Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143268.roa
File:                     AS143268.roa (raw, json)
Hash identifier:          gS5/olJMcTO8oNx1clsCH6Aqv0FRf+keKV9qTNqs7xs=
Subject key identifier:   6C:4D:02:B7:95:DE:3C:02:D0:0E:6A:64:0D:D1:D7:A0:B6:94:3F:F9
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6847CECA22CE5BD2A33D5D429721F989BCA4F5BD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143268.roa
Signing time:             Fri 22 May 2026 06:27:58 +0000
ROA not before:           Fri 22 May 2026 06:22:58 +0000
ROA not after:            Fri 21 May 2027 06:27:58 +0000
asID:                     143268
IP address blocks:        240a:a26a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:47:ce:ca:22:ce:5b:d2:a3:3d:5d:42:97:21:f9:89:bc:a4:f5:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:22:58 2026 GMT
            Not After : May 21 06:27:58 2027 GMT
        Subject: CN=6C4D02B795DE3C02D00E6A640DD1D7A0B6943FF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1e:e5:e4:0c:7e:fc:c7:a8:84:e9:38:67:ee:
                    1e:d9:4f:34:51:bc:50:4d:7b:67:a8:8f:a8:47:9a:
                    74:cf:03:ee:0e:6d:88:63:72:e1:4a:d2:b2:b1:46:
                    bf:98:52:cb:ef:9e:19:24:5b:45:8b:f6:b5:05:e7:
                    27:69:da:be:22:01:95:2d:9a:2a:92:3c:46:46:8c:
                    00:b6:7f:c3:77:d5:01:98:33:94:00:83:2e:e1:15:
                    a6:a5:20:a3:ee:6d:55:75:7f:0b:cd:d0:4f:b7:1e:
                    11:ae:38:d3:ea:60:53:b9:be:5a:98:e1:47:c7:1c:
                    79:a9:da:35:89:91:95:64:11:ad:c4:7a:a8:8d:ea:
                    7f:bc:fd:78:3b:97:44:98:ba:d4:65:4f:9b:fe:61:
                    98:e6:46:ea:3c:70:c7:dc:40:a1:fd:d0:fb:4c:c0:
                    58:a0:d2:6e:59:7f:38:39:66:6b:56:b2:fa:1f:be:
                    1a:66:8f:ac:84:5c:14:38:17:de:6d:77:2a:95:5e:
                    d0:fa:44:d3:6d:c2:62:61:a5:e9:d4:a5:66:8b:77:
                    f7:7f:6d:d8:75:a6:dc:5b:7c:8d:77:5f:ab:ce:05:
                    50:ec:dd:b1:2a:9a:f6:88:7f:2a:94:e5:64:f0:b5:
                    31:d8:c9:63:c4:ce:56:1a:20:7f:8d:ab:3c:d0:86:
                    31:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:4D:02:B7:95:DE:3C:02:D0:0E:6A:64:0D:D1:D7:A0:B6:94:3F:F9
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143268.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a26a::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:5b:53:19:34:0b:77:f4:c9:dc:f4:53:9f:d0:ad:cb:91:1a:
         8e:ad:e6:38:83:92:9b:b9:f3:71:59:7f:7f:27:6d:7f:29:22:
         cc:36:8f:8a:34:5a:e0:b2:e5:1a:c7:13:db:e1:e6:6b:6a:ae:
         bc:cd:54:a9:37:a2:de:7a:bf:86:b2:c6:b5:51:bd:80:cd:14:
         8f:ac:d6:6c:cb:70:00:27:ad:80:57:b5:9e:56:65:a1:a8:d4:
         c7:52:74:8e:b3:a7:c5:9b:fd:14:91:c0:4b:23:36:cf:2e:54:
         79:0c:a7:f0:86:98:a1:ed:55:e4:c5:70:e4:dc:fd:94:e8:42:
         ad:a5:45:fe:98:73:ff:1f:48:bb:10:d0:7f:e7:7a:5e:6c:be:
         99:fb:1c:9e:b3:00:da:0e:58:94:66:2a:9f:40:af:2f:09:01:
         0b:89:bc:ff:fb:a3:b9:5e:a0:39:72:db:96:92:e0:5e:ef:e7:
         09:c5:5c:68:b9:25:5c:52:57:94:44:62:92:fd:39:a6:11:22:
         4b:c0:4e:bf:f6:44:56:e4:1c:29:ff:04:f6:ba:8e:29:7d:77:
         98:ec:03:50:30:2e:28:68:08:bb:39:d6:65:fd:c2:89:55:68:
         26:0c:87:2a:2c:fb:97:31:d3:93:9f:cd:9e:48:47:b5:63:4b:
         86:b6:7d:ec
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUaEfOyiLOW9KjPV1ClyH5ibyk9b0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjIyNThaFw0yNzA1MjEwNjI3NThaMDMxMTAvBgNV
BAMTKDZDNEQwMkI3OTVERTNDMDJEMDBFNkE2NDBERDFEN0EwQjY5NDNGRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMHuXkDH78x6iE6Thn7h7ZTzRR
vFBNe2eoj6hHmnTPA+4ObYhjcuFK0rKxRr+YUsvvnhkkW0WL9rUF5ydp2r4iAZUt
miqSPEZGjAC2f8N31QGYM5QAgy7hFaalIKPubVV1fwvN0E+3HhGuONPqYFO5vlqY
4UfHHHmp2jWJkZVkEa3EeqiN6n+8/Xg7l0SYutRlT5v+YZjmRuo8cMfcQKH90PtM
wFig0m5Zfzg5ZmtWsvofvhpmj6yEXBQ4F95tdyqVXtD6RNNtwmJhpenUpWaLd/d/
bdh1ptxbfI13X6vOBVDs3bEqmvaIfyqU5WTwtTHYyWPEzlYaIH+NqzzQhjHHAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUbE0Ct5XePALQDmpkDdHXoLaUP/kwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMjY4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqiajANBgkqhkiG9w0BAQsFAAOCAQEAoltT
GTQLd/TJ3PRTn9Cty5Eajq3mOIOSm7nzcVl/fydtfykizDaPijRa4LLlGscT2+Hm
a2quvM1UqTei3nq/hrLGtVG9gM0Uj6zWbMtwACetgFe1nlZloajUx1J0jrOnxZv9
FJHASyM2zy5UeQyn8IaYoe1V5MVw5Nz9lOhCraVF/phz/x9IuxDQf+d6Xmy+mfsc
nrMA2g5YlGYqn0CvLwkBC4m8//ujuV6gOXLblpLgXu/nCcVcaLklXFJXlERikv05
phEiS8BOv/ZEVuQcKf8E9rqOKX13mOwDUDAuKGgIuznWZf3CiVVoJgyHKiz7lzHT
k5/NnkhHtWNLhrZ97A==
-----END CERTIFICATE-----