Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143115.roa
File:                     AS143115.roa (raw, json)
Hash identifier:          v4BJm4shB/zzSZYx6qyrGSwDWEZ+5i3mHMf2bMD/7pw=
Subject key identifier:   C6:3A:0B:8E:6E:2C:43:74:61:BB:D2:B3:62:18:08:1E:37:3C:21:AF
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6CD8E40791B8D4F4F9CF8F43E7E9416B22F8F8CE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143115.roa
Signing time:             Mon 25 May 2026 06:28:42 +0000
ROA not before:           Mon 25 May 2026 06:23:42 +0000
ROA not after:            Mon 24 May 2027 06:28:42 +0000
asID:                     143115
IP address blocks:        240a:a1d1::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:d8:e4:07:91:b8:d4:f4:f9:cf:8f:43:e7:e9:41:6b:22:f8:f8:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:42 2026 GMT
            Not After : May 24 06:28:42 2027 GMT
        Subject: CN=C63A0B8E6E2C437461BBD2B36218081E373C21AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bc:ef:75:b7:93:9d:e1:3b:b1:6d:c6:f9:10:
                    29:42:8d:e4:97:40:23:d1:f0:fe:a0:9e:d4:85:30:
                    0d:4e:b2:6b:f6:2d:37:53:51:09:63:2d:dc:c3:61:
                    99:9a:b4:0b:1a:91:05:29:f8:4d:cc:dc:18:ab:b4:
                    dd:1c:e4:e8:23:93:84:7d:95:df:81:74:d2:ca:3a:
                    0b:8f:69:9c:2e:88:26:c5:04:ec:8c:7c:c1:b2:7c:
                    15:7a:11:7a:55:9a:81:4f:8c:92:4d:74:b7:ae:ba:
                    7e:4a:01:ad:29:69:1f:04:e7:ff:17:32:6b:cf:2e:
                    62:93:f5:37:8b:72:b1:e9:43:99:04:15:3e:0a:ec:
                    a2:81:c7:86:a9:a4:7a:8f:fe:7d:c2:81:87:a2:39:
                    22:55:d3:6d:19:c6:11:88:0a:37:95:c2:04:92:e1:
                    cb:d0:a3:aa:ff:96:f0:eb:3e:45:a1:79:cc:7b:35:
                    0e:00:ae:18:fd:3b:e1:a3:40:d1:ed:d3:0a:4f:7a:
                    6b:e3:86:5b:72:97:18:72:6c:fc:56:12:61:06:c3:
                    64:53:12:68:3d:ec:83:16:bc:1b:f8:38:bb:2f:9a:
                    11:16:96:6c:f9:1a:a9:46:61:e5:61:72:9f:40:7d:
                    2d:0d:8a:12:f7:5b:75:dd:2b:3c:b3:b1:65:00:43:
                    43:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:3A:0B:8E:6E:2C:43:74:61:BB:D2:B3:62:18:08:1E:37:3C:21:AF
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143115.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a1d1::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:85:7c:01:48:dc:46:94:c2:50:bb:1a:ff:dd:5e:43:60:64:
         ac:07:a7:06:6d:92:dc:85:ff:cd:92:5e:1e:8d:18:d6:30:56:
         a5:45:3b:7f:1a:a8:76:0a:e8:f0:ec:4e:2f:b7:7c:ff:3d:e8:
         b3:55:ab:47:52:06:ab:4d:da:3b:f0:2a:f5:29:d4:ac:b9:a8:
         e8:2e:aa:29:5b:0d:ff:50:f1:0d:4d:e4:f7:ff:68:12:1c:72:
         c5:33:e6:4d:7c:1e:3a:da:db:7b:aa:a0:e8:a1:58:07:e5:68:
         10:52:0c:64:0d:93:5f:18:89:8f:8f:9b:b8:f1:9e:c5:14:f3:
         24:53:f3:21:65:59:f8:80:b1:b8:21:87:31:47:7d:2d:30:ae:
         de:86:14:8e:a5:ec:6d:a1:d8:48:6f:5d:dc:57:af:cb:81:92:
         96:26:54:a1:d3:41:f9:1f:4b:81:ff:c9:6f:00:7b:51:e3:53:
         f5:b3:33:fe:56:61:27:e1:f7:1b:a5:46:78:5c:42:3d:11:78:
         40:89:b6:4b:23:4e:1a:96:0b:f0:16:a4:51:1d:68:f5:26:e2:
         f0:9b:30:4c:63:e0:fd:a6:b1:61:94:a6:77:fd:43:3e:e0:32:
         cc:7f:60:bd:96:2d:0a:76:98:eb:33:d9:30:d4:20:91:1e:cb:
         20:bc:3b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----