Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143258.roa
File:                     AS143258.roa (raw, json)
Hash identifier:          LdMcweU4/Y7iTW/y24/XJ2IGj2p/obCyYLSNvqd9VfM=
Subject key identifier:   53:32:EF:17:E0:F9:11:9B:A7:05:15:69:C5:42:DC:91:8A:C9:0C:08
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       07BA6626E1164A2DF5073A574CB5CF5E380A621E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143258.roa
Signing time:             Fri 22 May 2026 06:58:39 +0000
ROA not before:           Fri 22 May 2026 06:53:39 +0000
ROA not after:            Fri 21 May 2027 06:58:39 +0000
asID:                     143258
IP address blocks:        240a:a260::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ba:66:26:e1:16:4a:2d:f5:07:3a:57:4c:b5:cf:5e:38:0a:62:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:39 2026 GMT
            Not After : May 21 06:58:39 2027 GMT
        Subject: CN=5332EF17E0F9119BA7051569C542DC918AC90C08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d8:34:63:ab:cf:2a:ea:ec:a5:87:8c:d8:e3:
                    9d:5e:e6:1e:40:73:49:4e:67:c1:9b:f1:39:44:4c:
                    18:9a:2a:cf:e5:5e:0c:bd:8d:4a:99:96:68:c5:3d:
                    06:91:e8:63:93:00:39:cc:c8:67:ed:5f:bb:81:e8:
                    e7:9e:b2:85:a3:dc:39:22:52:4c:d0:ad:6d:ea:72:
                    e3:8a:8f:0e:86:61:53:a9:4a:5b:36:df:e2:6b:ec:
                    6f:17:b1:0a:a8:f9:d4:4a:41:6e:42:24:59:77:65:
                    89:1b:09:f8:04:9c:9f:3e:8e:52:80:10:14:c4:a2:
                    5f:15:88:c1:02:17:e4:f5:66:01:45:b2:d2:de:38:
                    04:a0:e6:36:3e:38:b4:6b:36:e9:14:12:c3:5e:b0:
                    bf:83:d6:7f:0b:9b:b0:bf:07:75:36:61:45:e8:f0:
                    c7:5e:40:bc:88:66:68:38:c6:5a:69:35:bd:41:14:
                    1e:4d:fd:3c:3c:d9:23:60:95:d4:42:26:26:18:df:
                    a5:59:6a:f3:43:1a:68:3b:bb:1b:19:23:0a:de:90:
                    06:38:80:14:21:c8:de:f7:63:68:04:ab:75:34:0c:
                    da:5e:24:71:e6:80:77:4a:46:c1:e2:0b:f4:53:61:
                    a0:d2:77:ca:92:a2:27:aa:6c:71:ec:3e:73:9b:19:
                    b7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:32:EF:17:E0:F9:11:9B:A7:05:15:69:C5:42:DC:91:8A:C9:0C:08
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143258.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a260::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:76:9a:8f:6d:a2:79:ec:ed:e3:c1:c2:ea:f6:c8:08:55:71:
         4d:79:70:bc:7e:e9:8e:f0:2d:ca:9e:42:b1:2b:17:7b:d5:e1:
         7e:3a:a1:c0:de:c6:75:30:ad:f5:6c:92:46:dc:fc:b6:d4:19:
         77:92:55:88:e8:50:c6:df:d4:23:71:79:92:9a:ed:3e:a7:04:
         ff:92:c6:f7:83:cb:d4:cc:06:27:d1:15:90:ad:15:bc:37:d3:
         fc:3e:b3:87:99:e1:5d:82:5a:5d:8a:7b:38:79:b9:c5:98:4e:
         68:39:8e:85:d3:b4:1a:75:d0:51:eb:4c:eb:57:9c:a1:ba:f0:
         bb:a6:dd:3d:d7:5b:19:4a:8c:ae:96:0d:27:e9:1d:0a:14:54:
         1b:85:a5:45:59:66:11:de:5d:88:12:a8:c6:25:31:41:b7:03:
         ce:b1:d9:dd:62:6d:e0:ef:6a:c2:e8:1e:cf:da:3d:0b:ee:db:
         fd:b7:aa:66:bd:e5:0d:39:4f:bc:3c:49:a1:b7:8a:dd:d9:4a:
         09:f9:f1:ea:f4:55:75:73:66:44:f5:a8:fe:a3:e5:e7:db:fb:
         aa:77:20:cc:18:c9:06:2f:29:bf:ab:5b:fe:d1:4c:ad:67:c3:
         b4:4c:bc:24:79:78:e4:12:cb:68:f9:13:22:21:df:76:5a:2d:
         d3:86:01:8b
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUB7pmJuEWSi31BzpXTLXPXjgKYh4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjUzMzlaFw0yNzA1MjEwNjU4MzlaMDMxMTAvBgNV
BAMTKDUzMzJFRjE3RTBGOTExOUJBNzA1MTU2OUM1NDJEQzkxOEFDOTBDMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk2DRjq88q6uylh4zY451e5h5A
c0lOZ8Gb8TlETBiaKs/lXgy9jUqZlmjFPQaR6GOTADnMyGftX7uB6OeesoWj3Dki
UkzQrW3qcuOKjw6GYVOpSls23+Jr7G8XsQqo+dRKQW5CJFl3ZYkbCfgEnJ8+jlKA
EBTEol8ViMECF+T1ZgFFstLeOASg5jY+OLRrNukUEsNesL+D1n8Lm7C/B3U2YUXo
8MdeQLyIZmg4xlppNb1BFB5N/Tw82SNgldRCJiYY36VZavNDGmg7uxsZIwrekAY4
gBQhyN73Y2gEq3U0DNpeJHHmgHdKRsHiC/RTYaDSd8qSoieqbHHsPnObGbe9AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUUzLvF+D5EZunBRVpxULckYrJDAgwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMjU4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqiYDANBgkqhkiG9w0BAQsFAAOCAQEAeXaa
j22ieezt48HC6vbICFVxTXlwvH7pjvAtyp5CsSsXe9XhfjqhwN7GdTCt9WySRtz8
ttQZd5JViOhQxt/UI3F5kprtPqcE/5LG94PL1MwGJ9EVkK0VvDfT/D6zh5nhXYJa
XYp7OHm5xZhOaDmOhdO0GnXQUetM61ecobrwu6bdPddbGUqMrpYNJ+kdChRUG4Wl
RVlmEd5diBKoxiUxQbcDzrHZ3WJt4O9qwugez9o9C+7b/beqZr3lDTlPvDxJobeK
3dlKCfnx6vRVdXNmRPWo/qPl59v7qncgzBjJBi8pv6tb/tFMrWfDtEy8JHl45BLL
aPkTIiHfdlot04YBiw==
-----END CERTIFICATE-----