Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143142.roa
File:                     AS143142.roa (raw, json)
Hash identifier:          BrrQCabmE6tYQ9laYXAqQoSxMbwjLGTPktxtAnO/XDU=
Subject key identifier:   F2:E4:E7:8D:84:6B:19:91:1E:6F:9F:8C:79:5A:30:75:2E:63:A3:00
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2FEBE0AEE165D9140B9D3A490707E47F049F97C6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143142.roa
Signing time:             Mon 25 May 2026 01:20:06 +0000
ROA not before:           Mon 25 May 2026 01:15:06 +0000
ROA not after:            Mon 24 May 2027 01:20:06 +0000
asID:                     143142
IP address blocks:        240a:a1ec::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:eb:e0:ae:e1:65:d9:14:0b:9d:3a:49:07:07:e4:7f:04:9f:97:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:15:06 2026 GMT
            Not After : May 24 01:20:06 2027 GMT
        Subject: CN=F2E4E78D846B19911E6F9F8C795A30752E63A300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:dc:39:66:96:18:ab:d3:6a:9a:42:cf:9c:a6:
                    3e:6c:8a:7a:4b:90:0e:5c:37:de:80:b7:16:ad:97:
                    b3:d0:18:a7:ea:0e:b3:91:07:bf:8f:80:91:00:c2:
                    dd:8c:58:78:8a:40:a8:d8:d5:c4:7b:bf:ab:24:5b:
                    4e:c9:c9:a2:e3:b5:ab:58:c8:97:04:fa:59:0a:a9:
                    94:f0:60:a8:83:07:89:23:0a:68:fe:ff:af:b1:d5:
                    ef:e7:48:0f:90:55:0c:04:2e:92:ad:fe:36:54:cb:
                    d9:76:32:26:a0:7b:07:31:14:8f:56:ca:38:61:c0:
                    67:bb:39:c3:ea:2b:c8:d4:c2:8a:00:80:6b:b1:e5:
                    b1:f7:4e:4f:cb:41:95:44:79:b6:20:de:eb:c9:15:
                    15:2f:17:7d:8f:a2:f4:0a:99:2c:81:97:cc:66:e9:
                    a1:1d:59:56:f4:54:e6:fb:35:73:be:5d:ab:c3:e8:
                    cf:b1:6a:2b:66:36:19:42:41:55:9a:66:14:d5:67:
                    e3:b0:87:11:13:e2:c3:54:43:78:44:9e:ff:5d:39:
                    7c:10:70:61:73:7c:88:c3:5c:7f:23:3f:48:82:92:
                    ff:8f:0a:a4:e1:24:c1:bf:45:0a:89:b9:4f:56:14:
                    a8:7c:1c:d5:f6:1d:d9:ca:ed:6f:16:3a:a0:b3:41:
                    76:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E4:E7:8D:84:6B:19:91:1E:6F:9F:8C:79:5A:30:75:2E:63:A3:00
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143142.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a1ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:a5:e6:cc:c6:3d:7e:94:6c:df:b9:7f:61:6f:a1:ef:e7:33:
         0b:3d:67:56:03:87:ea:cc:6a:02:58:3e:b5:35:61:7c:05:c8:
         5d:36:6b:d1:7e:09:63:a8:27:58:f2:d2:b3:f3:6b:21:3a:c8:
         b8:73:30:90:0d:7e:03:88:56:33:75:01:76:49:5e:dc:1c:e4:
         25:5e:02:2e:25:c1:a1:1c:5c:54:b4:5b:d2:6b:6b:39:0c:ad:
         1d:9e:94:74:00:66:a9:18:cc:ec:2a:22:54:1a:33:2d:81:d6:
         ac:d0:4d:b6:eb:e8:e0:0e:61:ff:45:68:e2:4d:49:58:db:16:
         1d:71:ba:a2:1c:ab:c8:da:26:4d:0d:42:42:c7:c4:b8:8d:f8:
         66:15:ee:a2:23:57:b3:2b:86:f1:a3:6b:1c:8e:18:08:4d:e4:
         a2:46:f5:ad:69:89:00:a1:ee:d9:4e:1a:04:cb:91:70:f5:2f:
         f4:81:50:95:18:fc:33:2e:03:4d:37:a3:f1:ae:2d:34:c4:d2:
         ca:ae:bf:3a:0e:ea:97:88:ac:68:36:c6:28:c7:1e:d7:44:57:
         12:37:a7:c2:d0:35:8a:99:b9:35:94:7a:a9:a3:45:a7:36:be:
         be:a4:bc:23:95:03:b6:8f:d5:b9:3e:c4:cb:c8:1f:15:b2:c5:
         18:da:28:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----