Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143190.roa
File:                     AS143190.roa (raw, json)
Hash identifier:          cEAq/Om7oybxx+33Z/yp/7kUGkDbQ506GdEd85dz/Sw=
Subject key identifier:   4C:4C:16:77:D0:BC:03:27:45:C6:54:5B:94:26:E7:D3:CB:18:25:F9
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       77D6177C98ECCF0DD7543D391BD845A8892ABEDF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143190.roa
Signing time:             Fri 22 May 2026 01:50:40 +0000
ROA not before:           Fri 22 May 2026 01:45:40 +0000
ROA not after:            Fri 21 May 2027 01:50:40 +0000
asID:                     143190
IP address blocks:        240a:a21c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:d6:17:7c:98:ec:cf:0d:d7:54:3d:39:1b:d8:45:a8:89:2a:be:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:40 2026 GMT
            Not After : May 21 01:50:40 2027 GMT
        Subject: CN=4C4C1677D0BC032745C6545B9426E7D3CB1825F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c6:37:5b:9c:8d:5d:75:cc:5b:ca:ec:14:51:
                    97:6d:6d:c9:cf:b0:ad:a1:d0:54:af:0c:11:b5:da:
                    f2:a3:9a:89:57:aa:c6:07:6d:72:00:af:07:bd:52:
                    f1:58:30:41:43:d1:73:91:f2:7a:ef:73:da:48:1d:
                    4b:50:40:7a:d1:b3:c8:54:59:94:2d:93:3e:cf:ab:
                    f2:b2:ca:c7:69:54:c3:a6:39:6c:e2:2b:c7:33:8f:
                    78:45:40:ea:e1:79:e1:7c:31:12:7f:bf:cc:5d:84:
                    70:8c:04:c9:f4:b0:f1:c4:27:f2:74:7e:3d:ac:af:
                    82:3e:eb:b5:42:02:bb:b7:96:bb:19:f9:4b:c9:30:
                    13:9f:5c:3a:4b:98:05:68:46:e0:b9:0e:cf:a6:3b:
                    b1:37:94:9d:a9:d0:da:df:1b:f0:09:3e:8d:8c:d5:
                    a2:64:72:6a:e7:89:a3:ae:3c:69:7b:5b:08:c5:6f:
                    bb:71:74:b2:22:96:4f:03:20:d6:ba:61:cb:2d:f6:
                    a9:38:cf:45:08:4a:12:46:0c:19:37:13:4c:0a:ea:
                    dd:c5:81:42:da:1a:7e:2b:e6:53:2b:7e:b2:45:6b:
                    23:a9:30:e5:d7:a3:b2:c7:77:6e:a4:96:3d:13:12:
                    2d:22:ea:fb:b7:fa:0e:bf:c2:af:df:7e:ae:20:04:
                    ab:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4C:16:77:D0:BC:03:27:45:C6:54:5B:94:26:E7:D3:CB:18:25:F9
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143190.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a21c::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:a9:dd:87:89:d5:9c:66:bb:d4:4e:ac:be:a9:05:f7:bb:bc:
         29:86:7d:9c:86:8b:d7:36:0a:1f:d6:7b:ad:39:7f:e3:26:06:
         30:a5:66:24:ca:2b:c5:41:3f:a4:66:47:4d:9f:69:8a:c5:3b:
         31:9b:3f:9a:bf:85:fb:06:e2:50:37:8b:7e:ef:34:26:0f:4a:
         57:1b:53:bc:ec:cc:5e:3d:d0:95:da:50:fd:9c:60:17:29:df:
         54:aa:54:1a:81:e4:06:9e:79:7e:a0:fd:7f:e3:ed:6d:63:e5:
         7b:00:4f:1a:5d:44:39:95:cb:d2:81:65:18:dc:62:28:56:8f:
         d9:01:79:00:df:88:ea:39:3a:79:97:9d:98:86:e9:44:b7:ba:
         e6:43:f0:6c:b9:d6:c7:98:87:e7:bf:8a:cf:7f:bb:d7:f3:98:
         11:e1:aa:4d:7c:ca:a2:9d:ee:20:cb:a6:ca:e6:d4:17:95:7f:
         e9:02:4b:f2:d7:d5:94:fd:b1:f4:89:85:47:28:4b:23:5f:89:
         a6:6f:00:5b:b8:8b:f8:b8:a3:b8:24:a6:2f:59:0f:31:b6:50:
         ba:21:87:fe:35:28:b5:bb:cc:a4:eb:c7:c9:0a:0d:fe:5e:cd:
         d1:c7:a1:84:1e:3d:7f:0a:f7:cf:2d:24:91:e3:79:ff:3f:c1:
         e9:ac:e6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----