Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143194.roa
File:                     AS143194.roa (raw, json)
Hash identifier:          NC4VE9V6MVsFeuOTReTRRgPn9A+b52DBOJIERy1zEBk=
Subject key identifier:   6E:91:57:C2:1C:A1:CA:F1:B9:76:58:63:A7:AE:DA:86:53:65:60:B3
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       708C7D87B2B9DD62177F9821DF66B949AEB6A3E2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143194.roa
Signing time:             Fri 22 May 2026 04:27:12 +0000
ROA not before:           Fri 22 May 2026 04:22:12 +0000
ROA not after:            Fri 21 May 2027 04:27:12 +0000
asID:                     143194
IP address blocks:        240a:a220::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:8c:7d:87:b2:b9:dd:62:17:7f:98:21:df:66:b9:49:ae:b6:a3:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:22:12 2026 GMT
            Not After : May 21 04:27:12 2027 GMT
        Subject: CN=6E9157C21CA1CAF1B9765863A7AEDA86536560B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a6:43:51:be:7a:5b:f3:71:f5:43:fa:f9:c3:
                    84:e1:72:c5:56:f3:e6:fa:98:42:23:ad:1d:99:3c:
                    ab:5c:b5:df:8d:7e:90:16:5d:67:83:b8:f4:c0:4c:
                    bd:26:00:9f:3f:6e:b4:78:c5:79:97:d3:9c:7a:a9:
                    bc:9c:70:f2:80:63:4e:36:4a:1e:27:7a:8f:28:86:
                    7b:24:b7:b4:3c:80:38:45:76:60:7f:3f:51:1b:fa:
                    a9:db:d7:ca:4a:a3:e6:c0:0d:04:91:4f:0c:a2:a3:
                    9b:69:fd:f7:39:b1:fd:32:5b:be:f3:9c:b6:9d:3e:
                    f8:76:3e:8f:ac:e2:d4:6d:50:1c:49:02:85:cb:93:
                    83:01:19:a6:11:ca:53:9e:2b:ee:ea:8c:93:bc:7a:
                    c1:e2:ba:2d:7d:9d:c6:8e:db:79:7d:34:a2:97:da:
                    76:52:49:5f:8f:50:6f:d8:ab:06:54:a4:45:50:b1:
                    d1:f3:f0:41:d3:57:b5:ee:4f:dd:92:7f:bd:37:31:
                    08:f1:4e:ae:98:a5:52:c2:0e:b5:a6:de:95:5b:d7:
                    29:fd:c9:b8:77:f0:87:08:5e:22:79:67:8b:f7:1b:
                    dd:8e:20:f5:8c:fb:ec:c1:ed:8e:e5:3f:77:94:12:
                    e5:00:d8:0d:ed:87:0d:41:0a:ca:98:12:ef:79:4b:
                    ef:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:91:57:C2:1C:A1:CA:F1:B9:76:58:63:A7:AE:DA:86:53:65:60:B3
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143194.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a220::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:e7:50:96:0e:b5:53:3f:b4:19:7f:8f:46:68:e8:38:fc:b5:
         3f:ac:db:18:09:dd:25:80:2b:47:da:c2:bd:06:56:9d:eb:2a:
         aa:40:e5:0d:06:ad:ca:70:fd:a4:50:58:0a:dc:65:18:12:ab:
         c3:51:26:d1:75:53:5d:da:58:5b:65:aa:f7:fd:28:d9:10:33:
         28:ad:3e:71:b8:8a:8f:dd:89:09:b3:de:04:cc:a1:e3:99:e1:
         59:d8:49:c1:81:75:c9:09:c2:37:45:c1:c7:09:1d:4e:d1:ab:
         b3:db:3b:06:a6:1f:77:c6:e3:6c:5e:f7:e9:92:de:ad:cb:68:
         03:d1:25:f0:e3:c2:b7:6d:dd:d7:b5:ba:79:ac:74:e4:72:4f:
         f7:8d:46:78:8f:00:86:fa:35:d1:ca:87:ac:80:d7:d6:1d:20:
         29:24:4c:89:5e:cc:44:fa:98:fd:a1:e4:e1:ea:b6:21:5e:9a:
         8a:b6:e6:cc:41:86:36:1c:53:12:a9:61:07:f5:0d:3a:52:6c:
         98:f2:89:c7:9b:00:e0:e5:01:14:09:54:2e:40:7f:f3:db:10:
         c9:e9:5b:2f:40:6f:c2:6e:f7:93:39:07:bf:04:57:46:c6:2f:
         79:2b:94:19:25:ae:33:9e:38:50:16:50:59:f0:25:7f:73:8b:
         86:7d:0b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----