Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143290.roa
File:                     AS143290.roa (raw, json)
Hash identifier:          eVX2cTvP9YxypsYKLvkflz8T5IQHIxvRzqqPL4wuSrs=
Subject key identifier:   9C:35:90:F4:E5:2A:C1:14:3C:A3:EC:C5:69:5C:19:C3:9F:3B:30:AE
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       651D7EFBB3FEE77CCF90C6F33E23CAD26ED7B54F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143290.roa
Signing time:             Tue 26 May 2026 01:13:03 +0000
ROA not before:           Tue 26 May 2026 01:08:03 +0000
ROA not after:            Tue 25 May 2027 01:13:03 +0000
asID:                     143290
IP address blocks:        240a:a280::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:1d:7e:fb:b3:fe:e7:7c:cf:90:c6:f3:3e:23:ca:d2:6e:d7:b5:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:08:03 2026 GMT
            Not After : May 25 01:13:03 2027 GMT
        Subject: CN=9C3590F4E52AC1143CA3ECC5695C19C39F3B30AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:78:72:02:47:b8:a7:73:0f:87:e4:6d:0f:15:
                    86:88:3a:fc:bc:f8:7b:21:9e:cd:da:9b:d4:20:1c:
                    a2:0a:cf:30:ca:41:06:e5:87:fa:26:9f:8e:4d:ce:
                    3e:3e:98:4b:0b:8b:e2:44:53:d6:1c:f5:ef:dc:da:
                    35:02:9c:de:65:e4:f3:7d:0e:67:cf:16:6a:93:2f:
                    ad:2f:8e:f4:ef:b7:47:f5:a1:4a:db:3d:2d:cf:87:
                    0b:16:10:2b:6a:27:10:87:19:df:d5:e8:f9:79:48:
                    4b:4e:a4:d6:03:81:72:cf:a9:8d:6e:6e:13:96:70:
                    8a:0f:9d:fd:26:77:0f:6d:cc:95:d1:14:d7:76:fa:
                    32:b2:e5:fa:d9:3d:c7:d1:14:a0:1a:3f:8a:7e:36:
                    b6:3a:2a:62:5a:96:bc:2f:ec:16:f6:68:f2:5e:1d:
                    43:fa:fa:e3:2c:1c:61:d9:4c:bb:a1:ea:44:9c:5b:
                    1b:c7:70:7b:ff:af:8b:08:8f:ae:90:a4:81:28:88:
                    4a:15:bb:b6:13:7d:23:09:08:a5:fc:15:30:0d:53:
                    2d:dc:e1:bd:43:bc:ae:ad:8f:43:c7:19:08:05:cc:
                    62:52:a5:f2:aa:dd:28:84:98:ed:aa:98:53:cc:70:
                    11:b9:f6:9d:33:e9:17:3e:7f:bf:e8:51:62:5a:b5:
                    d8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:35:90:F4:E5:2A:C1:14:3C:A3:EC:C5:69:5C:19:C3:9F:3B:30:AE
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143290.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a280::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:ee:15:39:e3:32:09:d9:c3:51:3b:58:35:49:64:fa:8d:f6:
         d1:08:27:4c:4f:44:df:60:c8:14:d0:2c:dc:09:7e:8d:36:9b:
         d1:f9:88:00:1f:9b:8c:8f:d9:b3:de:e0:cb:6c:ed:a7:27:83:
         8e:03:5a:3f:56:ab:cd:2e:a9:31:9a:90:5f:e6:a9:06:c2:14:
         30:d1:4a:0d:3e:0e:64:d6:83:3b:86:e8:d3:b5:d0:c0:a6:be:
         08:26:fa:7a:0a:98:d5:40:62:2e:f0:65:9f:c2:92:aa:5c:bd:
         7a:6c:04:39:91:fc:f4:2b:aa:84:0f:41:df:b4:e3:4e:25:ec:
         bf:a0:0b:9e:17:9d:24:c4:c7:8e:34:ad:e5:61:2d:4e:88:9f:
         d2:b5:4c:27:96:2c:8c:03:bb:6e:c0:50:49:f7:0f:27:7f:06:
         4c:91:4f:88:67:83:e2:e4:72:51:f0:b4:75:5f:37:38:d3:8e:
         68:0d:a7:64:97:66:40:25:b8:21:29:6d:8a:9c:5b:5c:ed:b4:
         4a:cf:79:88:aa:89:93:8f:f1:8e:cb:2a:98:d9:50:4f:6a:2b:
         14:43:ac:4b:d1:7f:03:e1:08:08:1b:7b:2a:42:23:ab:38:61:
         de:1f:da:a2:56:82:49:fa:8b:ea:ff:e5:4c:c7:5c:8d:8a:c9:
         9b:59:6d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----