Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143170.roa
File:                     AS143170.roa (raw, json)
Hash identifier:          H74FlBHPWkjK+gmOxdpzLous5djYL2VzZrt+fgk2Jrw=
Subject key identifier:   6C:B6:5F:37:4D:05:0A:21:53:3B:B1:19:90:B1:8E:29:A6:CF:F0:B7
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       54157815D693820988C1A2EE30894CA1B906F618
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143170.roa
Signing time:             Fri 22 May 2026 06:46:03 +0000
ROA not before:           Fri 22 May 2026 06:41:03 +0000
ROA not after:            Fri 21 May 2027 06:46:03 +0000
asID:                     143170
IP address blocks:        240a:a208::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:15:78:15:d6:93:82:09:88:c1:a2:ee:30:89:4c:a1:b9:06:f6:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:03 2026 GMT
            Not After : May 21 06:46:03 2027 GMT
        Subject: CN=6CB65F374D050A21533BB11990B18E29A6CFF0B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f9:27:fa:df:ab:96:1f:2e:ba:2d:cb:9c:9d:
                    24:1d:bf:f5:16:12:e6:da:48:cd:81:a5:1b:73:c0:
                    14:d8:4c:fd:61:ae:86:b3:45:fd:4e:75:4e:c0:74:
                    fb:bd:c2:89:02:83:40:7d:e2:cc:fc:7e:c0:f4:a8:
                    df:61:2d:2f:29:aa:29:47:ce:fa:6d:8a:56:47:5e:
                    13:63:a3:39:27:33:ef:7e:ff:e9:c8:eb:11:38:26:
                    5b:78:7f:36:96:8e:15:a7:ae:4f:4a:df:e0:79:b5:
                    7a:93:9f:e2:2d:3e:5d:10:49:08:08:f4:b1:30:2d:
                    66:23:23:fc:74:09:34:f6:ff:f3:44:5c:2b:6f:94:
                    ac:e1:4e:9a:ad:2e:c6:f5:83:4d:5b:e7:e9:1c:2c:
                    af:5a:b4:fb:db:3d:7e:bc:05:03:c5:c1:a1:76:47:
                    d5:7b:5a:a0:b2:15:c6:ee:89:5a:f5:c7:31:0a:99:
                    d0:a5:cc:ea:6f:9d:ab:6a:b4:4d:bb:7f:e6:80:33:
                    9f:9f:04:86:4f:f5:bd:d2:2d:ed:57:60:9c:c0:25:
                    97:1e:9e:63:9e:6b:05:50:ac:f1:7b:d1:f6:ef:0c:
                    d6:6f:7d:ae:2c:af:b8:84:0b:c8:41:ba:5b:3c:c7:
                    31:77:3c:bb:ed:c2:f7:67:d8:47:0e:f1:fb:9c:03:
                    d8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B6:5F:37:4D:05:0A:21:53:3B:B1:19:90:B1:8E:29:A6:CF:F0:B7
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143170.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a208::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:c1:65:94:b8:d8:ba:ef:37:90:4c:75:66:a7:a8:a6:0c:ae:
         09:d5:b3:ae:98:2b:02:7b:49:76:c2:7d:bd:62:3a:86:78:c2:
         4a:b0:ed:b8:ea:cf:e3:94:7f:de:51:16:c4:bd:42:c2:dd:2e:
         8a:fc:a6:ff:17:0f:bc:fc:cd:60:72:ab:e7:5f:74:f1:90:e0:
         53:b1:45:a2:1f:47:33:aa:96:d9:f6:f3:15:0c:fe:d7:87:4e:
         66:ed:27:fb:ad:e3:f4:33:fc:9f:11:ff:64:b3:64:1a:ff:4a:
         58:40:04:e3:99:6d:38:86:4a:be:9a:dc:07:c3:2b:53:90:6d:
         fc:78:b7:ca:fe:7b:87:ba:d7:e9:74:b1:46:91:16:d2:8a:6f:
         ca:91:42:36:e3:e7:ce:02:6f:66:36:11:1b:dc:5b:f4:a2:c3:
         92:8d:79:73:bb:c1:ee:08:22:68:27:a9:e1:6a:a6:27:62:ab:
         f9:40:42:3c:c0:f5:03:81:eb:1d:78:7c:01:c1:0d:d1:14:55:
         9c:14:d3:d4:e7:08:0d:7e:1a:84:2c:61:eb:95:3a:b7:ba:a7:
         c7:d4:44:80:ca:fc:bc:69:69:bf:b4:f5:be:23:68:77:94:49:
         67:11:84:5c:06:dc:34:46:a6:87:c9:e4:2c:bf:10:09:82:25:
         74:ec:54:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----