Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143066.roa
File:                     AS143066.roa (raw, json)
Hash identifier:          k/5zZg2s5fg8xdQfixsPHkTTyK7tSxrsZDbYc4JZjkk=
Subject key identifier:   B7:05:CF:B7:CC:5D:78:77:6E:CC:78:68:BF:B0:47:C7:3D:E8:01:7A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       54F243DD1EA5768648BBDADE2DF068E599027C84
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143066.roa
Signing time:             Mon 25 May 2026 02:22:14 +0000
ROA not before:           Mon 25 May 2026 02:17:14 +0000
ROA not after:            Mon 24 May 2027 02:22:14 +0000
asID:                     143066
IP address blocks:        240a:a1a0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f2:43:dd:1e:a5:76:86:48:bb:da:de:2d:f0:68:e5:99:02:7c:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 02:17:14 2026 GMT
            Not After : May 24 02:22:14 2027 GMT
        Subject: CN=B705CFB7CC5D78776ECC7868BFB047C73DE8017A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:be:5f:75:c4:c1:3f:e3:e7:5c:99:4e:1b:5f:
                    78:50:1a:4f:89:8d:42:38:e3:1c:fe:e4:77:bc:01:
                    9f:75:b1:f2:c5:f4:27:9c:31:0f:31:9f:e7:7f:6a:
                    24:c3:e2:fa:b4:5a:e1:43:d7:79:72:26:56:6a:1f:
                    44:33:9c:35:2f:0f:84:5d:0a:9a:8a:75:98:ad:ae:
                    9b:cd:3d:bd:e5:aa:66:62:44:eb:1c:3e:f2:7f:d7:
                    27:17:10:74:d2:b0:00:f0:f2:2e:28:8d:7d:76:13:
                    03:37:e1:19:03:43:f7:f7:6c:f0:9a:c4:bf:15:75:
                    88:f2:54:7e:15:15:00:1d:9d:00:7e:41:6f:37:d1:
                    9f:a7:09:ed:ec:7c:87:80:bb:48:d9:9f:83:f0:3d:
                    4d:0c:52:25:ae:ab:08:3e:e4:8c:d3:11:1e:1e:5b:
                    29:27:ec:5c:a2:94:33:ef:6b:77:07:fc:5c:2c:40:
                    84:3d:10:7b:f3:d5:a0:e8:2c:10:0a:e5:d8:ac:b4:
                    d4:60:9d:07:19:96:cc:b6:8e:38:86:7a:85:f6:b0:
                    e4:75:1c:0b:b1:a8:f9:79:9f:a4:4a:5f:0a:05:15:
                    96:b8:e4:f3:1d:67:45:d5:11:bb:ae:c1:18:17:82:
                    b9:28:20:31:55:e0:c2:6c:e1:1c:04:bd:4f:cd:15:
                    41:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:05:CF:B7:CC:5D:78:77:6E:CC:78:68:BF:B0:47:C7:3D:E8:01:7A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143066.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a1a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:16:08:d3:c8:50:7d:1b:b2:7b:24:6d:64:df:45:b4:e7:08:
         c3:f9:84:8a:46:be:92:f0:49:04:70:35:0b:d7:45:5c:a6:3f:
         7e:2f:81:3c:a8:d1:ec:73:30:b3:50:54:c4:e9:4a:e1:3a:8b:
         60:2a:56:a8:af:e8:63:50:b2:fb:6f:86:9d:6e:26:82:88:a5:
         8c:7e:59:20:49:99:1c:17:df:a9:8c:09:4d:65:0d:8d:97:48:
         b6:02:ac:c6:f6:a2:b5:12:65:0e:f2:aa:88:3c:67:b1:b0:58:
         a9:0c:1d:49:96:c6:93:a2:c1:82:dd:62:c8:b1:53:86:63:f6:
         14:b1:f5:5a:ba:ff:2c:c6:19:f0:46:50:b5:52:d2:a6:7a:91:
         26:41:64:d7:29:69:2d:68:3f:06:3b:6d:48:14:55:74:bb:89:
         a3:61:55:da:09:02:5a:60:71:36:99:d9:d4:85:31:48:37:ab:
         e6:91:82:58:0a:83:19:8c:9c:9d:95:5f:aa:04:d8:c3:9b:2b:
         e0:da:e2:4b:ad:eb:52:65:65:e5:e1:10:17:02:0b:95:90:ec:
         db:8a:78:4c:09:f8:be:85:68:51:99:45:2b:4f:6b:0f:b2:7b:
         0f:32:e0:66:8f:c3:8c:79:f3:d4:93:6c:c4:b6:04:ea:69:5a:
         4a:da:52:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----