Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143341.roa
File:                     AS143341.roa (raw, json)
Hash identifier:          o8AXKyD4kEavkoyvK0vV0JL2iUE8Qs/7IHtVFJg8cFI=
Subject key identifier:   A6:CF:38:7E:6E:0E:60:D6:6D:D5:D7:D6:E4:9A:E4:87:F8:48:B9:43
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2E2E0A246645C689BA82A1B5325B09F9E364BBEF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143341.roa
Signing time:             Fri 22 May 2026 06:27:55 +0000
ROA not before:           Fri 22 May 2026 06:22:55 +0000
ROA not after:            Fri 21 May 2027 06:27:55 +0000
asID:                     143341
IP address blocks:        240a:a2b3::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:2e:0a:24:66:45:c6:89:ba:82:a1:b5:32:5b:09:f9:e3:64:bb:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:22:55 2026 GMT
            Not After : May 21 06:27:55 2027 GMT
        Subject: CN=A6CF387E6E0E60D66DD5D7D6E49AE487F848B943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f6:fe:24:0f:0f:8f:a4:56:b1:b1:25:25:8c:
                    3e:f0:fa:5b:73:5c:b6:90:13:4d:79:08:73:0d:9d:
                    31:d0:51:36:31:da:e8:f9:72:00:1d:f1:7a:f1:e5:
                    24:a4:ef:a7:46:dd:af:39:66:26:5a:83:11:3e:9b:
                    71:37:67:48:91:27:53:58:7b:ca:b5:9e:a8:78:ed:
                    6a:bb:b1:6d:5a:84:02:fa:9a:56:96:ab:15:87:fa:
                    02:9d:91:85:a7:5e:2d:a9:de:db:ca:73:9d:af:3f:
                    ae:51:5a:65:b6:a7:97:8c:18:84:16:93:12:89:b3:
                    e0:31:9e:4c:13:2e:b7:a7:5e:35:04:b2:ad:c8:df:
                    9a:43:71:a8:3b:cb:08:aa:ef:83:7b:59:4d:98:47:
                    7f:ab:40:c5:96:1e:71:ab:ce:c1:51:44:9d:59:38:
                    f3:42:09:52:11:26:f1:32:af:28:93:95:3b:d8:42:
                    b8:7f:38:d0:62:62:64:41:3f:9f:20:8e:d3:77:95:
                    f1:af:ca:e8:9e:22:9c:1e:54:fa:1c:24:01:11:e0:
                    35:72:81:d6:a1:56:64:11:a7:cb:29:9d:b7:dc:0a:
                    d8:09:4f:23:b6:d2:56:eb:01:e2:45:1e:55:ee:16:
                    8f:c8:78:96:4e:5d:e3:53:5c:5c:a4:a8:bf:16:83:
                    00:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:CF:38:7E:6E:0E:60:D6:6D:D5:D7:D6:E4:9A:E4:87:F8:48:B9:43
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143341.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a2b3::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:4f:48:95:46:a9:ca:6e:4a:0a:5b:dc:61:b2:6a:84:0c:90:
         78:9a:29:21:23:e7:32:15:6d:19:1b:4c:c8:05:4e:db:dc:4d:
         ce:97:0b:80:27:3c:45:0a:b6:2b:90:ef:d6:cf:d9:bf:26:71:
         ea:d2:55:83:b9:72:4b:8e:30:b9:21:6e:d4:94:c9:a3:2c:1c:
         48:f6:5b:ce:8d:dc:dc:4e:28:bc:df:d1:3a:d5:5e:9f:d0:6f:
         07:b4:cd:c3:d5:4a:22:e6:d5:64:90:05:32:d9:d6:ed:53:21:
         e0:64:1b:d0:75:53:38:57:b8:e0:09:80:db:e9:9f:b3:28:ca:
         c7:ca:b8:f0:9f:1b:7c:9d:e9:ce:95:85:18:8d:36:72:60:99:
         39:4a:9a:1e:96:c6:69:2f:eb:da:37:ad:6c:da:47:a0:95:05:
         51:6e:24:9a:4c:ee:9d:3f:ce:13:93:5f:b2:9b:73:42:fa:28:
         65:c5:ee:3a:df:0b:37:7d:ce:93:f9:45:a4:3e:6b:6b:6c:0f:
         3c:c6:6b:7a:36:43:56:8e:5d:9d:c8:d8:49:6e:78:b9:10:d1:
         0a:e5:2d:ae:49:54:47:d9:df:09:e6:70:78:e1:14:53:a0:99:
         bd:fc:cb:78:ac:26:74:35:e7:7f:b6:bc:a5:35:30:26:9e:e7:
         ee:50:c3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----