Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143220.roa
File:                     AS143220.roa (raw, json)
Hash identifier:          /j50ewjJELLEuXV2W1dP1WtbmwocgehbOJMbvv0IZ4U=
Subject key identifier:   43:29:04:95:C8:EE:3E:84:16:C2:64:E1:AF:B7:27:57:B8:05:3D:3B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       464F6F11821C114F6E4E9FFEC7634DB282BBE495
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143220.roa
Signing time:             Fri 22 May 2026 06:58:47 +0000
ROA not before:           Fri 22 May 2026 06:53:47 +0000
ROA not after:            Fri 21 May 2027 06:58:47 +0000
asID:                     143220
IP address blocks:        240a:a23a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:4f:6f:11:82:1c:11:4f:6e:4e:9f:fe:c7:63:4d:b2:82:bb:e4:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:47 2026 GMT
            Not After : May 21 06:58:47 2027 GMT
        Subject: CN=43290495C8EE3E8416C264E1AFB72757B8053D3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:28:9d:be:c5:5d:6d:75:79:69:30:e0:d2:8b:
                    0d:ce:98:1d:78:b6:8d:7d:6a:cb:a5:21:f2:7b:3b:
                    3a:8f:61:1e:f0:5c:9d:b9:8a:ac:6a:01:b1:ac:ce:
                    01:de:16:8d:a8:26:bc:20:3c:93:a6:b8:d0:70:ac:
                    1a:89:1f:cc:6e:4e:03:71:fe:b9:85:28:f3:b4:79:
                    ae:4b:e8:d4:84:2e:cf:ac:80:13:73:94:ed:80:a5:
                    87:16:01:c6:a6:7c:3b:fe:86:09:e6:69:73:5d:bc:
                    d6:a2:e7:85:50:51:bf:8d:9a:79:3f:8f:a4:b2:13:
                    44:92:8d:9f:31:37:2d:d4:2b:3f:f8:02:a4:9d:27:
                    77:60:d5:2b:0d:bd:10:70:2a:7f:5d:ba:3d:cd:42:
                    ea:93:b5:3e:81:61:7d:00:44:63:e6:e4:33:c8:c8:
                    13:aa:c5:02:fd:95:eb:33:60:8b:69:8e:b2:ec:95:
                    71:13:67:b9:ea:54:97:0d:8b:a6:ef:cd:dc:e6:ae:
                    4b:90:d6:30:c1:6f:5c:5a:fe:07:88:02:25:09:48:
                    2b:37:98:86:84:3e:fe:32:14:7e:fd:84:6d:b0:4d:
                    83:ed:ed:98:5c:11:7d:84:e9:9c:f0:17:cf:93:b2:
                    51:a5:fd:30:d9:9b:55:8c:9a:3e:54:92:c2:2a:56:
                    cc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:29:04:95:C8:EE:3E:84:16:C2:64:E1:AF:B7:27:57:B8:05:3D:3B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143220.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a23a::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:35:3b:1e:c0:4b:47:33:87:81:9f:c6:84:bb:88:cd:4a:6e:
         63:fa:90:7f:1b:9d:47:cb:01:5b:dd:e0:21:49:cf:dd:a6:10:
         70:36:e6:9c:39:67:eb:e8:e1:41:11:06:c8:63:37:6c:3d:ba:
         dc:6e:03:c7:30:69:c4:b9:69:c4:73:7f:90:4a:79:d7:5a:e1:
         20:7f:69:14:37:2c:2b:1e:b4:3a:18:dc:36:45:6a:6a:03:10:
         fb:60:2a:48:c6:02:1d:4c:eb:27:23:89:fc:e1:55:24:2e:93:
         ba:de:f7:7f:23:d5:2e:18:b7:ef:94:e9:4c:b3:c4:cc:9f:5a:
         8f:6b:93:57:57:c6:a3:7d:39:b6:d3:98:45:8b:5a:a3:0a:98:
         ff:89:e6:70:6f:e7:97:06:be:04:b9:b8:5a:63:99:d5:ad:02:
         1d:4a:b0:db:27:1d:45:91:2e:30:73:81:11:a8:d5:77:5c:23:
         1c:7c:f9:90:ff:f7:6d:70:69:74:ae:f9:b1:00:2f:00:71:0c:
         07:6e:66:4d:96:66:9a:ee:d0:f3:22:dd:ee:b9:e9:5e:ad:21:
         72:20:c6:fb:70:d2:e4:47:78:e4:b9:b5:8b:30:7b:75:1e:f0:
         f1:29:0e:dc:eb:b5:a0:c7:62:00:3c:5b:0c:94:88:65:19:48:
         bb:55:8c:7f
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIURk9vEYIcEU9uTp/+x2NNsoK75JUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjUzNDdaFw0yNzA1MjEwNjU4NDdaMDMxMTAvBgNV
BAMTKDQzMjkwNDk1QzhFRTNFODQxNkMyNjRFMUFGQjcyNzU3QjgwNTNEM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWKJ2+xV1tdXlpMODSiw3OmB14
to19asulIfJ7OzqPYR7wXJ25iqxqAbGszgHeFo2oJrwgPJOmuNBwrBqJH8xuTgNx
/rmFKPO0ea5L6NSELs+sgBNzlO2ApYcWAcamfDv+hgnmaXNdvNai54VQUb+Nmnk/
j6SyE0SSjZ8xNy3UKz/4AqSdJ3dg1SsNvRBwKn9duj3NQuqTtT6BYX0ARGPm5DPI
yBOqxQL9leszYItpjrLslXETZ7nqVJcNi6bvzdzmrkuQ1jDBb1xa/geIAiUJSCs3
mIaEPv4yFH79hG2wTYPt7ZhcEX2E6ZzwF8+TslGl/TDZm1WMmj5UksIqVsxbAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUQykElcjuPoQWwmThr7cnV7gFPTswHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMjIwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqiOjANBgkqhkiG9w0BAQsFAAOCAQEANDU7
HsBLRzOHgZ/GhLuIzUpuY/qQfxudR8sBW93gIUnP3aYQcDbmnDln6+jhQREGyGM3
bD263G4DxzBpxLlpxHN/kEp511rhIH9pFDcsKx60OhjcNkVqagMQ+2AqSMYCHUzr
JyOJ/OFVJC6Tut73fyPVLhi375TpTLPEzJ9aj2uTV1fGo305ttOYRYtaowqY/4nm
cG/nlwa+BLm4WmOZ1a0CHUqw2ycdRZEuMHOBEajVd1wjHHz5kP/3bXBpdK75sQAv
AHEMB25mTZZmmu7Q8yLd7rnpXq0hciDG+3DS5Ed45Lm1izB7dR7w8SkO3Ou1oMdi
ADxbDJSIZRlIu1WMfw==
-----END CERTIFICATE-----