Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143150.roa
File:                     AS143150.roa (raw, json)
Hash identifier:          YLpAndfL9g5mv70j1O82zwEHd5HcZXO3+TRiVHCQdwo=
Subject key identifier:   92:73:CE:44:CB:AC:2B:A8:60:35:96:A9:D4:8E:AB:64:20:2E:41:D2
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       52361AB0496E5420619B588CB0EA80AABEFBE31F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143150.roa
Signing time:             Mon 25 May 2026 01:38:30 +0000
ROA not before:           Mon 25 May 2026 01:33:30 +0000
ROA not after:            Mon 24 May 2027 01:38:30 +0000
asID:                     143150
IP address blocks:        240a:a1f4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:36:1a:b0:49:6e:54:20:61:9b:58:8c:b0:ea:80:aa:be:fb:e3:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:30 2026 GMT
            Not After : May 24 01:38:30 2027 GMT
        Subject: CN=9273CE44CBAC2BA8603596A9D48EAB64202E41D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:34:2b:1f:eb:d2:26:7b:2f:1a:32:21:13:92:
                    57:76:89:f3:38:8f:3d:84:49:38:80:e8:f8:37:3e:
                    2c:35:0f:11:2b:f3:38:ec:96:dd:4a:cf:cf:87:4d:
                    9d:91:52:09:40:f5:64:3c:13:3d:18:d4:d8:43:47:
                    37:9a:31:e0:07:49:2a:8b:b0:a3:1d:53:14:7a:66:
                    e1:d6:8a:3a:26:d1:e5:ca:9d:06:50:ec:be:39:84:
                    c5:dd:28:de:94:6d:e5:0e:d6:f7:a9:3f:e9:27:9d:
                    ca:82:0f:58:c4:6f:39:1d:9a:18:7e:fe:a0:b5:1f:
                    15:48:6d:1b:38:7a:42:74:fd:26:a4:7d:16:f2:23:
                    b4:77:12:b6:29:44:4b:31:1f:a1:d3:22:5a:21:14:
                    43:f9:52:9d:23:5c:3d:b4:35:2e:7d:ad:81:86:a4:
                    8c:4e:d9:8d:cd:dc:55:21:94:27:cd:07:e2:17:4e:
                    43:d2:c4:4c:b0:fc:c2:23:ce:96:c4:ec:a9:a0:5d:
                    b5:00:ff:56:72:0a:e5:26:ed:14:02:cb:15:08:43:
                    61:53:b6:a3:d8:e4:6f:56:6b:d0:d6:83:c8:4e:07:
                    21:36:b1:3e:ab:e6:51:12:ee:89:7b:1c:a7:a4:59:
                    57:87:08:39:0c:bb:ed:8a:ad:d0:a2:eb:a0:6f:70:
                    31:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:73:CE:44:CB:AC:2B:A8:60:35:96:A9:D4:8E:AB:64:20:2E:41:D2
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143150.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a1f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:c2:1f:ff:d5:fc:76:6d:72:b1:25:48:fb:78:db:0f:d1:bc:
         7c:07:b1:c0:47:ac:75:af:98:93:d7:2a:7c:27:95:5b:29:3b:
         dd:b7:3c:f7:68:2f:49:e2:13:af:e0:95:38:e8:70:55:01:89:
         73:b1:ec:64:9d:dd:28:32:a7:41:09:e3:1d:ae:8c:f0:83:90:
         02:34:1a:bb:5a:a7:42:6f:e1:af:30:e5:f7:5c:0c:8e:7d:50:
         b9:48:8b:f1:4c:29:a1:a2:17:97:39:b7:ae:ae:8c:84:ff:d4:
         09:6e:7a:f2:ba:bd:71:ba:be:06:34:b8:6c:41:63:28:70:19:
         76:ea:4e:2c:17:1c:1c:90:d1:66:42:b5:91:be:3b:49:5a:a1:
         1c:44:a9:3d:fa:fe:8a:1e:0e:08:ba:91:ac:ff:c4:19:0c:8d:
         fa:1e:0a:99:90:b0:4e:47:23:3c:a0:c1:17:17:7c:75:db:0c:
         3d:46:dd:22:6d:4d:30:c7:f9:33:10:70:a1:8b:d9:68:52:2f:
         23:cf:27:ee:35:2b:16:92:4a:10:59:76:4e:95:60:40:0b:e8:
         82:01:54:00:05:6d:e6:5e:84:e1:73:aa:ea:05:40:83:09:fc:
         82:e1:51:ac:4c:f6:a7:af:dd:ac:fa:78:61:ca:88:e4:09:1b:
         09:64:77:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----