Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143313.roa
File:                     AS143313.roa (raw, json)
Hash identifier:          9ScvqpgJjZNvz3ZO4hcPFIgdppidHVJeSLkpy9McjJ4=
Subject key identifier:   A3:67:D8:13:AC:A4:0C:EC:24:F1:E8:E6:BA:F7:6D:1D:F1:29:53:6D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       106A39A86C63A96F84650711D4EB873ED3A1F930
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143313.roa
Signing time:             Mon 25 May 2026 06:49:03 +0000
ROA not before:           Mon 25 May 2026 06:44:03 +0000
ROA not after:            Mon 24 May 2027 06:49:03 +0000
asID:                     143313
IP address blocks:        240a:a297::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:6a:39:a8:6c:63:a9:6f:84:65:07:11:d4:eb:87:3e:d3:a1:f9:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:44:03 2026 GMT
            Not After : May 24 06:49:03 2027 GMT
        Subject: CN=A367D813ACA40CEC24F1E8E6BAF76D1DF129536D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:40:aa:19:ac:25:1e:d6:eb:34:21:83:de:a8:
                    92:6c:bb:f6:5c:4f:2e:43:27:d4:6f:20:36:15:ac:
                    78:4b:2c:f4:ae:b9:ba:4e:6a:d4:b8:a1:5a:12:ee:
                    f4:9b:bf:c8:9f:d6:08:68:c9:b2:fa:ce:7f:1d:61:
                    0a:a9:3e:28:19:3b:4c:39:1c:3f:ab:53:25:0e:7c:
                    e5:64:84:e3:60:91:53:4b:ee:5b:ba:3f:d4:03:f6:
                    44:d5:46:46:c0:f8:b2:c8:d7:e7:e8:52:36:2f:0b:
                    8d:54:53:6c:79:b3:be:73:4d:d9:46:76:74:c7:dc:
                    d2:1b:a0:6c:01:ec:21:06:ea:04:7e:5c:01:4a:36:
                    f2:ef:5a:d6:3d:e4:4d:30:d4:35:50:74:60:e5:a6:
                    03:39:91:97:0c:78:55:85:e0:be:7f:66:4f:99:1c:
                    b1:04:c0:74:77:bd:f7:5e:1c:7c:79:39:3a:3e:0f:
                    3b:49:d0:90:79:f3:0b:86:82:1b:75:c0:8e:42:da:
                    99:a3:65:8a:ff:2c:bd:f5:b3:79:41:6e:87:f4:2e:
                    c2:f3:99:98:d1:35:82:21:79:2b:4e:07:74:d4:f8:
                    fa:7d:5a:18:c0:74:a6:39:d5:2d:1f:d5:53:dd:61:
                    bd:14:8a:88:1e:d9:fc:20:b7:db:73:9b:45:2f:ac:
                    8d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:67:D8:13:AC:A4:0C:EC:24:F1:E8:E6:BA:F7:6D:1D:F1:29:53:6D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143313.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a297::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:3b:2a:48:8f:2c:8d:94:93:19:85:c2:c3:f7:7f:29:e0:65:
         b6:c5:14:55:5b:d3:b1:b2:da:89:28:fe:8d:2e:a8:e0:d9:b4:
         7a:12:45:a7:ff:83:1d:2e:96:bc:9d:f8:4c:1b:d4:84:07:fb:
         02:83:ea:a3:4d:e1:6f:3d:ab:58:58:59:27:b4:2b:d5:b5:8c:
         6c:86:50:a4:46:38:94:02:ec:a4:7d:fa:4b:67:9f:8c:67:60:
         85:e0:c1:a6:83:31:1d:13:05:28:5d:29:5f:6a:30:f7:06:37:
         43:cb:d2:83:ba:47:0a:cb:87:b2:80:d0:65:cf:7d:60:73:e6:
         cf:80:74:a5:22:d2:05:b4:ea:b8:4b:3f:58:5d:88:58:92:f6:
         01:f0:7c:dc:1c:5a:45:d1:b3:0a:b6:c8:8e:22:5a:2b:c8:3f:
         c8:74:15:72:f9:3d:ba:4b:0e:33:c2:a0:53:b9:b6:13:20:36:
         ba:e6:33:53:7b:d1:5e:0b:e3:7e:fe:e4:88:77:71:db:60:31:
         23:8e:79:1e:30:a6:57:e7:ca:bc:39:1d:7d:60:0a:b1:c3:06:
         41:cd:6c:d2:96:d0:55:13:fa:4f:16:38:72:7d:a8:ff:1c:82:
         60:1e:36:e1:84:5d:87:4d:8b:34:af:56:b2:2b:20:69:d1:be:
         94:78:29:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----