Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143169.roa
File:                     AS143169.roa (raw, json)
Hash identifier:          LoobzBIw+SsRjg5XN8p0DHsTxAJSVdrvn2TBL/Uxhpg=
Subject key identifier:   F0:C5:22:8B:EF:44:9D:78:1B:37:B6:25:26:E7:A8:B7:E1:A7:36:27
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       49AF4C143328F68EA52D5024E71C25B55F955A56
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143169.roa
Signing time:             Fri 22 May 2026 06:05:43 +0000
ROA not before:           Fri 22 May 2026 06:00:43 +0000
ROA not after:            Fri 21 May 2027 06:05:43 +0000
asID:                     143169
IP address blocks:        240a:a207::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:af:4c:14:33:28:f6:8e:a5:2d:50:24:e7:1c:25:b5:5f:95:5a:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:00:43 2026 GMT
            Not After : May 21 06:05:43 2027 GMT
        Subject: CN=F0C5228BEF449D781B37B62526E7A8B7E1A73627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a7:5c:9b:81:69:54:f0:a5:25:dc:84:30:d3:
                    13:56:ac:83:d0:0e:d3:7a:6f:63:d0:9f:41:d7:57:
                    03:26:aa:cd:c5:d4:a3:1b:5e:0b:1e:2f:05:75:97:
                    d2:78:1a:8e:e6:4b:22:4a:88:7d:1b:83:54:0f:87:
                    3b:38:33:49:48:3c:0b:5c:93:73:12:ec:d5:bd:fe:
                    03:89:05:eb:e4:f7:dc:91:80:d2:5c:2f:7e:cf:f7:
                    45:a1:3d:b4:e1:4e:7a:e3:68:8e:8b:dd:78:d1:c1:
                    62:5e:c8:12:f6:81:9b:a4:a5:42:6f:c2:5e:0b:b4:
                    cd:22:52:53:b8:33:97:ef:e8:a0:d3:f0:1b:dd:69:
                    b8:16:c5:b2:c6:ad:69:c2:21:9c:6c:b0:ce:5e:61:
                    6a:63:70:9e:16:0d:e4:e7:fa:9f:fd:55:4b:13:40:
                    c6:47:27:52:3a:e8:1e:91:54:d7:6d:93:00:31:2f:
                    90:76:fb:db:62:75:af:91:9f:47:51:57:25:76:e7:
                    09:24:84:f2:f9:d9:1f:df:93:8a:c7:4a:01:5d:5d:
                    f0:ff:f0:23:6a:25:33:0f:b2:41:1a:d1:e7:40:7c:
                    7e:12:f2:ab:7e:6f:c3:94:73:c8:5a:97:64:cc:8c:
                    32:12:7c:98:6e:d2:89:d2:c7:af:0b:7e:5a:5e:b0:
                    9e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C5:22:8B:EF:44:9D:78:1B:37:B6:25:26:E7:A8:B7:E1:A7:36:27
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143169.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a207::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:d9:c1:d0:0f:d7:40:12:21:5d:eb:29:68:17:fd:8c:c9:ce:
         6d:2e:60:fe:f3:e4:42:6a:29:32:5e:87:cb:52:8f:a0:ee:04:
         e0:48:35:5c:19:d6:4a:44:29:4d:d6:d7:34:00:a6:a2:18:dd:
         00:9e:c8:2c:87:27:59:ec:ba:32:c6:2e:04:99:8b:1a:85:e5:
         b2:57:23:92:d3:5e:c3:9e:b9:f4:dd:56:f5:ed:a7:c2:7e:67:
         92:a4:f8:f5:21:15:a4:30:df:de:f9:b5:15:df:f2:bd:1d:f7:
         54:f0:46:38:c1:82:89:ad:6f:93:dd:0d:4d:cc:bd:ed:5c:2b:
         5a:6f:f8:11:0f:8b:c5:b4:2a:b3:d9:8d:2b:f0:fa:80:55:c2:
         d9:70:11:57:e0:51:bb:ca:3f:29:f6:f4:ca:d1:59:8e:78:f1:
         4a:1d:a9:15:81:22:3f:6a:fe:22:da:3d:42:1c:ba:66:77:d4:
         9e:12:37:3b:e4:9a:2a:ca:f6:17:2e:fa:eb:6e:39:9c:de:03:
         56:b4:4a:e6:9e:a1:9e:a0:04:8c:da:97:49:db:f6:45:7b:e9:
         45:2a:6a:b7:c5:a1:68:49:9d:5b:e0:b8:2a:b2:0b:1b:4f:30:
         af:a3:7d:94:a3:90:88:4f:e1:11:e3:fe:c3:51:7f:6a:ac:86:
         e1:9b:bf:c3
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUSa9MFDMo9o6lLVAk5xwltV+VWlYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjAwNDNaFw0yNzA1MjEwNjA1NDNaMDMxMTAvBgNV
BAMTKEYwQzUyMjhCRUY0NDlENzgxQjM3QjYyNTI2RTdBOEI3RTFBNzM2MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCep1ybgWlU8KUl3IQw0xNWrIPQ
DtN6b2PQn0HXVwMmqs3F1KMbXgseLwV1l9J4Go7mSyJKiH0bg1QPhzs4M0lIPAtc
k3MS7NW9/gOJBevk99yRgNJcL37P90WhPbThTnrjaI6L3XjRwWJeyBL2gZukpUJv
wl4LtM0iUlO4M5fv6KDT8BvdabgWxbLGrWnCIZxssM5eYWpjcJ4WDeTn+p/9VUsT
QMZHJ1I66B6RVNdtkwAxL5B2+9tida+Rn0dRVyV25wkkhPL52R/fk4rHSgFdXfD/
8CNqJTMPskEa0edAfH4S8qt+b8OUc8hal2TMjDISfJhu0onSx68LflpesJ4HAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU8MUii+9EnXgbN7YlJueot+GnNicwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMTY5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqiBzANBgkqhkiG9w0BAQsFAAOCAQEAG9nB
0A/XQBIhXespaBf9jMnObS5g/vPkQmopMl6Hy1KPoO4E4Eg1XBnWSkQpTdbXNACm
ohjdAJ7ILIcnWey6MsYuBJmLGoXlslcjktNew5659N1W9e2nwn5nkqT49SEVpDDf
3vm1Fd/yvR33VPBGOMGCia1vk90NTcy97VwrWm/4EQ+LxbQqs9mNK/D6gFXC2XAR
V+BRu8o/Kfb0ytFZjnjxSh2pFYEiP2r+Ito9Qhy6ZnfUnhI3O+SaKsr2Fy766245
nN4DVrRK5p6hnqAEjNqXSdv2RXvpRSpqt8WhaEmdW+C4KrILG08wr6N9lKOQiE/h
EeP+w1F/aqyG4Zu/ww==
-----END CERTIFICATE-----