Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143331.roa
File:                     AS143331.roa (raw, json)
Hash identifier:          2kRc2Kdf5mNgx7TOIUB+/fiI8CvI/pDcnIfkz/0lJvU=
Subject key identifier:   17:9B:C1:09:73:F6:7C:8A:84:8A:63:A6:5B:F1:AB:DF:AB:7D:B6:FD
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       72C407A9FD49AF602695BBAC759750FC63B7AA06
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143331.roa
Signing time:             Mon 25 May 2026 03:19:06 +0000
ROA not before:           Mon 25 May 2026 03:14:06 +0000
ROA not after:            Mon 24 May 2027 03:19:06 +0000
asID:                     143331
IP address blocks:        240a:a2a9::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c4:07:a9:fd:49:af:60:26:95:bb:ac:75:97:50:fc:63:b7:aa:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:06 2026 GMT
            Not After : May 24 03:19:06 2027 GMT
        Subject: CN=179BC10973F67C8A848A63A65BF1ABDFAB7DB6FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8b:04:d3:0a:07:46:84:42:a8:8d:90:ed:5b:
                    58:09:01:9e:4b:2a:fe:b7:c3:a8:3f:af:80:03:53:
                    57:f0:eb:47:96:1e:81:33:9b:77:44:4c:51:4c:2e:
                    29:a0:67:8f:57:b0:04:3d:60:5a:8a:de:a8:b1:e7:
                    80:c4:7a:e1:07:e6:11:0e:2e:8f:d9:51:e7:45:61:
                    ab:ae:a1:5e:a1:a4:32:c3:9e:13:19:01:33:34:88:
                    73:7f:84:21:d0:60:e9:77:fc:02:6f:10:f9:4f:82:
                    4d:bf:c3:ad:21:09:54:9e:ea:2c:99:7f:ba:23:25:
                    bc:06:01:e9:79:2e:cb:e7:76:ca:b1:22:dc:97:1e:
                    d0:d6:22:d4:f4:5c:b6:be:96:5b:7f:bf:61:85:3e:
                    78:d1:ff:71:3e:59:90:8e:19:fb:a1:00:89:23:c2:
                    6e:3e:56:b3:d2:96:4c:db:e3:f9:be:f6:9d:3b:6a:
                    61:90:d3:bf:6a:d9:59:32:78:25:ec:a3:47:76:cb:
                    a5:45:bd:ed:1a:e4:20:ac:55:8d:66:1d:9b:80:e1:
                    0d:25:e3:14:8f:7c:4c:f5:fe:a6:12:10:a3:22:28:
                    25:c1:49:4c:53:75:44:47:5c:a2:ff:d0:1e:bf:63:
                    2c:a4:16:71:ab:dc:99:d6:54:52:f1:cd:61:58:79:
                    0a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9B:C1:09:73:F6:7C:8A:84:8A:63:A6:5B:F1:AB:DF:AB:7D:B6:FD
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a2a9::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:f7:d3:73:61:db:2c:83:27:1c:01:5f:86:ba:1d:ec:c0:7d:
         5a:30:da:c3:60:2e:9c:23:7f:b9:a8:c5:82:83:ca:6f:84:7f:
         2f:4d:bf:f3:99:91:57:67:38:03:0e:c9:4b:ff:8c:47:25:68:
         4c:c2:6e:84:62:72:42:7e:47:e4:c0:db:c4:44:89:59:c2:51:
         96:f5:fe:ee:f0:bd:65:b5:03:f3:db:75:b7:98:77:a6:85:4c:
         85:29:75:ff:9b:9f:7b:43:6c:79:32:55:08:06:d2:65:1c:70:
         14:c4:21:67:3d:2b:b1:ae:f0:2a:12:3c:bd:1b:b9:5d:7c:d5:
         f7:52:b2:e5:ff:19:f1:95:8e:a4:89:be:d4:eb:7c:30:82:19:
         ff:17:72:a0:27:4d:71:11:76:68:7d:05:cc:de:68:f8:e4:22:
         93:8c:60:38:1e:28:d5:fd:48:14:7f:f9:67:71:6e:7c:dd:72:
         15:dc:e0:2e:d8:51:6f:2d:2c:15:4e:02:44:24:b2:54:50:15:
         80:67:d4:49:bd:c6:ce:02:fe:85:76:6e:6a:2d:ae:4e:bc:11:
         53:40:69:9a:95:5c:4a:18:eb:15:1e:4a:41:74:34:f7:df:39:
         3e:77:f9:75:df:ef:17:36:ad:fc:0d:89:57:1a:e5:2e:4e:92:
         6f:6b:56:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----