Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143060.roa
File:                     AS143060.roa (raw, json)
Hash identifier:          Tk7/eezvCzMZqepgWzltdH2wP0RHlExdm5c6eXm1Xag=
Subject key identifier:   E4:33:92:2F:BD:6F:79:08:E3:A7:F0:8B:F8:6C:03:DB:23:B7:FF:14
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       294B8C96861B2C8E8C6FBF32806A69A14093F1A5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143060.roa
Signing time:             Fri 22 May 2026 04:08:06 +0000
ROA not before:           Fri 22 May 2026 04:03:06 +0000
ROA not after:            Fri 21 May 2027 04:08:06 +0000
asID:                     143060
IP address blocks:        240a:a19a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:4b:8c:96:86:1b:2c:8e:8c:6f:bf:32:80:6a:69:a1:40:93:f1:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:03:06 2026 GMT
            Not After : May 21 04:08:06 2027 GMT
        Subject: CN=E433922FBD6F7908E3A7F08BF86C03DB23B7FF14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c2:dd:b7:1c:29:ae:cb:11:95:fc:a4:f1:1d:
                    65:34:f8:f1:55:f7:76:08:26:9f:7f:fd:8c:ce:d8:
                    38:8c:90:ba:ef:35:34:a3:22:22:df:2f:55:38:98:
                    98:8d:97:82:65:6b:7c:21:ef:89:81:ef:6d:f7:76:
                    9c:18:da:5a:a4:ab:e1:e5:40:ef:71:85:02:34:1a:
                    b2:cc:df:1d:00:09:71:35:f7:90:1f:6b:b9:38:29:
                    52:8c:07:54:38:9f:86:27:e8:e8:6f:d6:53:fa:c1:
                    cd:c5:a0:d0:31:55:8b:b4:78:a6:2d:fc:37:df:42:
                    d2:c0:a7:a4:98:45:c2:2d:c2:75:bd:a6:d4:c7:f8:
                    6a:7d:39:cf:24:b2:d3:18:dc:18:d7:ab:e3:8b:0a:
                    48:34:18:89:cd:da:b0:11:57:15:63:50:25:85:90:
                    f3:1c:06:40:8e:00:c8:5e:67:43:61:15:71:c4:28:
                    09:0c:db:e0:a5:08:f9:0c:7b:a5:40:4a:60:2a:a1:
                    61:1f:2e:5a:22:a8:93:ad:4e:e6:c9:d3:5c:8b:1b:
                    6c:56:bd:78:5f:e8:b3:33:86:e6:33:19:34:fc:77:
                    5f:f4:ab:40:92:8e:4f:6f:67:24:f8:af:5c:46:b2:
                    0d:17:75:19:5d:6d:9f:70:80:69:3d:e7:19:52:23:
                    e6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:33:92:2F:BD:6F:79:08:E3:A7:F0:8B:F8:6C:03:DB:23:B7:FF:14
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143060.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a19a::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:aa:7c:db:6b:96:5f:02:21:71:82:64:04:2b:55:fd:b7:9e:
         33:04:10:6e:30:0c:42:e3:93:27:ba:66:c8:07:e4:b2:21:7f:
         43:37:6e:d2:a5:53:6a:44:dc:5f:e4:05:fc:1b:1c:d4:c3:58:
         e1:03:f3:8d:37:a6:38:c5:9a:f4:c6:9e:18:da:46:7f:16:f0:
         69:1e:65:4b:c5:80:5b:62:b3:37:e5:21:61:b9:23:08:dd:bf:
         ab:8e:1b:52:14:40:ed:76:53:0e:ed:61:06:5d:ac:8f:62:c7:
         03:a3:91:c4:3c:09:e7:e8:da:53:69:b3:53:07:ca:2c:af:d3:
         c2:1b:15:0c:bf:e7:67:f5:93:8f:07:64:30:79:f9:ad:4d:d9:
         16:fb:43:b2:69:a8:5e:51:1f:75:04:40:29:ce:f8:9b:1d:7e:
         39:fb:5b:ce:7f:6f:2b:34:bb:7a:66:4f:0e:63:9f:3b:32:29:
         47:8b:59:7e:87:d0:c0:02:09:75:53:3b:20:7b:72:f8:5f:42:
         ca:a0:7e:f8:b4:3d:8a:26:98:02:2c:d6:67:dd:82:44:b7:62:
         92:d3:8f:23:7d:d3:90:fc:78:44:d8:a0:bb:7a:aa:a8:34:f0:
         42:fc:5a:cf:97:c2:2e:25:cf:73:0f:8c:fd:57:a4:25:fe:b0:
         fa:93:6c:d3
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUKUuMloYbLI6Mb78ygGppoUCT8aUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDAzMDZaFw0yNzA1MjEwNDA4MDZaMDMxMTAvBgNV
BAMTKEU0MzM5MjJGQkQ2Rjc5MDhFM0E3RjA4QkY4NkMwM0RCMjNCN0ZGMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLwt23HCmuyxGV/KTxHWU0+PFV
93YIJp9//YzO2DiMkLrvNTSjIiLfL1U4mJiNl4Jla3wh74mB7233dpwY2lqkq+Hl
QO9xhQI0GrLM3x0ACXE195Afa7k4KVKMB1Q4n4Yn6Ohv1lP6wc3FoNAxVYu0eKYt
/DffQtLAp6SYRcItwnW9ptTH+Gp9Oc8kstMY3BjXq+OLCkg0GInN2rARVxVjUCWF
kPMcBkCOAMheZ0NhFXHEKAkM2+ClCPkMe6VASmAqoWEfLloiqJOtTubJ01yLG2xW
vXhf6LMzhuYzGTT8d1/0q0CSjk9vZyT4r1xGsg0XdRldbZ9wgGk95xlSI+ZtAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU5DOSL71veQjjp/CL+GwD2yO3/xQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMDYwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqhmjANBgkqhkiG9w0BAQsFAAOCAQEArap8
22uWXwIhcYJkBCtV/beeMwQQbjAMQuOTJ7pmyAfksiF/Qzdu0qVTakTcX+QF/Bsc
1MNY4QPzjTemOMWa9MaeGNpGfxbwaR5lS8WAW2KzN+UhYbkjCN2/q44bUhRA7XZT
Du1hBl2sj2LHA6ORxDwJ5+jaU2mzUwfKLK/TwhsVDL/nZ/WTjwdkMHn5rU3ZFvtD
smmoXlEfdQRAKc74mx1+Oftbzn9vKzS7emZPDmOfOzIpR4tZfofQwAIJdVM7IHty
+F9CyqB++LQ9iiaYAizWZ92CRLdiktOPI33TkPx4RNigu3qqqDTwQvxaz5fCLiXP
cw+M/VekJf6w+pNs0w==
-----END CERTIFICATE-----