Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143321.roa
File:                     AS143321.roa (raw, json)
Hash identifier:          u2mBIR3X1+2CbxEb7qigr9poNERQC43SfH6NYqgWi4Y=
Subject key identifier:   4A:4B:9C:1A:56:C4:D5:E2:2B:F2:74:6D:42:0B:CB:C9:B1:03:8F:64
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       33B58E3C50DCAC843DA480D0210D6BA2854BDE37
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143321.roa
Signing time:             Mon 25 May 2026 01:20:17 +0000
ROA not before:           Mon 25 May 2026 01:15:17 +0000
ROA not after:            Mon 24 May 2027 01:20:17 +0000
asID:                     143321
IP address blocks:        240a:a29f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:b5:8e:3c:50:dc:ac:84:3d:a4:80:d0:21:0d:6b:a2:85:4b:de:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:15:17 2026 GMT
            Not After : May 24 01:20:17 2027 GMT
        Subject: CN=4A4B9C1A56C4D5E22BF2746D420BCBC9B1038F64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bf:29:a0:2f:52:6e:78:c1:b4:42:20:ac:7b:
                    54:01:3c:96:67:a2:08:10:23:d0:a0:ad:27:6e:f2:
                    2b:97:3b:98:5e:65:f8:ba:cb:94:db:00:52:b9:50:
                    e9:6a:34:4e:5f:d4:78:4c:4b:44:05:ca:54:e3:98:
                    be:29:27:3d:aa:47:22:47:30:f4:70:00:24:82:27:
                    ce:e2:31:cf:3e:d1:19:d9:66:93:51:93:52:f2:6c:
                    c7:89:e2:93:7f:e5:3a:2e:75:94:82:36:2b:6e:22:
                    53:f6:1f:f3:f5:30:d5:86:5a:79:0e:9b:d9:0a:38:
                    69:c3:4d:72:e7:ab:87:1b:b8:cd:47:f1:85:6f:96:
                    75:10:5d:bf:a2:07:a5:8c:8a:22:73:d5:82:0a:2b:
                    b6:4c:a6:73:60:4f:11:90:5b:42:ff:61:f3:37:72:
                    e0:53:0c:52:6b:cc:b7:84:0f:33:64:29:4f:85:f4:
                    5a:33:5b:e9:a1:94:91:f6:ff:c0:c6:74:8c:63:0b:
                    d1:49:d9:6a:08:c3:9e:db:49:2a:9f:6e:c9:e4:29:
                    8e:34:63:90:76:cb:26:d9:c4:58:6a:42:f2:1b:6d:
                    bb:fa:d0:12:16:eb:2d:b5:64:a9:30:32:e2:0e:d2:
                    26:cc:6d:64:4a:9c:c9:4b:e8:fc:f8:5c:69:02:5a:
                    19:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:4B:9C:1A:56:C4:D5:E2:2B:F2:74:6D:42:0B:CB:C9:B1:03:8F:64
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143321.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a29f::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:92:19:f0:9c:98:88:3f:74:d6:22:6e:13:63:fb:d0:62:fc:
         91:d1:cd:30:34:d4:97:58:4d:ee:e0:3a:bc:01:c3:e6:cd:81:
         dd:18:9d:e7:81:7b:a2:c0:35:c9:3c:f1:f0:e7:56:84:dc:28:
         88:4f:8d:9c:84:ec:33:47:b4:5f:c6:fe:88:b2:71:4c:87:dd:
         e4:14:73:f8:ce:8c:7d:75:df:f5:c9:8c:cc:e5:9d:2e:a0:4e:
         dd:f5:76:9d:b9:f9:33:51:e5:fb:b1:0f:e4:cb:dc:f9:35:cf:
         91:85:c8:10:71:13:ec:03:c6:c8:ad:3d:bd:98:00:08:a7:c8:
         dc:2a:2c:7c:17:50:1e:78:46:19:23:1e:1c:b7:e0:ca:95:44:
         94:7e:cc:f5:98:07:b1:69:75:a2:38:f2:4b:6a:69:f0:73:3b:
         1b:f4:f8:86:52:9d:1a:3a:8f:4c:79:27:ed:f1:d2:22:4f:f7:
         08:8b:a0:34:24:49:70:75:15:ac:01:1f:bf:b9:28:f3:b1:8e:
         fa:73:fb:57:86:56:76:0d:0e:9f:a9:63:0e:75:68:ad:e2:87:
         c5:fa:ec:44:bc:d6:68:e7:3b:ef:67:c2:c6:9b:a0:49:2b:08:
         1d:ce:13:10:58:9d:2e:2d:47:74:ed:f1:fd:ed:5a:95:78:f2:
         9f:d4:d5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----