Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143304.roa
File:                     AS143304.roa (raw, json)
Hash identifier:          Su8H813kJ4me3Qza4Lo6S5gfkfUn+3GH4HRTl+23Ff8=
Subject key identifier:   CB:4F:48:82:B8:0D:09:CA:DA:F4:B4:36:35:CE:59:13:09:F6:C1:C3
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1BAD16A784B0592D6D76FD56115048A36A9DD803
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143304.roa
Signing time:             Fri 22 May 2026 06:28:02 +0000
ROA not before:           Fri 22 May 2026 06:23:02 +0000
ROA not after:            Fri 21 May 2027 06:28:02 +0000
asID:                     143304
IP address blocks:        240a:a28e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ad:16:a7:84:b0:59:2d:6d:76:fd:56:11:50:48:a3:6a:9d:d8:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:23:02 2026 GMT
            Not After : May 21 06:28:02 2027 GMT
        Subject: CN=CB4F4882B80D09CADAF4B43635CE591309F6C1C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fe:c4:06:f4:4b:82:e0:4a:f4:22:fb:86:4e:
                    b8:88:2c:14:8a:77:18:da:dd:d6:bb:5c:a3:38:16:
                    c8:fc:5e:8a:24:a0:87:e5:11:12:dd:fe:7c:d7:9b:
                    1b:39:5f:e5:fc:9c:a1:69:34:76:a4:0e:e2:14:e1:
                    d8:3a:88:9f:f1:cd:88:c2:b0:dc:b7:02:0b:51:1a:
                    70:8e:0a:91:92:9b:5b:29:bc:38:11:2a:06:74:75:
                    07:a2:3e:2c:7d:d2:53:e8:aa:1c:a1:eb:a6:7f:80:
                    e6:81:1d:c4:e9:8a:56:1a:e4:5f:e2:56:98:00:29:
                    82:ac:bd:bc:a1:0a:f7:13:26:3c:f7:1e:66:93:00:
                    5e:f6:bc:cb:5e:f9:7e:a4:11:ff:20:0b:13:f7:ab:
                    04:40:21:ee:f1:41:83:5f:cc:fd:87:61:98:55:f8:
                    34:0c:a4:73:1a:dd:e9:1d:24:6b:19:df:45:a2:da:
                    77:6b:31:ca:da:ed:78:22:c0:65:bb:77:72:2d:1e:
                    34:98:0d:1e:67:8c:6b:3b:f2:40:98:b8:80:eb:d0:
                    3d:c2:35:3a:d3:fc:4f:03:90:e2:29:10:39:65:0d:
                    02:ba:76:77:17:18:23:64:87:52:1f:e3:71:dd:f2:
                    fc:df:6b:5f:8f:fa:9a:de:3c:f0:7d:43:fd:87:75:
                    41:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:4F:48:82:B8:0D:09:CA:DA:F4:B4:36:35:CE:59:13:09:F6:C1:C3
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143304.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a28e::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:de:89:f0:df:4a:8b:fd:41:c9:4e:fe:76:82:98:82:84:d1:
         e3:b8:90:48:23:ed:ee:2f:57:c0:f5:fc:e1:34:16:c0:2c:f5:
         a5:2f:b8:fc:43:8b:73:75:14:1d:70:bb:a4:96:57:79:93:2d:
         24:80:05:94:5a:97:7a:1c:69:80:70:a1:21:69:ee:e3:ae:82:
         8e:4f:49:ab:ec:49:19:91:f2:82:80:df:43:03:d1:55:d3:4d:
         b7:fc:c1:58:b7:8f:ed:2f:83:b4:4a:01:d1:6a:16:83:a3:b1:
         0e:01:7f:bd:a9:cb:2d:50:f0:64:60:f5:71:4f:10:4a:58:99:
         ec:3b:35:42:9b:4f:11:84:32:e1:e0:db:65:70:a7:f1:de:0a:
         d4:cd:00:74:86:b8:7b:b5:43:58:c0:cd:26:22:64:c5:39:45:
         36:ae:d9:43:c0:9e:e8:5a:ea:5a:df:5b:2b:96:34:f0:1e:24:
         26:99:c4:2f:39:9b:32:ce:cf:22:25:ab:f3:8b:3f:46:dd:07:
         4b:b1:d5:b4:c3:a3:20:b0:0f:7f:08:7b:1f:ac:ff:75:b9:22:
         da:68:fc:fe:8a:18:2f:40:52:02:fe:8e:39:dc:e6:93:3d:39:
         f2:6f:f5:26:e2:b0:7a:f8:bd:05:2f:59:8c:5e:d8:14:9a:aa:
         29:4d:a5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----