a:40:06:ec:d8:36:44:74:e1:fe:4c:2c:1d:64:bc:55:9e:
         ef:b5:53:54:2f:32:5f:0a:dc:fe:49:36:31:d3:89:d3:c0:3a:
         ac:8b:42:1f:e1:63:ed:6b:28:1e:a0:9c:b3:a1:4e:bd:1a:99:
         85:58:e4:1f
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUGEUNGw0sxQLm8ByhufqU/QcVU00wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjA3NTNaFw0yNzA1MjUwNjEyNTNaMDMxMTAvBgNV
BAMTKDQ4RTZCMzQ1NkQ4Qzk1MDFCNjA4MDRDOUJGNkE2MEU0QTMzOTFGRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1OiJPXfGBPgQdGWkbsHO/Cukk
BJXvjNhLk7i35KBwqO2GzGxHSM596nAlrzIiwIqGXgA7UMZcaLN2MWXLVpQ/uhOt
RiSMh5/5jqQ+sltAwXtK2cYDAfq8TmrFzuNjkpRDeo1gTdUm1CG8jQfdoL9Yov8u
Ozfpn+dJi9VJevff4GsfhgXtHm2mZG9sVCE13uDubJr/6iHyfsmKvJhLWY2LQy5L
KT6LU7WdCaGVmUjT8mA54jUNd5V5F68xZNvVnf+03HMDulVXQeSRki8UXDYIo4p9
uLFG2/0omTErN+zs1fvIoeFGGNjn4Dx6LHdKlDh41pTyklD3VivaF5KzG213AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUSOazRW2MlQG2CATJv2pg5KM5H+owHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqhgDANBgkqhkiG9w0BAQsFAAOCAQEAcPFp
KpFK2n1AMX4AB8qFzSaTBbPlV2Hna+ykIa48wqH5nDTBX/GonpMNEYJJoYrltlDj
1zjKShezJho3qtfEgmvbVKP5Wh3ZCp7eK4Aq4TCttIgivNHAqiz9MBWql/5XJJsA
aX0B2iirqWskUaOCJC9RfwS3nVVaBoJ2QtVGAFAAG/8c6+JHPXZ4YNsmS1aLogz4
GPIqr0IFngdSDDdJCV5kHzVgkHOqlNg9auFBqn3dezowbRj+uOK/Z1x4XDw+3W6N
t1tZRkpABuzYNkR04f5MLB1kvFWe77VTVC8yXwrc/kk2MdOJ08A6rItCH+Fj7Wso
HqCcs6FOvRqZhVjkHw==
-----END CERTIFICATE-----