Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143114.roa
File:                     AS143114.roa (raw, json)
Hash identifier:          3p6IL4Wtk6kwV/oMUCBmC5FdCZDIhPBy2Jv+ty+cncU=
Subject key identifier:   96:5C:D8:7E:F1:BB:9C:E2:BB:BD:52:70:C3:A5:07:D6:4F:DB:75:EE
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6CB6B749470BDB2B0FA14D3FD1AF66F164DA0124
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143114.roa
Signing time:             Fri 22 May 2026 07:41:05 +0000
ROA not before:           Fri 22 May 2026 07:36:05 +0000
ROA not after:            Fri 21 May 2027 07:41:05 +0000
asID:                     143114
IP address blocks:        240a:a1d0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b6:b7:49:47:0b:db:2b:0f:a1:4d:3f:d1:af:66:f1:64:da:01:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:36:05 2026 GMT
            Not After : May 21 07:41:05 2027 GMT
        Subject: CN=965CD87EF1BB9CE2BBBD5270C3A507D64FDB75EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fc:7e:4c:d1:1a:06:ba:bd:e8:e1:82:29:4c:
                    ce:da:69:5a:4b:03:bd:d2:cb:22:e9:25:ad:12:10:
                    3f:8f:9f:c3:95:8f:a8:4e:6c:ac:ea:c2:4c:d2:ac:
                    10:b0:38:0d:92:ba:32:c3:e3:c7:79:13:13:0c:0e:
                    be:b6:54:c6:e2:d0:06:02:4b:78:93:fc:df:c6:5c:
                    43:d2:fa:9d:63:a4:8e:a0:14:4d:63:4f:94:52:bb:
                    6e:27:09:96:f0:e7:77:4e:bc:8d:e8:c2:5e:a8:78:
                    51:53:dc:ad:b3:31:4b:0c:30:6a:ef:59:a9:34:6e:
                    b4:90:4b:30:04:9e:e1:13:23:37:a0:35:83:fc:c6:
                    79:9b:68:8d:92:e9:2c:ca:61:1c:32:2e:1f:0f:a8:
                    a5:ed:d7:ee:b5:67:38:df:0c:53:ba:ba:9f:8a:bd:
                    c6:94:d3:37:6a:4e:22:25:59:0a:80:f7:d3:6c:eb:
                    8a:26:8a:3a:2d:d0:2d:2d:f1:6b:62:bc:22:00:5f:
                    61:09:80:61:a0:0a:d6:7e:20:fd:a4:ab:11:53:b4:
                    2f:c2:6b:04:71:74:96:6d:97:c8:aa:87:75:a9:1f:
                    78:2a:8b:4c:f3:01:a5:18:d2:74:54:ac:61:7b:6e:
                    71:cf:a7:d9:c7:94:90:4f:8c:7d:75:62:e0:2c:b2:
                    4d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:5C:D8:7E:F1:BB:9C:E2:BB:BD:52:70:C3:A5:07:D6:4F:DB:75:EE
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143114.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a1d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:00:71:ab:04:85:74:b7:e7:82:ab:00:a5:16:68:09:07:52:
         83:2b:ac:e5:3f:9b:a5:e6:7e:23:66:42:bd:ab:0b:96:2c:bf:
         f2:37:89:7e:3d:5e:40:70:2b:b7:7a:a2:1f:fa:15:fe:9e:1f:
         40:85:60:5f:5e:a0:8a:38:bc:ec:4b:e4:1f:a0:cc:07:09:ac:
         51:98:0d:5f:8d:4c:76:ae:07:4e:3e:4d:6c:cf:df:2f:b9:21:
         cc:57:7f:4e:b1:36:1c:d0:f8:f9:ff:4c:20:d8:c3:f2:0c:15:
         38:92:fc:f4:43:00:39:4b:99:7c:ea:be:4c:b8:d6:10:a9:44:
         67:48:ea:2a:a2:28:0b:44:a4:5b:0e:d4:c7:d6:14:c4:e4:ff:
         a6:71:13:87:e5:a7:93:dd:f2:d9:9d:a0:07:de:e0:90:8f:29:
         3c:1c:38:b5:bc:ee:63:db:59:17:38:d7:d0:6a:e9:c2:00:ea:
         b6:d5:0c:32:48:0f:b1:e7:58:dc:1b:7f:de:d6:c1:25:f7:32:
         67:b8:c8:3e:22:f9:e3:5d:bb:8a:11:e3:95:e8:4d:a4:cf:95:
         5d:29:ec:34:d1:be:09:c1:47:66:67:99:55:69:da:16:57:0e:
         f4:7a:ae:b5:17:c7:73:fb:84:ce:43:39:5b:8b:98:ed:2e:6b:
         cb:e2:cf:59
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUbLa3SUcL2ysPoU0/0a9m8WTaASQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzM2MDVaFw0yNzA1MjEwNzQxMDVaMDMxMTAvBgNV
BAMTKDk2NUNEODdFRjFCQjlDRTJCQkJENTI3MEMzQTUwN0Q2NEZEQjc1RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq/H5M0RoGur3o4YIpTM7aaVpL
A73SyyLpJa0SED+Pn8OVj6hObKzqwkzSrBCwOA2SujLD48d5ExMMDr62VMbi0AYC
S3iT/N/GXEPS+p1jpI6gFE1jT5RSu24nCZbw53dOvI3owl6oeFFT3K2zMUsMMGrv
Wak0brSQSzAEnuETIzegNYP8xnmbaI2S6SzKYRwyLh8PqKXt1+61ZzjfDFO6up+K
vcaU0zdqTiIlWQqA99Ns64omijot0C0t8WtivCIAX2EJgGGgCtZ+IP2kqxFTtC/C
awRxdJZtl8iqh3WpH3gqi0zzAaUY0nRUrGF7bnHPp9nHlJBPjH11YuAssk0pAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUllzYfvG7nOK7vVJww6UH1k/bde4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMTE0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqh0DANBgkqhkiG9w0BAQsFAAOCAQEAnQBx
qwSFdLfngqsApRZoCQdSgyus5T+bpeZ+I2ZCvasLliy/8jeJfj1eQHArt3qiH/oV
/p4fQIVgX16giji87EvkH6DMBwmsUZgNX41Mdq4HTj5NbM/fL7khzFd/TrE2HND4
+f9MINjD8gwVOJL89EMAOUuZfOq+TLjWEKlEZ0jqKqIoC0SkWw7Ux9YUxOT/pnET
h+Wnk93y2Z2gB97gkI8pPBw4tbzuY9tZFzjX0GrpwgDqttUMMkgPsedY3Bt/3tbB
JfcyZ7jIPiL54127ihHjlehNpM+VXSnsNNG+CcFHZmeZVWnaFlcO9HqutRfHc/uE
zkM5W4uY7S5ry+LPWQ==
-----END CERTIFICATE-----