Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143228.roa
File:                     AS143228.roa (raw, json)
Hash identifier:          B8ChkRQxIXMoH5hkA25vczcGZ9q4Gc6Joa+2Cq7zsaY=
Subject key identifier:   4A:06:9E:C3:89:06:1C:FD:D8:C9:C1:90:C2:5E:40:9D:E5:A4:D4:6E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5E0EC26BAC1978CBE577047B8444F0591A8D4092
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143228.roa
Signing time:             Fri 22 May 2026 02:47:44 +0000
ROA not before:           Fri 22 May 2026 02:42:44 +0000
ROA not after:            Fri 21 May 2027 02:47:44 +0000
asID:                     143228
IP address blocks:        240a:a242::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:0e:c2:6b:ac:19:78:cb:e5:77:04:7b:84:44:f0:59:1a:8d:40:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:42:44 2026 GMT
            Not After : May 21 02:47:44 2027 GMT
        Subject: CN=4A069EC389061CFDD8C9C190C25E409DE5A4D46E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6c:4e:e6:a1:7b:89:01:b8:d5:1d:0a:75:15:
                    cb:79:34:a3:91:06:f3:d4:87:f0:0c:20:cc:63:53:
                    00:7f:7f:4d:ec:2a:be:0f:61:f6:f0:f3:fd:d8:a9:
                    b4:24:90:7e:ea:a3:46:5e:9f:94:ab:d8:90:bb:60:
                    9b:47:78:4a:c5:e8:a0:d6:4b:be:52:8f:53:29:e1:
                    26:8d:2f:cf:fa:77:19:87:c6:6b:09:77:84:f8:1f:
                    72:85:7c:59:19:54:d7:b2:9f:e4:72:3b:13:74:3e:
                    56:e7:ea:c8:67:c5:3b:f7:8f:dc:cb:9c:1e:98:84:
                    de:a3:f8:54:ad:48:57:88:76:99:b6:47:ae:65:6b:
                    d5:c4:f1:0c:12:94:47:fa:30:a8:bf:b5:ec:a9:64:
                    66:d7:2d:ef:10:61:80:3d:b4:83:07:e2:b3:ab:ef:
                    62:00:d6:b4:c3:f7:db:b2:bc:aa:b8:d9:38:4a:8b:
                    66:22:9a:7c:a6:1b:61:b4:76:0b:b6:ab:27:5b:d9:
                    29:bc:1e:9d:6f:27:09:38:f9:9b:8d:a3:8c:e9:a2:
                    11:c4:4e:13:da:6e:1d:f4:56:0f:7f:b0:d8:fc:ee:
                    96:73:fd:6a:73:d6:61:66:e4:9c:87:2e:34:d6:e1:
                    a7:ff:4a:4c:c6:ce:e6:48:33:af:6a:5b:b7:ef:be:
                    81:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:06:9E:C3:89:06:1C:FD:D8:C9:C1:90:C2:5E:40:9D:E5:A4:D4:6E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143228.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a242::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:b1:19:de:09:aa:c5:b8:11:ed:8f:31:b9:0c:30:51:28:d3:
         89:6a:71:d5:4d:68:14:ac:d1:d0:41:cc:3c:33:1b:eb:12:3f:
         f5:34:8f:ce:a5:48:2f:ec:90:58:e2:ce:2b:2d:b7:15:fd:cc:
         30:36:c3:9b:a8:33:0b:63:12:97:90:9d:c0:56:1e:47:a4:fb:
         7f:f0:1e:d7:a4:65:b6:69:d7:af:43:e3:c2:d5:36:c0:08:67:
         96:af:08:f4:a5:66:87:56:c4:d0:a3:66:28:91:2f:d8:81:d6:
         8b:21:e8:fc:f4:d2:2a:d8:8a:c9:b4:36:0d:49:d6:f3:05:9e:
         d6:3c:05:2e:75:c2:3c:3f:ae:27:ea:d4:52:f1:49:9a:5b:99:
         4d:6e:11:01:31:b3:c6:2c:b0:9b:a8:02:cd:47:6d:14:af:fc:
         7a:b9:26:ba:8b:ab:28:96:3a:46:e0:dc:57:0d:e8:e0:81:20:
         4f:99:26:ab:d5:4f:61:a1:3b:e3:49:93:1d:03:01:8e:25:a2:
         15:73:8c:d6:11:29:66:cc:01:ae:38:0e:e0:81:c0:3f:20:e4:
         83:85:72:1c:d4:b5:94:69:25:28:bf:58:7f:bb:3e:d6:02:42:
         d5:7b:aa:2b:1f:62:ee:67:9a:08:5f:be:78:f7:3e:39:6e:e9:
         82:d9:c3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----