Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143242.roa
File:                     AS143242.roa (raw, json)
Hash identifier:          uj8xOasN2csjiD7Ru3NPmgf80U3cR43sYhV4Tjmo3SY=
Subject key identifier:   89:8C:E0:BF:93:E0:21:07:FD:BA:59:FA:48:ED:44:15:4D:0C:F5:63
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1C7291F386F55E92EFB7911FBC29F7DB3B53638B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143242.roa
Signing time:             Mon 25 May 2026 06:48:44 +0000
ROA not before:           Mon 25 May 2026 06:43:44 +0000
ROA not after:            Mon 24 May 2027 06:48:44 +0000
asID:                     143242
IP address blocks:        240a:a250::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:72:91:f3:86:f5:5e:92:ef:b7:91:1f:bc:29:f7:db:3b:53:63:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:43:44 2026 GMT
            Not After : May 24 06:48:44 2027 GMT
        Subject: CN=898CE0BF93E02107FDBA59FA48ED44154D0CF563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6e:66:d6:5b:bd:33:17:c7:45:f3:44:15:44:
                    52:a9:2c:ec:12:ee:77:d8:f7:a6:4c:34:76:19:6a:
                    f3:0e:67:b5:0b:a5:ea:e2:25:38:14:cf:c5:23:23:
                    61:d4:71:98:ad:bf:7b:82:de:9b:c2:7f:95:df:9e:
                    63:27:e8:5c:1e:6c:41:f8:40:63:e5:80:c3:d9:dc:
                    af:88:6c:33:38:a3:49:f9:f1:7c:78:2e:85:9d:49:
                    87:4b:c4:38:4e:c0:d9:92:3c:d4:a8:b6:a8:9c:5c:
                    f9:41:20:7b:b7:a6:05:54:80:42:44:27:4f:12:20:
                    eb:ed:3a:ee:f6:78:2b:4c:e5:c8:09:8c:a3:22:a0:
                    7e:98:41:69:4a:f3:fd:5f:12:04:09:14:f4:b3:f2:
                    0a:b9:e1:01:80:97:83:6a:69:92:bc:66:01:ab:d0:
                    4d:89:70:0c:61:2a:f5:5a:3f:24:87:51:a7:40:58:
                    77:42:04:69:44:ff:cf:e1:b3:c0:ca:ce:9e:cb:28:
                    a9:fc:8d:fb:3f:a3:32:9c:d3:be:19:db:9d:5c:8e:
                    94:ea:8c:a6:85:6f:3f:fe:16:84:f7:5e:74:91:92:
                    73:53:1b:a5:7a:5f:25:8f:32:41:1a:64:b8:bc:fe:
                    ae:84:72:8f:3b:b9:4a:6e:1e:62:3e:d1:a8:f6:fb:
                    3f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:8C:E0:BF:93:E0:21:07:FD:BA:59:FA:48:ED:44:15:4D:0C:F5:63
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143242.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a250::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:70:da:cd:f0:c4:01:51:23:5a:25:64:cc:91:dd:02:d7:bb:
         76:43:e3:d6:32:a9:50:3f:ba:7d:be:0d:59:44:e1:58:c8:a0:
         31:ad:03:3e:07:16:ac:f6:d1:6b:d2:c0:e2:cb:c2:eb:73:20:
         c3:22:b8:68:eb:ac:72:8b:ac:f4:1b:2c:46:60:17:e3:8b:9d:
         c3:c0:2c:cb:8c:69:1d:aa:58:59:6c:28:da:61:e1:5b:bb:3f:
         58:59:c9:af:58:10:8e:2f:23:22:42:6e:0c:c7:79:d9:8c:a8:
         7e:7b:01:fe:f5:5e:a7:50:f7:cf:e2:74:b9:79:a2:63:08:18:
         80:23:4b:00:39:4f:40:a4:88:60:14:bd:09:01:81:eb:c7:33:
         06:d3:e5:e2:cd:78:b4:4b:74:d6:f5:f9:55:64:e8:ef:39:99:
         ce:81:77:9c:2e:0c:65:a2:59:0d:b9:4b:d2:e1:08:5d:2b:63:
         ba:32:ea:54:ec:f7:04:54:eb:2b:b7:e9:45:92:39:10:64:2e:
         02:34:e4:f9:61:9e:0e:13:01:15:ae:04:c8:7e:82:01:75:52:
         05:dd:8c:7b:40:9c:2b:8d:0b:b5:1e:85:c8:af:c6:9e:0a:65:
         27:5f:7a:18:36:d8:41:36:78:be:4e:a5:55:d1:b3:de:1a:7f:
         22:ed:56:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----