Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143172.roa
File:                     AS143172.roa (raw, json)
Hash identifier:          xwvemux6Da423pnuncf72FtlWSQGvgeOQR67VFjZ/iQ=
Subject key identifier:   D4:FE:E7:DF:0F:49:D2:E4:40:46:C6:74:55:2D:85:AF:E4:61:34:2D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       63F590DFCEA1F1EB733816D0C32622E5D58721B9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143172.roa
Signing time:             Mon 25 May 2026 02:22:14 +0000
ROA not before:           Mon 25 May 2026 02:17:14 +0000
ROA not after:            Mon 24 May 2027 02:22:14 +0000
asID:                     143172
IP address blocks:        240a:a20a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f5:90:df:ce:a1:f1:eb:73:38:16:d0:c3:26:22:e5:d5:87:21:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 02:17:14 2026 GMT
            Not After : May 24 02:22:14 2027 GMT
        Subject: CN=D4FEE7DF0F49D2E44046C674552D85AFE461342D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c8:55:b6:19:65:23:be:c0:77:d0:f6:01:a8:
                    d8:50:ea:bf:cc:14:6c:3d:77:cf:37:4b:08:ad:d3:
                    5c:a4:2a:6c:e7:cf:84:47:51:60:61:5f:b5:b0:f2:
                    ed:26:ec:9b:a5:99:65:14:b6:d0:2c:73:03:53:38:
                    d8:00:ab:27:fe:f0:60:0b:c7:eb:04:e1:a6:38:44:
                    04:06:3f:9e:e2:14:b6:fc:0e:a8:eb:32:9d:7e:7f:
                    81:b6:82:da:44:d5:58:bc:78:66:96:83:9c:25:d0:
                    9a:68:5d:68:12:ce:33:48:38:0a:1f:7d:8c:4e:a1:
                    c6:7e:88:a9:d8:f9:40:70:10:fc:2b:5a:dc:58:40:
                    7c:87:20:99:25:f4:be:56:39:1d:79:8a:69:48:03:
                    df:27:c7:61:65:40:5b:a5:86:16:8d:32:e1:f0:12:
                    fe:de:4a:ab:2f:1a:ff:3d:bc:65:62:8b:03:af:7d:
                    8f:86:f5:ac:20:43:05:1f:2d:55:3e:da:c2:49:ff:
                    87:ba:96:34:00:0b:ea:3b:39:51:5d:e0:ff:68:20:
                    f5:95:7e:b8:fc:06:19:15:a6:f2:65:6e:fd:77:33:
                    4e:92:ca:52:86:e8:f8:94:88:87:0c:74:b2:08:16:
                    da:3f:a7:d9:e6:04:df:d2:27:ae:a6:d7:dd:1d:a4:
                    e8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:FE:E7:DF:0F:49:D2:E4:40:46:C6:74:55:2D:85:AF:E4:61:34:2D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143172.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a20a::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:94:d8:10:4d:d5:c0:7e:f5:da:01:22:7e:d2:eb:27:b3:62:
         5a:0b:37:43:c8:e6:2d:9c:0a:1b:86:c7:1e:51:5d:03:5e:33:
         d2:b3:82:23:bd:be:9c:4f:0f:6b:fc:cf:79:aa:a8:40:c4:54:
         1d:1c:12:c0:44:86:5d:a4:f5:5b:83:3a:cc:57:20:c4:ac:56:
         a6:90:50:20:76:d8:13:18:95:33:44:b2:b5:bb:68:f0:83:40:
         6c:6f:59:eb:d2:ac:c4:e3:2e:28:5f:e8:c6:f8:6d:16:bf:91:
         3c:f7:ea:f0:88:5a:8c:33:ba:42:45:e6:ac:ec:06:9a:3a:2a:
         71:56:4c:8e:eb:cd:a5:da:20:33:ea:8a:6d:05:fa:29:45:99:
         4c:eb:4c:cf:32:e5:df:93:80:9f:31:e0:1d:15:72:52:21:64:
         6f:5c:3e:a1:54:ba:84:13:68:95:d1:ac:c1:9a:52:75:2e:80:
         1a:d6:22:f2:d9:ce:30:6f:bb:75:b3:84:32:69:93:d6:21:6c:
         73:7f:82:8b:d5:a0:be:fe:b6:05:56:1f:8b:73:ed:db:c4:5d:
         35:4c:15:a2:16:73:de:eb:81:c6:f2:a5:5f:38:e5:79:34:67:
         ef:22:05:44:df:8a:b9:04:b8:9a:24:80:8e:e5:04:1a:6a:8b:
         3d:95:f0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----