Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143093.roa
File:                     AS143093.roa (raw, json)
Hash identifier:          ZMbplQdIBMpDFZV2hcn38xNcDbhyWat0lDfCfeyixj4=
Subject key identifier:   C7:DD:16:E7:9C:2A:B3:DD:0E:A1:17:89:8D:F5:A5:11:DC:43:FA:C7
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       693C336F670103AC26BF70DF74495C2FE25CB695
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143093.roa
Signing time:             Mon 25 May 2026 06:28:12 +0000
ROA not before:           Mon 25 May 2026 06:23:12 +0000
ROA not after:            Mon 24 May 2027 06:28:12 +0000
asID:                     143093
IP address blocks:        240a:a1bb::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:3c:33:6f:67:01:03:ac:26:bf:70:df:74:49:5c:2f:e2:5c:b6:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:12 2026 GMT
            Not After : May 24 06:28:12 2027 GMT
        Subject: CN=C7DD16E79C2AB3DD0EA117898DF5A511DC43FAC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e7:c6:07:26:e4:12:50:91:b8:b2:22:3d:0d:
                    d6:d1:3c:6d:59:d8:b2:ee:07:ab:89:1f:70:09:ae:
                    89:db:a5:09:a4:1f:00:f7:3e:c8:08:8f:e2:28:d0:
                    60:5a:09:9e:0d:fe:55:c8:2f:28:97:7f:d1:2a:8e:
                    8a:d2:1e:88:94:10:30:59:63:59:ab:db:d4:37:aa:
                    09:3f:f6:39:05:52:f0:2d:18:b5:40:76:03:39:d7:
                    56:79:47:ce:32:40:7d:b6:ad:85:3b:b4:89:a1:32:
                    39:96:fc:1e:de:da:05:b8:5f:9f:37:35:b7:99:cd:
                    e2:1c:3b:82:e2:1a:9c:8c:e2:ef:7e:af:8b:4f:83:
                    3c:9a:1d:eb:28:b8:fe:4c:3e:1a:0f:74:17:72:69:
                    6a:b3:e0:36:4c:6d:06:f8:aa:63:55:93:84:96:06:
                    e2:4e:24:f1:f5:cc:1c:1a:35:88:c9:4f:09:5b:f9:
                    1b:98:8d:43:bc:f9:ba:e5:cc:56:5a:36:ca:b1:08:
                    f5:d2:71:a8:b3:0b:ce:5b:66:92:8c:07:95:92:f8:
                    e6:ad:50:42:d9:0d:99:91:fb:7b:48:ff:31:6a:f2:
                    61:3c:d8:25:d9:52:83:5f:a8:9a:50:96:30:1b:6e:
                    1d:1b:ce:50:0a:7f:08:19:9a:dc:0f:3d:5b:ad:15:
                    88:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:DD:16:E7:9C:2A:B3:DD:0E:A1:17:89:8D:F5:A5:11:DC:43:FA:C7
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143093.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a1bb::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:e3:47:a4:d0:02:3a:f9:0f:5c:6d:22:a5:9e:c0:16:9b:a2:
         71:7e:c4:64:6b:04:e7:9c:84:db:10:d1:26:da:87:a6:fb:a5:
         ec:66:63:55:12:f1:42:5f:e9:3f:5a:2f:ee:f0:e3:ff:37:30:
         36:7f:45:66:c9:8b:31:28:bd:a6:17:18:06:ef:e5:c0:4e:50:
         95:b9:9e:f5:e6:02:43:a9:75:9a:1d:23:a1:ff:2d:01:5e:a1:
         76:2e:e2:c5:6a:2f:a5:01:64:55:44:85:df:72:d7:47:e0:d9:
         da:33:22:77:46:13:75:5f:dd:d9:95:f4:b6:84:f0:85:e7:bb:
         1e:df:79:7b:86:2c:72:c5:d2:90:ff:e0:12:5d:2d:f6:62:ff:
         87:ec:26:5a:4d:bc:1a:d8:46:c0:e8:10:22:ca:20:e5:7a:cd:
         3e:32:7f:bd:7d:ca:f7:52:c3:96:f9:9b:60:1d:a8:18:bf:ee:
         35:b8:0c:80:b1:df:04:7f:28:6a:96:67:4f:3c:b8:92:29:ca:
         32:05:6e:9b:af:03:9c:4b:33:d5:90:ed:4a:e5:85:29:7d:2f:
         cf:a7:9c:96:b6:53:9b:88:c9:e1:2d:2a:e0:18:39:3a:dc:e8:
         cf:52:a2:70:b1:3f:66:f4:e3:6f:83:0f:87:b2:d9:61:3f:77:
         53:ae:8e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----