Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143058.roa
File:                     AS143058.roa (raw, json)
Hash identifier:          FJDnci1sv38oEzJ+KiGQOzf12w9mx+3ZAW8jh+aV52I=
Subject key identifier:   57:6A:9D:D0:A5:54:75:DD:B3:1B:0A:F9:07:0C:2D:07:FA:8F:6A:2E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3E3350C40406881AC7B4AED744333F02E3299E6F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143058.roa
Signing time:             Fri 22 May 2026 07:41:12 +0000
ROA not before:           Fri 22 May 2026 07:36:12 +0000
ROA not after:            Fri 21 May 2027 07:41:12 +0000
asID:                     143058
IP address blocks:        240a:a198::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:33:50:c4:04:06:88:1a:c7:b4:ae:d7:44:33:3f:02:e3:29:9e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:36:12 2026 GMT
            Not After : May 21 07:41:12 2027 GMT
        Subject: CN=576A9DD0A55475DDB31B0AF9070C2D07FA8F6A2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e9:1f:2c:05:48:a0:84:df:b1:9b:3e:5a:2f:
                    60:6d:2b:3c:33:46:ab:d1:7f:65:01:1d:49:1a:f2:
                    4e:15:fb:4f:2c:c6:7d:57:3d:97:11:68:47:0d:42:
                    2a:c0:a4:76:b8:ba:fd:60:a8:71:e0:c8:e0:8b:8d:
                    a1:91:00:72:76:a1:56:24:76:7c:7b:5e:24:64:c4:
                    21:b9:2b:53:e6:8b:d9:44:66:4c:5f:79:d6:81:a9:
                    37:7f:1a:97:e9:87:65:b4:70:12:88:cf:fc:b5:f3:
                    c1:cc:32:4e:5b:80:de:f6:cd:6a:b4:9c:5e:43:31:
                    05:92:e8:4e:76:4d:c8:bf:2e:97:84:bb:e0:41:cd:
                    dd:5a:61:e3:e8:de:cb:d6:c7:95:c8:0a:03:28:c2:
                    d0:d4:58:4c:67:ef:6e:30:66:c7:3f:51:0e:12:af:
                    22:04:4e:04:f4:a6:81:5c:1b:da:78:6b:82:f6:41:
                    d1:d9:56:30:0d:a4:64:8e:54:f5:0a:21:8a:75:b8:
                    42:9a:cb:ee:8c:df:43:fe:b3:2a:55:94:ca:c7:89:
                    85:64:00:ef:ca:a9:2b:84:88:5f:e3:48:a0:5b:16:
                    08:fe:6f:23:7b:16:32:6a:b5:b3:28:c4:a8:4c:a6:
                    62:c4:20:40:00:93:da:20:e9:07:2e:d9:f5:ba:7e:
                    b2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6A:9D:D0:A5:54:75:DD:B3:1B:0A:F9:07:0C:2D:07:FA:8F:6A:2E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143058.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a198::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:76:6d:47:83:fd:c4:fa:87:46:2e:50:75:54:33:38:6a:9d:
         7a:60:7d:79:94:12:1a:88:98:3d:c6:85:8b:15:63:ae:c8:3a:
         95:ee:cd:22:7f:9a:5c:52:67:1a:52:35:bf:29:f9:ca:4b:2c:
         ba:a9:bd:cc:cc:17:c5:41:18:55:28:9e:6e:d2:d0:bd:14:67:
         8e:fe:9b:66:8f:73:f0:e2:5e:7b:8e:93:3a:f9:05:c1:40:d7:
         01:ca:96:8c:ce:2b:25:94:fb:61:f7:70:dc:38:4b:a9:fc:72:
         44:8c:bf:c3:eb:88:96:c1:77:bc:d6:98:27:0a:e5:b7:91:68:
         32:78:a0:66:e0:ed:c7:7b:97:cd:02:1a:5f:21:64:81:a2:73:
         d3:58:59:bb:ab:27:77:bb:5c:1c:dc:cf:21:18:4c:64:af:79:
         f4:f1:e8:f2:a3:6b:e0:ee:f6:a6:72:fd:64:0f:13:da:1c:3b:
         b9:53:e5:85:fc:5d:6a:31:0c:2e:0e:1b:25:06:81:ac:84:a1:
         42:eb:ce:72:70:3f:9b:d5:8f:99:68:df:26:3f:e1:19:6e:cb:
         52:c0:f5:05:71:30:4d:a7:0c:d6:fa:0f:f8:71:21:10:2e:f3:
         6c:81:37:cd:4b:95:bf:4e:dd:ba:9d:28:b5:cc:d4:b3:a1:3d:
         1e:4f:6a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----