Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143125.roa
File:                     AS143125.roa (raw, json)
Hash identifier:          v8FUl/Nd2DNIgj/+3tkbiXhH3fqA1jphci47zVoRr1o=
Subject key identifier:   7A:6F:56:ED:FD:35:4E:B3:B8:53:1D:F1:9B:D5:A7:AB:4B:6C:A0:49
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7004541CA16C19CC864956C5A565606A35FA6317
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143125.roa
Signing time:             Fri 22 May 2026 07:32:12 +0000
ROA not before:           Fri 22 May 2026 07:27:12 +0000
ROA not after:            Fri 21 May 2027 07:32:12 +0000
asID:                     143125
IP address blocks:        240a:a1db::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:04:54:1c:a1:6c:19:cc:86:49:56:c5:a5:65:60:6a:35:fa:63:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:12 2026 GMT
            Not After : May 21 07:32:12 2027 GMT
        Subject: CN=7A6F56EDFD354EB3B8531DF19BD5A7AB4B6CA049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:70:eb:63:c2:cd:99:dc:b3:53:bc:4f:6b:21:
                    f9:2c:89:56:f7:ea:6b:af:e2:15:8f:fa:56:64:65:
                    66:09:79:70:12:1a:2f:58:5d:36:b6:aa:cd:2e:11:
                    32:64:14:ce:33:97:8e:c0:ab:59:f2:b9:fc:37:59:
                    74:8e:f2:03:00:d0:7b:96:6a:82:f9:62:44:51:bf:
                    47:db:ac:8c:a6:ee:7a:13:3f:a0:1e:f3:f0:b9:a9:
                    b3:41:e0:a6:24:03:43:ad:f2:7d:90:e9:f4:bb:b8:
                    ab:01:68:09:aa:43:ca:bb:d2:7a:be:5c:67:15:ef:
                    64:6b:15:d5:2a:e2:54:3c:68:77:b8:7e:1e:cb:72:
                    09:23:9e:dd:90:27:2e:26:33:31:20:8b:72:34:86:
                    3b:d6:7f:cc:4c:70:2a:51:78:f4:a6:8f:08:70:3e:
                    8b:1a:cd:97:4e:70:1a:e1:33:51:30:11:51:59:87:
                    b7:e8:0e:89:30:0b:8a:79:97:68:e2:86:0d:29:47:
                    bc:45:79:12:da:16:d2:d6:d9:6d:78:85:8f:49:51:
                    1a:95:ab:3a:39:ab:f9:8d:c4:6d:e9:a3:e0:a5:92:
                    0e:b1:6a:2e:71:51:6b:1f:dd:b2:06:24:ec:34:b0:
                    34:ea:37:94:d6:08:96:c1:ac:57:50:02:31:af:11:
                    9b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:6F:56:ED:FD:35:4E:B3:B8:53:1D:F1:9B:D5:A7:AB:4B:6C:A0:49
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143125.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a1db::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:44:99:39:8c:bc:23:3e:1f:8f:ff:d0:9c:0f:55:95:a0:a6:
         50:0a:34:61:9f:0d:6c:a2:e9:6d:03:0f:0c:ce:3c:55:24:04:
         bb:c5:64:b9:9e:96:71:74:fe:07:6d:2d:91:c4:28:ac:22:70:
         cd:09:a8:44:fc:23:2a:55:4a:d3:0a:dc:61:47:88:c9:6c:e1:
         36:8d:c5:2b:10:05:44:76:55:f8:58:56:df:71:ce:54:b9:c5:
         f9:cc:0b:88:31:96:21:22:e8:a2:57:46:88:3a:48:73:2c:25:
         63:5e:54:00:85:21:6e:a6:72:d4:63:c0:59:5c:5e:40:e7:ef:
         ae:69:05:cf:72:07:69:c8:5e:26:fb:ed:2a:3b:9e:9a:c0:79:
         11:98:0c:64:f2:c2:19:a0:45:c2:75:d4:77:37:a0:8c:d2:a0:
         1a:d8:92:1b:45:d1:cc:74:92:bb:54:11:52:90:46:73:4a:a9:
         7b:53:20:14:d4:50:12:8f:60:78:71:62:8d:fc:e0:f4:4b:6a:
         9a:94:f4:4d:d7:53:d8:9f:3f:08:4c:c0:f6:f4:fe:bd:04:be:
         e9:b2:ab:c4:f4:67:50:33:e5:13:c6:fe:5e:84:8a:7e:4f:3a:
         ef:8a:e6:52:f9:8c:e2:2b:58:2b:42:4b:13:b2:59:d2:9d:ba:
         75:76:31:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----