Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143113.roa
File:                     AS143113.roa (raw, json)
Hash identifier:          HzkmyKTiCSCIkFafQ6FXkSoTjEKoKEgz2Z3S6VkgJ2M=
Subject key identifier:   40:4A:7A:76:69:CA:84:D9:A0:DE:9A:62:F5:FB:51:22:A7:FD:DF:66
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       652F1DB68598A66B68D16FC0585032DA2B0874C3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143113.roa
Signing time:             Fri 22 May 2026 06:58:49 +0000
ROA not before:           Fri 22 May 2026 06:53:49 +0000
ROA not after:            Fri 21 May 2027 06:58:49 +0000
asID:                     143113
IP address blocks:        240a:a1cf::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:2f:1d:b6:85:98:a6:6b:68:d1:6f:c0:58:50:32:da:2b:08:74:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:49 2026 GMT
            Not After : May 21 06:58:49 2027 GMT
        Subject: CN=404A7A7669CA84D9A0DE9A62F5FB5122A7FDDF66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:07:52:bd:db:d5:dd:f0:4a:55:4e:e5:12:dd:
                    de:d3:5d:c3:2d:e4:47:7d:dd:01:17:f5:7c:cc:cb:
                    78:58:cd:e5:b5:8c:55:88:92:51:78:3f:07:05:fc:
                    b7:1b:de:40:0e:60:f8:27:c8:25:fd:61:0c:fa:62:
                    6a:b7:41:53:02:3e:97:9a:83:ae:e8:38:65:06:0b:
                    2a:3c:3b:57:d5:d6:fc:d9:09:71:af:99:59:8b:4a:
                    5f:96:9f:d0:4c:cf:d5:56:57:93:f2:b7:a5:7f:7f:
                    48:d4:72:11:0a:d3:51:b1:c1:2b:42:79:7c:d7:38:
                    ab:19:fe:16:ef:e0:f8:df:7e:5f:db:a0:9a:97:19:
                    9a:29:f5:f3:89:f3:77:ad:23:27:94:1e:a4:bd:88:
                    f5:71:7b:8f:81:97:55:5c:7c:7e:cc:0a:f2:36:50:
                    66:87:d1:a3:a1:62:b9:47:37:8f:aa:8e:a5:5a:56:
                    36:80:ea:7b:13:5b:8e:96:a7:f6:0b:57:cc:ec:30:
                    b1:92:4b:e4:c7:cb:94:e2:bc:02:39:22:a1:1a:12:
                    e4:73:56:14:72:76:43:eb:23:d2:b0:d6:0c:aa:8c:
                    f1:c8:a5:af:df:9d:ae:90:35:f0:e0:35:fc:ff:7a:
                    b5:2c:11:21:9c:04:80:02:48:98:f9:d3:ab:89:e2:
                    05:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4A:7A:76:69:CA:84:D9:A0:DE:9A:62:F5:FB:51:22:A7:FD:DF:66
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143113.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a1cf::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:aa:bc:2c:50:1f:40:1a:3b:0a:b4:d9:c7:9f:aa:5b:19:c7:
         17:72:9b:23:32:56:af:79:b1:7b:60:d4:45:dd:d8:15:46:f4:
         e2:ae:c5:38:60:28:e3:aa:a9:dd:26:ab:7b:e2:83:99:f4:f6:
         c5:68:27:91:f8:80:b1:f8:09:ba:91:b8:77:93:6d:37:dd:0a:
         30:7e:a6:cd:83:67:b4:0b:f0:84:ae:45:b8:df:46:a2:32:2b:
         8f:86:30:0a:ab:99:14:4c:9a:87:70:dd:0e:ca:11:42:cf:72:
         1f:55:5f:ca:72:29:69:92:53:1f:5d:e8:3e:b0:d4:9b:a3:f1:
         fb:dc:89:8f:42:f1:fc:d0:62:09:34:f1:af:52:f0:b0:29:4f:
         51:5a:18:d7:17:92:c7:36:0b:08:b0:50:13:30:a6:d4:09:bf:
         c0:d6:71:d1:30:f2:c9:21:99:06:48:64:58:a2:64:e1:60:fd:
         79:1b:ce:3e:5a:23:ba:85:3d:99:97:84:7e:02:f8:f5:e0:d9:
         90:43:70:2c:2a:26:39:4e:e8:8b:ae:08:d8:0f:17:9b:f6:8b:
         1d:d4:0a:3c:c8:78:e3:2f:43:3d:1b:cf:9a:26:16:8c:21:64:
         29:b5:cd:00:f7:f2:b7:0e:32:ee:7d:c5:ea:10:f1:d8:b9:ab:
         71:73:b9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----