Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143251.roa
File:                     AS143251.roa (raw, json)
Hash identifier:          oSW++BvMI05QkRvQpqPwLIbQre3o+vLQ+p769vaLjXI=
Subject key identifier:   81:32:72:C3:0D:A3:2B:D3:11:AB:06:D7:84:AB:E8:2A:40:D9:38:17
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       60D5F54F95DABF37749AA6C0499CBA958BE7738B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143251.roa
Signing time:             Fri 22 May 2026 07:08:50 +0000
ROA not before:           Fri 22 May 2026 07:03:50 +0000
ROA not after:            Fri 21 May 2027 07:08:50 +0000
asID:                     143251
IP address blocks:        240a:a259::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:d5:f5:4f:95:da:bf:37:74:9a:a6:c0:49:9c:ba:95:8b:e7:73:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:03:50 2026 GMT
            Not After : May 21 07:08:50 2027 GMT
        Subject: CN=813272C30DA32BD311AB06D784ABE82A40D93817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4b:41:f4:5d:1e:82:54:38:15:f3:2b:99:a3:
                    61:8f:23:60:8c:6f:57:a8:76:78:d0:61:03:57:47:
                    1c:2e:be:ef:28:9a:1e:50:b3:35:53:d4:61:e5:86:
                    47:c3:35:64:db:bd:eb:6b:9f:3d:0e:ec:30:eb:c1:
                    22:1e:4e:0c:43:e8:b1:6e:52:e6:36:d2:57:b3:a9:
                    0b:4c:91:90:51:1b:30:ee:88:c1:62:84:cc:5e:a6:
                    ad:08:c2:39:c6:88:83:83:55:d7:29:de:e4:51:8c:
                    f7:02:e3:ef:c7:a9:e0:e6:7c:4b:8a:79:fc:84:2e:
                    07:bd:ba:e2:74:2e:24:89:00:e1:0d:dd:5b:cd:eb:
                    63:15:36:b2:74:e5:52:50:c3:82:3a:cf:ad:e1:6e:
                    6b:6f:98:73:7d:85:49:25:c8:bc:92:6f:72:0a:50:
                    71:86:7e:b2:a0:2f:b2:91:58:a7:c2:f7:1f:cc:a5:
                    cf:1b:7c:fe:71:de:a5:37:ca:1f:ff:70:fa:70:f3:
                    00:41:dc:fc:fa:f9:0c:86:57:2d:0d:67:54:d4:19:
                    0b:be:8c:26:4c:15:31:91:8a:e3:90:6c:2c:f6:a5:
                    c9:f4:e0:a4:cf:45:ea:2e:d7:29:16:47:da:0e:2e:
                    c8:88:9a:f0:87:4c:c3:a1:65:67:30:5b:6a:d6:3a:
                    88:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:32:72:C3:0D:A3:2B:D3:11:AB:06:D7:84:AB:E8:2A:40:D9:38:17
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143251.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a259::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:4e:95:21:17:71:42:af:07:f4:7c:f4:75:92:8f:9a:82:28:
         87:a8:6e:ae:27:be:b5:d0:60:40:46:84:b3:61:6b:a5:b3:01:
         8b:df:e2:b1:6b:96:47:3e:22:38:e5:22:87:b3:6d:47:49:58:
         b0:d6:67:63:db:2f:99:e3:27:4a:fe:dc:e1:d7:36:d4:a3:80:
         ba:44:c9:c4:e9:44:98:8f:c9:47:c9:e9:17:88:8d:69:9a:09:
         89:df:a4:a8:ef:31:51:43:3c:c7:a0:54:4f:27:20:da:d5:46:
         ac:f7:07:4f:5f:64:38:4f:4c:72:eb:4d:26:71:94:14:2c:10:
         b0:1a:17:74:7b:ac:4e:f5:d1:97:22:04:04:d9:a6:75:5f:bf:
         f1:65:fb:1b:f0:25:e9:1a:f5:18:ca:be:0a:4a:1e:53:2b:3e:
         54:bb:5e:2b:23:99:ca:e1:b8:29:ce:94:c7:ab:b0:49:56:9f:
         1d:af:60:4a:57:f8:69:67:94:64:d8:97:1a:d8:c8:40:94:62:
         a3:c7:71:bc:9b:cf:de:1a:7c:96:be:5c:6c:35:48:14:45:c7:
         98:eb:35:d8:7b:5e:c1:5b:f1:6e:0c:35:c5:f4:81:eb:45:8c:
         a4:b8:b2:7f:7a:6c:bd:04:fd:1f:a9:cd:61:52:f2:7d:6d:bb:
         2f:b1:23:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----