Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143329.roa
File:                     AS143329.roa (raw, json)
Hash identifier:          A+pCsCEpNNMAk2rh15LRKDdAKaS9v1OqbXS3LDU73iI=
Subject key identifier:   D9:87:8D:EB:DC:DF:5C:A7:DF:12:1B:79:1D:E0:D4:31:C0:E0:28:AB
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1EB64B2AC2473F8AAA1C0A67326880B3491D3313
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143329.roa
Signing time:             Tue 26 May 2026 01:13:28 +0000
ROA not before:           Tue 26 May 2026 01:08:28 +0000
ROA not after:            Tue 25 May 2027 01:13:28 +0000
asID:                     143329
IP address blocks:        240a:a2a7::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b6:4b:2a:c2:47:3f:8a:aa:1c:0a:67:32:68:80:b3:49:1d:33:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:08:28 2026 GMT
            Not After : May 25 01:13:28 2027 GMT
        Subject: CN=D9878DEBDCDF5CA7DF121B791DE0D431C0E028AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a0:36:06:aa:cd:a6:19:f4:ef:86:a8:4c:68:
                    42:e4:bf:49:e0:2d:a9:cf:26:6f:a7:50:25:0a:66:
                    e9:03:4f:ab:b2:0c:41:51:0d:04:f6:b3:91:25:9a:
                    db:5e:fd:d0:51:e9:aa:a9:16:5a:46:be:fd:00:e8:
                    6c:5a:98:c3:82:58:a9:71:f7:b9:23:1a:6e:ad:2c:
                    37:74:21:cd:06:78:61:af:6a:96:97:07:ca:4c:a5:
                    82:37:1c:54:fe:5d:b1:5d:ca:26:00:0c:65:1d:2a:
                    91:ca:e7:2b:6e:40:5d:17:22:5f:9e:9c:0d:bb:d2:
                    b1:84:a2:46:99:13:43:bc:69:ed:37:f6:47:02:b2:
                    27:59:b1:8b:52:e5:3e:90:46:45:83:76:c3:cf:31:
                    73:c0:9f:a3:e7:ec:d8:5d:eb:c0:69:f3:17:e7:72:
                    8e:a7:d3:48:90:96:d2:3e:8f:d8:aa:b4:b5:97:df:
                    96:0b:bc:2a:15:31:9b:d5:f9:f4:e8:9b:31:f2:0a:
                    47:68:1d:b1:79:ea:9d:86:f8:6e:f1:57:95:3a:d7:
                    b8:7a:fb:24:32:b4:de:8e:0f:05:46:8b:07:e2:9e:
                    3f:10:df:c5:44:dc:92:f8:9c:ae:f6:5e:15:e2:7b:
                    6d:ad:d5:24:fa:d7:4e:42:11:9a:f0:3d:5c:cf:2b:
                    b2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:87:8D:EB:DC:DF:5C:A7:DF:12:1B:79:1D:E0:D4:31:C0:E0:28:AB
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143329.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a2a7::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:db:12:61:4d:be:46:dd:9a:39:e7:af:04:ca:1f:b6:95:82:
         e5:94:4e:ca:5a:6c:b2:8a:21:c6:81:0a:05:57:8f:3c:92:c6:
         fe:61:4f:ca:f0:3e:e4:80:84:cc:c2:e8:18:f1:ab:0e:21:d8:
         c2:73:6e:ea:ca:9d:b8:06:fe:ef:8f:38:89:85:90:60:b3:7d:
         ca:91:4c:d0:e6:bd:01:ac:6c:f6:e2:db:18:b1:0e:76:d0:4e:
         5c:21:8c:4d:3b:29:97:8d:19:30:94:62:a5:19:86:83:3e:75:
         6f:2c:4c:98:96:a7:24:65:13:38:bf:8f:e2:0f:18:a0:74:f0:
         23:e6:ec:8a:43:96:4d:36:7c:ea:82:a7:1c:ea:e9:1c:24:36:
         93:18:da:b4:16:18:a7:23:f7:27:ce:71:18:ce:9a:5d:25:c9:
         65:5d:40:dd:b3:a9:82:35:2c:0e:9f:fc:b0:ff:c2:50:e2:70:
         8e:f1:f4:99:b8:2a:bf:57:40:a8:77:fc:6e:2f:23:f7:8d:ee:
         69:84:17:78:3d:db:49:d5:1f:73:a6:24:5e:f6:7e:2f:f6:4c:
         e5:86:cc:f0:33:b9:0d:e0:2d:3a:38:d4:56:1b:67:af:a5:73:
         f1:09:12:48:3a:76:e4:be:e8:28:82:d5:d7:6c:3b:8b:09:48:
         8d:e3:d6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----