Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143134.roa
File:                     AS143134.roa (raw, json)
Hash identifier:          getGMCj1RoA+kxN71OFyhblDXgmsXQbo7wA7TGPNkaA=
Subject key identifier:   4B:A8:9A:C6:6D:37:FF:E5:58:63:00:03:02:55:B3:F6:A5:0F:36:CC
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       744470EFD36E79844B213CD541815AEB334A5C5B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143134.roa
Signing time:             Mon 25 May 2026 01:19:58 +0000
ROA not before:           Mon 25 May 2026 01:14:58 +0000
ROA not after:            Mon 24 May 2027 01:19:58 +0000
asID:                     143134
IP address blocks:        240a:a1e4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:44:70:ef:d3:6e:79:84:4b:21:3c:d5:41:81:5a:eb:33:4a:5c:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:14:58 2026 GMT
            Not After : May 24 01:19:58 2027 GMT
        Subject: CN=4BA89AC66D37FFE5586300030255B3F6A50F36CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fc:6d:25:d7:02:33:92:5a:93:36:d6:7b:52:
                    52:87:99:15:1f:59:cd:7d:e7:8e:32:8c:a5:eb:83:
                    11:23:bd:22:04:4f:56:37:09:de:da:11:e9:31:af:
                    89:ed:f6:27:e7:33:b6:b2:f7:95:7d:7a:ae:ba:8c:
                    f2:9f:08:48:93:98:53:5f:ea:fe:df:44:8b:1a:5c:
                    45:d9:23:73:41:89:e3:c4:92:af:2b:ba:61:41:65:
                    76:ae:1c:f9:ed:27:5d:b8:3e:7f:01:cf:60:f4:ce:
                    f5:f6:ba:8b:18:dd:93:c7:4d:81:75:fe:3c:cc:32:
                    a2:96:47:e9:8d:65:1d:e9:f4:82:96:3e:e6:9b:ec:
                    e7:fa:85:f7:3f:e0:dd:2a:77:86:92:e1:1c:ed:07:
                    62:87:ad:9a:e0:72:b3:3e:8e:6b:6d:db:4a:13:81:
                    9c:f5:1b:0c:22:f3:b1:62:e6:31:63:66:6a:14:87:
                    d1:fb:a3:57:2b:e6:87:ce:87:73:1f:a1:e4:d8:43:
                    94:3c:e0:29:d2:98:ce:d5:3c:73:a3:d7:a4:f6:e0:
                    7f:8a:4c:76:74:6e:62:15:5f:5f:2b:9a:e1:ec:eb:
                    73:7d:47:ae:1a:08:48:74:4c:28:18:0b:36:d2:f0:
                    ca:7e:f0:50:07:2b:5d:df:62:71:ed:6d:eb:c1:79:
                    15:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A8:9A:C6:6D:37:FF:E5:58:63:00:03:02:55:B3:F6:A5:0F:36:CC
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a1e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:51:14:b2:3a:d1:ff:06:79:a8:49:b2:93:b7:51:ae:1a:36:
         08:57:7e:bf:fe:a7:b0:41:68:3b:4c:55:36:4d:c3:f9:ba:cb:
         ff:ab:bc:f0:1a:e7:0a:64:61:c3:90:5e:6e:bc:d4:3e:64:41:
         47:38:c7:2b:22:31:6f:9c:9e:54:6f:8e:c3:1f:1a:53:eb:0e:
         5c:be:ea:51:22:ae:cf:73:b4:54:20:2d:7a:04:b9:bc:62:0b:
         b5:f6:82:a4:e3:d3:37:f8:df:c2:3b:5f:7e:70:93:e3:be:eb:
         27:e1:a9:e6:e6:93:95:a4:05:9a:79:63:d6:56:23:42:10:cc:
         b2:7c:a7:da:14:7d:8e:e4:e1:37:d6:9e:94:89:5f:27:e1:79:
         c1:44:ed:37:86:f5:d9:d5:85:96:a9:e7:db:63:30:8c:02:63:
         61:1a:1d:41:43:a9:34:c8:64:4b:21:21:1e:62:cd:5f:17:9d:
         37:8d:09:e1:28:3c:e0:6c:cb:dc:02:b5:68:c4:fc:2d:f7:e4:
         7a:89:63:4a:07:77:17:84:b4:cf:b9:a5:0b:9c:06:72:17:db:
         3d:c7:42:26:39:5c:bd:ef:0f:c5:c2:cb:20:f8:ad:bc:7f:20:
         99:13:e2:b3:5b:39:23:88:ff:ff:bd:29:29:61:f0:a6:a7:36:
         74:ba:f8:43
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUdERw79NueYRLITzVQYFa6zNKXFswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTE0NThaFw0yNzA1MjQwMTE5NThaMDMxMTAvBgNV
BAMTKDRCQTg5QUM2NkQzN0ZGRTU1ODYzMDAwMzAyNTVCM0Y2QTUwRjM2Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu/G0l1wIzklqTNtZ7UlKHmRUf
Wc19544yjKXrgxEjvSIET1Y3Cd7aEekxr4nt9ifnM7ay95V9eq66jPKfCEiTmFNf
6v7fRIsaXEXZI3NBiePEkq8rumFBZXauHPntJ124Pn8Bz2D0zvX2uosY3ZPHTYF1
/jzMMqKWR+mNZR3p9IKWPuab7Of6hfc/4N0qd4aS4RztB2KHrZrgcrM+jmtt20oT
gZz1Gwwi87Fi5jFjZmoUh9H7o1cr5ofOh3MfoeTYQ5Q84CnSmM7VPHOj16T24H+K
THZ0bmIVX18rmuHs63N9R64aCEh0TCgYCzbS8Mp+8FAHK13fYnHtbevBeRXDAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUS6iaxm03/+VYYwADAlWz9qUPNswwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqh5DANBgkqhkiG9w0BAQsFAAOCAQEAQlEU
sjrR/wZ5qEmyk7dRrho2CFd+v/6nsEFoO0xVNk3D+brL/6u88BrnCmRhw5BebrzU
PmRBRzjHKyIxb5yeVG+Owx8aU+sOXL7qUSKuz3O0VCAtegS5vGILtfaCpOPTN/jf
wjtffnCT477rJ+Gp5uaTlaQFmnlj1lYjQhDMsnyn2hR9juThN9aelIlfJ+F5wUTt
N4b12dWFlqnn22MwjAJjYRodQUOpNMhkSyEhHmLNXxedN40J4Sg84GzL3AK1aMT8
LffkeoljSgd3F4S0z7mlC5wGchfbPcdCJjlcve8PxcLLIPitvH8gmRPis1s5I4j/
/70pKWHwpqc2dLr4Qw==
-----END CERTIFICATE-----