Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143224.roa
File:                     AS143224.roa (raw, json)
Hash identifier:          ED0IdYG64Kix4okqySyc4qNltRm19SJBUtx8EDB3K7U=
Subject key identifier:   31:47:09:D8:69:AE:A7:48:6D:9C:42:B7:F7:0C:95:F3:DB:1E:E5:BA
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2F8CF799BE2EEF95DFDF2A6B4224FF442CE4B72E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143224.roa
Signing time:             Fri 22 May 2026 06:46:28 +0000
ROA not before:           Fri 22 May 2026 06:41:28 +0000
ROA not after:            Fri 21 May 2027 06:46:28 +0000
asID:                     143224
IP address blocks:        240a:a23e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:8c:f7:99:be:2e:ef:95:df:df:2a:6b:42:24:ff:44:2c:e4:b7:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:28 2026 GMT
            Not After : May 21 06:46:28 2027 GMT
        Subject: CN=314709D869AEA7486D9C42B7F70C95F3DB1EE5BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b1:74:77:e7:97:20:29:58:5b:81:8e:48:48:
                    ab:e7:90:c6:5a:d6:5b:33:4b:11:42:d1:1a:40:8f:
                    01:d3:3e:8f:bd:52:cc:3b:57:9c:c2:3e:2d:78:1d:
                    b8:d4:2e:ce:5a:ed:3e:ea:21:f7:6e:56:e2:c4:d7:
                    c2:9f:92:ab:78:94:c0:7b:e5:d5:e9:4a:9e:b1:58:
                    45:c0:34:74:06:d4:fb:3b:24:20:b5:25:0a:84:61:
                    10:19:53:e2:9c:fb:34:21:68:ed:20:09:2a:da:cc:
                    bc:11:49:04:61:8e:f9:5f:cb:73:21:e6:51:c5:a3:
                    2e:db:b5:7d:37:07:af:68:ba:ea:d6:07:3c:8c:ed:
                    2b:41:fa:14:55:e2:14:23:6d:5a:e9:fe:b8:15:3c:
                    0f:c0:20:ee:0c:f8:11:27:b6:75:6b:6e:76:2a:4d:
                    6b:65:cd:69:41:7a:ee:58:04:63:63:66:7c:0c:05:
                    94:f2:bd:ae:2d:6e:8f:93:97:2a:28:04:e9:f5:3e:
                    4d:e5:f4:91:3c:9d:4e:99:a4:2e:21:0d:76:58:57:
                    f3:50:0b:37:06:b2:50:f5:a4:f5:e5:01:0e:da:58:
                    63:82:1c:bb:5e:1f:48:77:f4:c6:08:8d:3f:4a:ac:
                    a1:f6:39:ef:11:af:49:7b:d4:18:60:82:60:c3:e2:
                    c2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:47:09:D8:69:AE:A7:48:6D:9C:42:B7:F7:0C:95:F3:DB:1E:E5:BA
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143224.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a23e::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:ac:9e:70:61:f0:58:21:97:77:36:41:a2:43:fe:26:c1:8c:
         a9:7e:01:0f:d7:7a:98:7b:eb:38:e0:f7:3b:f8:26:3d:af:00:
         b6:80:6b:b0:43:b6:6a:30:49:57:28:e0:c1:42:97:bc:d4:40:
         4e:29:7d:9a:69:dd:c0:57:5b:5c:30:c5:60:13:90:77:09:ae:
         07:4a:5b:f9:cd:50:eb:c9:fd:24:37:7f:cb:68:e3:23:3f:c9:
         8a:be:40:25:a3:19:c0:3b:e8:9e:9b:5e:14:0b:ef:be:32:96:
         b2:87:4c:90:d4:fb:f3:64:18:c3:82:64:40:52:a1:58:07:d3:
         33:a3:79:62:4a:09:b3:3d:91:2d:e7:07:55:07:d6:fb:9d:0a:
         65:66:a5:c5:72:46:46:41:4d:eb:df:88:2b:a8:70:ac:26:68:
         65:18:2e:36:df:c6:8c:0f:aa:03:76:9f:dd:00:b5:c7:d0:87:
         4d:31:00:3c:03:0b:b8:9e:46:97:6a:a4:05:30:e7:a7:bd:50:
         6d:cf:53:53:4c:69:21:60:cc:0f:26:e0:0e:35:0f:c2:d8:fd:
         6c:41:f7:7f:af:c8:3f:1c:24:ba:93:b4:19:c1:11:e5:a0:73:
         1a:40:51:7c:1c:29:a0:b5:2e:1d:0f:50:2b:60:8e:f1:be:88:
         41:31:56:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----