Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143177.roa
File:                     AS143177.roa (raw, json)
Hash identifier:          f/OcSBE3WJw4UvMoZJYcqYgrwERv8Brm40Yx2z2hrqw=
Subject key identifier:   FB:17:0B:86:24:DC:02:DB:D7:A0:87:78:78:82:BC:37:45:35:B2:C5
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6DEF57BE49331E16438A09B107E8A04EEEB5D196
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143177.roa
Signing time:             Fri 22 May 2026 07:08:46 +0000
ROA not before:           Fri 22 May 2026 07:03:46 +0000
ROA not after:            Fri 21 May 2027 07:08:46 +0000
asID:                     143177
IP address blocks:        240a:a20f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ef:57:be:49:33:1e:16:43:8a:09:b1:07:e8:a0:4e:ee:b5:d1:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:03:46 2026 GMT
            Not After : May 21 07:08:46 2027 GMT
        Subject: CN=FB170B8624DC02DBD7A087787882BC374535B2C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4a:c9:e4:e4:c6:22:7b:51:4e:05:3d:08:6a:
                    64:3c:94:e9:d8:9e:fc:db:f7:d1:46:45:ee:ba:82:
                    97:e4:ab:c3:48:54:1d:e3:12:1f:d7:98:f4:48:27:
                    a9:23:2c:57:11:e7:bf:9f:66:70:b6:8b:f5:db:50:
                    06:f0:59:ea:0a:4a:a0:bb:3d:a3:b7:14:cd:b4:85:
                    87:c3:68:5c:b0:c0:0a:16:6f:c1:41:b8:6d:11:9d:
                    73:4d:4d:0d:5e:0f:4b:1f:be:9e:73:64:f7:ee:f3:
                    5f:c6:55:06:f0:60:83:e8:05:ef:c1:67:3a:2e:07:
                    76:cd:b2:d2:2c:60:c7:66:b2:a8:c9:66:d3:04:a1:
                    cf:ad:15:d9:f0:f1:fe:1c:18:5e:b9:e9:f1:71:70:
                    5a:d1:29:35:32:90:0f:f7:3d:21:0b:35:6e:ce:c3:
                    3a:ed:f6:2c:59:f4:9a:b1:fa:52:54:aa:46:0a:b2:
                    1c:61:44:af:7c:1d:94:a7:ef:2a:99:e1:69:c9:7d:
                    9a:7d:7a:95:62:f5:ef:9b:29:65:a4:24:26:05:24:
                    82:98:88:fa:58:10:a2:ca:46:17:83:c2:ea:65:8a:
                    9d:44:cc:06:6b:76:0d:0a:56:d0:8c:5c:7e:3d:bf:
                    07:84:bb:f3:db:5e:d0:58:d0:df:90:b2:48:ba:82:
                    af:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:17:0B:86:24:DC:02:DB:D7:A0:87:78:78:82:BC:37:45:35:B2:C5
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143177.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a20f::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:f3:72:7c:c0:3d:9f:07:b0:10:3a:ab:1a:b4:08:7c:25:7d:
         eb:d8:04:bb:22:10:7a:fc:54:18:e1:c3:a9:26:4e:36:dd:0c:
         b7:1f:e4:36:59:73:40:9f:0e:dc:17:ce:ba:64:06:78:7a:af:
         04:97:f9:a4:97:68:06:40:bb:c9:10:a4:5a:66:8a:0b:26:a5:
         3b:5c:f1:69:45:bb:5d:6c:ee:22:96:b4:bd:84:f3:49:10:bf:
         31:92:80:70:ac:6a:28:18:c0:51:05:84:c3:38:90:45:5d:a4:
         a0:99:02:f2:d2:1a:a9:35:7d:56:2d:0a:3c:73:49:ea:60:1e:
         08:d6:c0:b1:69:e8:ac:67:34:86:42:27:3e:fe:29:80:8f:62:
         50:65:f1:e2:8d:a8:22:50:4c:7c:52:7f:33:8d:ef:ae:77:5c:
         e6:16:7a:01:27:71:70:d2:81:9c:76:d1:e1:62:61:41:3d:42:
         eb:e8:03:1b:dd:99:ea:58:6d:18:18:97:01:6a:dc:a4:0b:4c:
         9b:6d:ce:2d:76:bb:09:8a:58:6b:8b:c0:15:bb:11:59:ae:da:
         63:2c:66:4a:af:57:d3:de:60:5b:66:1f:00:89:97:48:ed:b6:
         dc:3c:6c:df:f6:8b:3a:35:de:80:5d:66:15:1d:5f:72:ca:ca:
         a3:75:0d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----