Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143310.roa
File:                     AS143310.roa (raw, json)
Hash identifier:          NMOq96F8TOK32aAEXu9onGZHLCgjDh+9sGvZGv9Amy4=
Subject key identifier:   CC:D8:94:AA:54:EE:AE:99:42:4D:DD:4C:45:35:9E:75:6D:85:89:A6
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6C163F584C9C9A09B6AA8E077AB13ED6F893CD1B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143310.roa
Signing time:             Tue 26 May 2026 02:35:28 +0000
ROA not before:           Tue 26 May 2026 02:30:28 +0000
ROA not after:            Tue 25 May 2027 02:35:28 +0000
asID:                     143310
IP address blocks:        240a:a294::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:16:3f:58:4c:9c:9a:09:b6:aa:8e:07:7a:b1:3e:d6:f8:93:cd:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:30:28 2026 GMT
            Not After : May 25 02:35:28 2027 GMT
        Subject: CN=CCD894AA54EEAE99424DDD4C45359E756D8589A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4e:8e:ed:20:4d:23:4a:4e:18:68:b1:13:45:
                    ef:f9:99:4c:c6:fb:af:a9:69:f2:f9:28:4e:a8:b5:
                    06:4e:e3:33:d3:38:c6:c3:9c:84:a4:59:ef:79:5d:
                    ba:34:97:2a:f8:27:c3:e7:74:48:21:a8:c1:da:39:
                    ae:56:23:1e:e0:0c:53:00:b8:f0:ee:ea:e8:38:9e:
                    d4:e8:dd:f6:25:a2:60:5a:c2:33:24:6e:89:6c:dd:
                    ff:22:9a:af:71:88:61:b7:7e:16:52:8c:d4:b3:0b:
                    c2:45:a5:a6:ee:ca:7a:e1:a9:45:09:6f:c2:74:8c:
                    55:72:27:7b:bf:76:24:8c:90:31:19:eb:35:94:39:
                    43:d3:6c:02:00:84:ed:62:22:4b:df:dd:1f:30:09:
                    b9:ad:b4:38:f6:e6:a0:28:fb:b7:aa:ba:5d:c3:76:
                    9c:09:f6:05:65:87:86:1d:34:16:9e:31:bb:f5:2d:
                    1b:f7:33:54:d1:83:1d:27:27:17:4f:74:b7:67:38:
                    4e:b4:33:11:f1:32:7f:49:06:99:32:d1:88:a2:6c:
                    7d:1e:aa:0d:d1:e7:8a:a6:94:e9:0e:3c:da:09:98:
                    43:f0:fd:ea:c1:7d:3c:9f:53:08:08:2d:eb:bc:a7:
                    e2:bc:7b:65:bd:18:d9:a6:0c:f6:01:a5:b2:76:27:
                    83:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D8:94:AA:54:EE:AE:99:42:4D:DD:4C:45:35:9E:75:6D:85:89:A6
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143310.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a294::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:2c:4c:68:22:d0:b2:5d:83:5c:02:87:c4:7e:f5:2c:83:cf:
         b3:af:65:e3:90:af:0b:cf:02:65:a4:b3:e1:b0:b0:d8:28:f2:
         01:3b:d1:8d:52:dc:2e:c4:ca:31:6d:59:98:8e:1d:b3:bd:39:
         91:81:2b:4f:d9:1b:9d:3f:86:88:6d:c1:b5:30:86:a0:b2:9a:
         85:a6:d1:4e:ae:55:51:6b:94:bd:e9:a4:8c:ae:e6:47:a5:fb:
         61:a3:a6:40:76:54:e9:e5:53:f4:7d:e0:d1:40:0e:05:14:3a:
         73:04:bf:2b:42:39:57:cf:36:d7:49:3b:46:31:8f:29:ce:ae:
         26:55:98:10:73:8c:51:45:d5:c6:18:c3:60:4f:16:b4:d8:07:
         44:d8:08:1e:85:27:8f:f0:5b:8b:4f:12:67:88:e0:c3:6f:b9:
         35:6d:bd:84:73:27:a5:da:8f:9b:06:35:88:ed:5c:99:3e:8c:
         97:fb:f2:b9:7d:68:23:d7:ee:b2:82:34:de:a9:75:76:78:19:
         d0:90:3b:12:c5:f0:9c:79:eb:b2:c1:92:d5:cd:7a:1f:a6:b1:
         06:09:ea:f8:dc:b2:f3:49:26:29:30:1b:40:33:73:04:86:85:
         fc:ed:34:b9:f3:6e:b4:8a:c3:c9:2a:c2:a2:99:ef:0f:a2:cb:
         c9:bc:b0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----