Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143054.roa
File:                     AS143054.roa (raw, json)
Hash identifier:          CK3MSpGW6Ts/S5KMw6lQfkDXOUOB+VIeGkofR2laFZ8=
Subject key identifier:   34:6F:F2:76:ED:E9:2E:99:05:80:66:82:69:C8:B1:53:8D:C4:90:FB
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       51EBDD9223344A99824F49158F46A1411657C1F5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143054.roa
Signing time:             Mon 25 May 2026 01:20:32 +0000
ROA not before:           Mon 25 May 2026 01:15:32 +0000
ROA not after:            Mon 24 May 2027 01:20:32 +0000
asID:                     143054
IP address blocks:        240a:a194::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:eb:dd:92:23:34:4a:99:82:4f:49:15:8f:46:a1:41:16:57:c1:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:15:32 2026 GMT
            Not After : May 24 01:20:32 2027 GMT
        Subject: CN=346FF276EDE92E990580668269C8B1538DC490FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b9:dd:d0:6b:00:ce:67:6b:b4:0a:69:32:b0:
                    1d:8d:a3:d4:10:79:36:83:d1:0d:af:e6:5f:2d:29:
                    13:ce:37:ea:cd:e3:f0:49:aa:09:cb:4b:78:b6:d3:
                    8b:86:a0:eb:57:58:d4:41:46:fd:54:95:0e:75:0d:
                    58:eb:75:20:2b:e2:66:f7:ca:75:5e:41:7e:8e:2a:
                    5d:cd:0c:53:a5:60:55:53:27:27:03:21:0e:9b:dd:
                    85:e0:2d:93:05:79:8f:f8:91:fc:83:3b:6b:ff:c9:
                    39:77:7e:d9:9f:6b:f1:12:a4:9a:0f:5e:67:26:a6:
                    e8:f6:09:b6:41:36:e4:bc:52:7a:65:38:70:9c:89:
                    2d:b6:ec:37:7c:cb:0c:cd:a8:ee:13:79:8a:d5:da:
                    0a:5d:f1:c3:09:2a:8b:46:50:6a:bb:9b:e1:18:29:
                    bb:9c:a0:2a:3c:58:b7:9b:c7:cd:cb:54:db:55:3b:
                    fe:0b:99:87:16:87:80:de:63:d8:34:4b:48:0a:2f:
                    fa:b9:eb:3f:58:a5:f5:02:50:5d:b0:2e:a5:17:f4:
                    df:51:56:9d:26:07:30:96:0c:de:7f:29:1f:9f:98:
                    34:fb:f6:cc:9e:66:8b:d0:c5:ec:8d:5d:eb:16:b6:
                    33:35:75:e9:c1:d3:f2:2e:9e:be:36:78:cf:53:5d:
                    0a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6F:F2:76:ED:E9:2E:99:05:80:66:82:69:C8:B1:53:8D:C4:90:FB
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143054.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a194::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:8f:57:97:4f:91:64:4c:40:f5:dc:4b:1e:0e:3c:37:68:0f:
         3a:22:81:d8:dd:0f:4f:fb:af:1b:cc:d5:38:a0:f6:0d:59:61:
         f6:23:e9:79:85:2c:b6:3c:66:81:ff:d4:2f:86:ef:f1:aa:ab:
         ac:ed:80:ae:14:06:87:2e:52:92:19:d7:0f:9a:57:0d:a5:94:
         bf:bc:b9:61:76:df:c6:10:18:8c:d6:d7:7a:c6:87:09:d3:11:
         83:08:c1:48:30:ff:91:41:5a:f7:c1:ef:fe:97:45:63:49:d4:
         f8:3e:3a:19:45:35:18:62:a7:ba:d9:a6:a3:67:96:86:07:6d:
         b5:d2:33:54:ae:6b:ef:43:bc:aa:d2:42:9d:d5:0f:c5:42:bc:
         3f:e2:b6:37:c0:b2:2a:05:07:52:ec:e0:48:fa:d2:2d:a7:45:
         9a:e4:c0:ea:cd:e7:0f:13:fa:8d:60:04:7d:d5:db:53:aa:03:
         9a:00:48:28:6a:c5:d0:5b:42:23:b5:ca:f8:88:07:17:17:e3:
         05:97:a7:2a:ce:e6:0a:95:68:b1:cf:a7:43:14:3a:a3:69:b2:
         ee:80:43:9b:dc:df:31:5d:af:94:56:e0:4e:b7:cd:40:c3:d2:
         82:a6:d9:43:17:b2:24:80:6d:23:7e:ac:b7:94:0e:06:45:a3:
         32:8b:f6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----