Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143204.roa
File:                     AS143204.roa (raw, json)
Hash identifier:          fz0u+cXe24uYAffcBALAXBKlhCzvnTCTGIDL7BuImKU=
Subject key identifier:   82:EA:65:47:F8:70:25:EA:57:F7:00:1A:F1:7A:81:D7:EC:8B:64:3F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       44E761AF196CB19858DDD32CCE4EC05E2972A6E9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143204.roa
Signing time:             Tue 26 May 2026 01:13:06 +0000
ROA not before:           Tue 26 May 2026 01:08:06 +0000
ROA not after:            Tue 25 May 2027 01:13:06 +0000
asID:                     143204
IP address blocks:        240a:a22a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e7:61:af:19:6c:b1:98:58:dd:d3:2c:ce:4e:c0:5e:29:72:a6:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:08:06 2026 GMT
            Not After : May 25 01:13:06 2027 GMT
        Subject: CN=82EA6547F87025EA57F7001AF17A81D7EC8B643F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:02:e4:90:06:12:47:e0:10:cd:02:69:e5:c1:
                    cc:27:b9:75:e9:72:f8:83:ee:4c:c8:c5:a5:f9:89:
                    2b:02:96:8b:00:46:0d:ff:32:c2:0a:0a:f5:c5:3a:
                    91:db:d3:44:17:0d:a8:27:32:36:0d:1a:58:ff:2e:
                    47:28:09:3b:86:f6:64:5f:62:8e:f5:c3:c2:a4:b6:
                    bb:bb:6f:79:5f:96:88:1c:c1:82:ff:bb:fa:24:96:
                    c4:2d:1a:02:98:40:e1:82:d4:86:83:b7:ae:99:63:
                    16:be:7a:f0:26:15:9c:a5:fd:7a:30:dc:9b:d4:ae:
                    15:ed:b4:6b:17:41:25:aa:f7:4d:eb:e4:1f:12:22:
                    e8:9a:a1:c1:3e:dd:d7:d2:b1:b3:05:09:2b:b1:69:
                    d8:82:ec:c7:99:b8:d0:73:4b:14:ef:95:c6:7e:46:
                    4c:61:51:c9:89:11:c4:e3:f6:7d:f2:da:cc:12:dc:
                    d7:d7:ae:4f:7a:de:fc:1e:58:87:10:52:6d:b8:6c:
                    52:43:57:80:63:eb:43:42:a6:d8:ba:f8:24:17:17:
                    c1:c9:84:3b:e2:3d:a5:bf:89:4b:a3:0f:f1:a0:b9:
                    06:84:5b:79:7f:09:c3:2b:11:c7:01:08:cc:27:5a:
                    ea:64:a7:a1:ee:7e:db:fa:a9:83:20:6c:1f:87:ee:
                    fe:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:EA:65:47:F8:70:25:EA:57:F7:00:1A:F1:7A:81:D7:EC:8B:64:3F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143204.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a22a::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:ea:07:b3:1f:c5:46:b0:24:df:47:a5:49:66:a3:07:97:15:
         d5:80:06:f7:31:ac:ae:3c:d3:2e:6e:e7:6f:ee:31:fb:1e:72:
         d3:96:3b:a7:d5:c2:ed:f3:68:ac:72:ad:34:53:74:5b:20:a9:
         23:b4:c9:b4:b4:bc:c8:93:b7:c9:a9:03:f9:b0:e1:5c:18:b9:
         02:2a:79:b1:3d:fc:2c:10:84:c7:dd:7a:06:af:4c:9e:c7:f3:
         d2:17:62:a8:f5:da:6f:05:99:84:5f:84:d4:07:00:77:9e:a5:
         88:36:2e:4d:02:47:66:ca:9a:c4:04:86:a8:6f:23:ac:d4:a6:
         fe:19:5b:9e:ab:39:40:ec:14:d5:e5:0b:24:1e:7e:81:9d:04:
         2d:d3:c0:8b:3c:94:bf:68:b0:4e:e0:80:ef:c1:6c:e7:df:cc:
         c3:3d:fa:09:28:cf:55:40:28:bc:d8:f3:63:77:d0:58:db:39:
         18:65:43:ad:7e:15:49:c4:e7:9e:3a:fc:03:d6:4d:89:73:a5:
         df:8a:ec:85:5c:a9:16:02:f3:6f:df:f0:68:fc:36:e9:58:d4:
         62:80:56:a4:bf:f4:81:8b:35:08:54:b2:74:ea:6e:9d:61:af:
         53:96:c7:a8:3f:2e:f2:14:11:28:24:82:d7:77:71:37:3b:d0:
         1c:93:17:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----