Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143106.roa
File:                     AS143106.roa (raw, json)
Hash identifier:          VCcoWDAf6kKi0X2oSE1wBirXDpbvClgOMcrYoQv6x3M=
Subject key identifier:   9C:29:FF:45:11:D2:33:5F:83:AB:20:CB:63:BC:A7:D9:C8:35:FA:D3
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7910ED6E8F61588D11DFF514BE02C9E5EA6C41E4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143106.roa
Signing time:             Tue 26 May 2026 08:52:48 +0000
ROA not before:           Tue 26 May 2026 08:47:48 +0000
ROA not after:            Tue 25 May 2027 08:52:48 +0000
asID:                     143106
IP address blocks:        240a:a1c8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:10:ed:6e:8f:61:58:8d:11:df:f5:14:be:02:c9:e5:ea:6c:41:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 08:47:48 2026 GMT
            Not After : May 25 08:52:48 2027 GMT
        Subject: CN=9C29FF4511D2335F83AB20CB63BCA7D9C835FAD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bc:2e:f1:7d:22:9e:b9:46:7d:83:20:0e:f8:
                    d8:5f:94:63:c8:9e:cc:ee:b3:da:d2:5f:91:bf:05:
                    2a:f8:be:8a:39:aa:98:8f:7b:4d:9a:91:f5:55:8a:
                    cf:d0:dd:39:e1:54:6d:bd:19:4d:d9:87:c7:62:fc:
                    6a:a0:84:48:24:be:7e:e8:02:ac:83:8c:91:2a:ab:
                    b8:54:e2:8d:53:92:62:93:9b:f5:ad:29:78:b9:f2:
                    7d:5f:a9:8a:b8:27:84:06:4b:40:27:3b:b3:1d:6f:
                    de:95:83:b1:50:61:56:93:8d:9c:95:f7:0d:75:80:
                    03:b7:a5:f6:f3:4d:7a:90:2e:57:4c:7a:cc:26:81:
                    8f:13:17:cc:7a:94:4c:de:e8:50:4c:b2:89:cb:22:
                    93:59:34:50:f4:1e:26:64:ff:98:b4:ef:cd:99:e5:
                    78:3b:b4:92:23:c0:83:92:2a:76:bd:5c:f5:d3:31:
                    dd:d9:05:b7:67:d9:8e:71:c5:8a:b3:b2:37:3e:cf:
                    9a:80:21:92:cb:77:94:44:07:1c:30:29:34:96:48:
                    2c:40:0b:66:4a:e8:84:8f:76:29:9a:d6:34:fb:54:
                    85:f9:6d:eb:88:41:22:31:4d:4b:32:a8:1c:aa:f1:
                    1f:fb:da:68:37:b3:e1:0c:cc:1e:49:45:a3:fc:33:
                    d5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:29:FF:45:11:D2:33:5F:83:AB:20:CB:63:BC:A7:D9:C8:35:FA:D3
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143106.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a1c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:7b:d9:e5:37:17:10:97:b6:f2:ac:db:28:83:a6:85:ff:cc:
         4b:1a:0f:92:0c:95:47:bc:30:70:52:e7:5b:3c:a3:39:aa:d1:
         d3:bd:9f:e6:74:52:dc:05:73:ec:54:57:21:3d:56:c6:a0:18:
         ce:ec:fc:63:2c:71:8c:0a:a9:ad:b7:81:28:76:14:88:9d:b6:
         a2:90:f3:ce:a6:f3:7f:97:4e:75:47:8c:2c:4f:c5:46:dc:55:
         96:64:84:51:4f:6e:6d:65:1e:9e:ee:57:46:dd:68:ab:eb:20:
         dd:92:e3:4b:7d:55:d1:86:37:b0:42:fd:f4:8a:a0:94:bf:26:
         20:cb:b4:1f:59:a8:1d:4d:e2:a6:7c:ca:f9:40:89:1d:99:cc:
         dd:7c:1e:86:e0:c6:dc:12:bf:6f:0e:ea:14:5b:43:d7:76:d5:
         70:eb:7a:f2:d0:76:7c:6e:9f:a0:42:73:8d:e4:46:60:06:a2:
         27:28:86:8c:c9:5a:c2:b3:1d:76:dd:b9:2a:bb:b7:fd:38:80:
         2c:8f:a3:80:d9:ef:6c:78:c0:e1:03:98:88:46:78:6d:fc:d8:
         1d:65:c8:6e:a5:d5:4e:c3:c5:ba:ec:d3:5a:8f:94:e9:8d:1f:
         6f:c7:43:05:1b:58:c6:51:08:2f:df:41:3a:1d:26:12:43:07:
         ea:1f:7b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----