Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143061.roa
File:                     AS143061.roa (raw, json)
Hash identifier:          GK4JbHhqBk3MrxklkN3b8wLbdRAcfByDHS4zODIiELI=
Subject key identifier:   06:D9:B1:1F:03:9B:93:61:10:34:E4:FD:87:3D:57:67:C6:DE:0F:6C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4105EFEB88DB6E09E9D635823C25437EC50858E8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143061.roa
Signing time:             Fri 22 May 2026 07:40:48 +0000
ROA not before:           Fri 22 May 2026 07:35:48 +0000
ROA not after:            Fri 21 May 2027 07:40:48 +0000
asID:                     143061
IP address blocks:        240a:a19b::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:05:ef:eb:88:db:6e:09:e9:d6:35:82:3c:25:43:7e:c5:08:58:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:35:48 2026 GMT
            Not After : May 21 07:40:48 2027 GMT
        Subject: CN=06D9B11F039B93611034E4FD873D5767C6DE0F6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:39:63:0e:e2:75:00:33:1f:a3:b7:be:cc:8a:
                    bd:e9:10:ae:75:a3:3b:02:0f:d9:e7:6a:26:d1:91:
                    ae:a7:2a:4d:50:48:f1:db:77:4e:57:67:3d:4b:8f:
                    82:45:20:50:53:02:63:9c:34:6f:46:4e:58:66:55:
                    84:8d:33:02:2d:85:c9:18:3a:8f:f7:63:ae:42:8c:
                    ce:19:92:95:93:b7:68:35:fe:30:84:d0:e2:1c:3a:
                    6c:fd:10:bf:07:57:66:b9:f0:12:2b:da:22:8d:12:
                    fb:c0:5a:5a:58:f2:a7:ad:d4:1c:f4:97:48:07:c6:
                    10:45:f3:ba:93:14:d8:fd:75:e5:7a:48:5a:0d:e1:
                    9b:19:d2:08:b9:9a:95:ef:d8:70:b0:06:02:f3:65:
                    aa:ac:c3:a2:83:9e:e5:b7:ca:7e:28:5b:df:6f:a2:
                    4c:5b:3f:27:17:d4:c0:a8:13:01:b2:b4:40:c8:aa:
                    40:83:51:60:bb:02:7c:49:0d:77:4a:7e:ba:6d:41:
                    75:67:9f:69:0c:41:60:f0:a3:3e:bd:a6:c4:82:f4:
                    3e:0a:84:1d:69:6a:9e:11:9c:3a:19:dd:7e:2a:eb:
                    83:c3:ef:81:5e:ea:34:4a:04:ed:d9:3f:21:24:f9:
                    bd:ae:fe:7b:9e:51:66:e0:20:e3:60:f4:ee:95:23:
                    90:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D9:B1:1F:03:9B:93:61:10:34:E4:FD:87:3D:57:67:C6:DE:0F:6C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143061.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a19b::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:c7:43:b9:31:4b:be:e4:19:ad:07:c1:1b:87:d6:81:bd:3a:
         b4:c9:77:e9:49:29:dd:c4:04:0a:ef:56:3b:63:93:a5:2e:85:
         ab:23:d0:65:8e:e3:b6:08:57:7e:60:78:18:fc:8c:8e:ef:2a:
         2f:86:5e:72:56:b5:4e:e6:51:09:16:24:e6:6a:56:24:9f:28:
         48:a5:ff:a7:ef:28:71:bf:d4:18:8e:a6:87:e2:84:8e:50:43:
         8c:1a:ab:93:6c:a6:72:88:a5:29:7a:d1:e5:69:84:1e:2d:fe:
         9c:ae:8e:ab:f7:77:0a:ec:5b:fa:ae:d1:a9:33:23:6b:4a:84:
         4b:a4:e5:92:d8:7c:2d:88:ce:99:21:2a:ca:72:aa:a6:cc:1e:
         d9:42:c1:85:49:61:32:8a:2d:e9:16:1f:cd:25:41:fe:bb:f5:
         1c:12:b7:7e:aa:b6:f7:c2:ad:49:01:56:10:a1:52:0f:d6:5e:
         71:89:c8:34:65:2a:79:52:c3:f1:8a:34:eb:52:df:d9:df:5b:
         d8:a0:9f:19:92:56:a3:1c:a3:e0:8e:43:e3:e2:c3:2c:e0:be:
         d7:40:d7:fe:c2:78:f1:90:9e:d9:0c:0b:84:40:cd:8b:3c:40:
         a1:d0:a1:a0:d2:32:6d:4b:3e:d2:56:b3:19:b3:22:b7:44:29:
         47:b6:ea:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----