Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143343.roa
File:                     AS143343.roa (raw, json)
Hash identifier:          bsYYhfwzq3uCO11N/V89j08Ub7Zipx1RIm3+1yfXnEY=
Subject key identifier:   F6:1B:35:9B:3A:35:9F:C1:4D:39:83:A0:70:5C:B3:93:26:F2:BB:B7
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       28F36C493806F8D821997463CFE9A19FA45BBEE2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143343.roa
Signing time:             Tue 26 May 2026 03:17:21 +0000
ROA not before:           Tue 26 May 2026 03:12:21 +0000
ROA not after:            Tue 25 May 2027 03:17:21 +0000
asID:                     143343
IP address blocks:        240a:a2b5::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f3:6c:49:38:06:f8:d8:21:99:74:63:cf:e9:a1:9f:a4:5b:be:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:12:21 2026 GMT
            Not After : May 25 03:17:21 2027 GMT
        Subject: CN=F61B359B3A359FC14D3983A0705CB39326F2BBB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:62:27:9b:fe:18:7f:e6:a8:d4:1b:65:b5:6d:
                    42:c8:86:23:25:9b:11:a0:54:f1:5d:5c:c5:27:9c:
                    13:ce:b3:0a:c8:1c:01:9f:f6:2b:b0:2c:5c:08:45:
                    ad:7a:df:96:2f:cb:13:19:26:22:94:89:47:3f:4b:
                    9c:23:07:2b:a9:1a:f6:a3:dc:9a:62:2c:21:39:0d:
                    c1:b9:87:0c:58:ea:6f:bd:71:d8:4f:54:f1:ec:39:
                    a5:56:97:ce:e4:ec:67:af:19:0f:64:6b:8d:27:4a:
                    d5:d1:1f:9f:63:cd:d3:07:d8:00:30:67:3e:07:5a:
                    ff:54:16:02:be:13:ae:de:b1:8a:5d:cb:d1:11:95:
                    0a:f2:e6:d4:a4:a2:31:f2:b0:35:2a:ce:dc:5e:ba:
                    db:91:b4:3a:df:ad:a3:4e:9f:94:93:29:af:65:93:
                    c6:ce:6a:0e:7f:e5:07:53:c4:3f:c1:a8:ea:69:33:
                    6c:f5:05:24:26:5b:69:44:0a:ff:ea:ff:a2:ce:a1:
                    c3:46:a6:9c:8e:66:2a:a5:55:03:bf:f5:a4:4d:71:
                    37:07:4f:74:72:c0:94:bd:7e:62:ea:5f:ea:72:b9:
                    61:5c:a9:e4:0c:7c:2e:4f:a1:ea:eb:b8:58:fe:3e:
                    ef:53:46:3b:78:f6:9e:77:4b:a6:51:90:31:98:7e:
                    b6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:1B:35:9B:3A:35:9F:C1:4D:39:83:A0:70:5C:B3:93:26:F2:BB:B7
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143343.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a2b5::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:05:98:28:5b:78:f7:8f:b7:0d:10:51:ae:ee:70:19:4d:e4:
         33:4e:a3:32:8b:10:66:0d:76:df:02:aa:75:1c:ed:b1:5d:f8:
         95:46:b2:ee:0c:2c:f3:ef:ce:e0:01:3d:39:25:0d:0f:b9:f3:
         f1:66:4d:9b:4f:31:01:cb:2c:b6:22:76:8f:c8:07:28:74:c5:
         40:db:40:23:c9:ce:f6:8a:a4:34:ba:03:89:9a:9f:42:f3:fa:
         3b:1e:89:11:62:dc:3f:9d:25:7f:d8:30:65:27:0e:59:fd:fa:
         c8:23:04:8f:7a:d3:b8:57:84:a9:4d:ca:24:77:dc:a9:f1:e1:
         90:d9:53:d3:72:b1:77:53:ba:dd:92:91:82:dd:51:df:cf:9b:
         d4:57:19:bf:7e:ff:4e:0e:12:66:ec:a1:a7:10:cd:d2:be:8e:
         6d:d2:94:58:29:93:81:a2:9a:a3:ac:ad:99:5e:02:bf:e7:e4:
         f1:93:02:ad:0c:a3:ad:68:7f:10:19:a3:14:35:93:49:97:14:
         a2:49:45:e0:ad:88:79:21:0d:b4:bb:03:f2:ab:ae:66:4a:9d:
         89:e7:ed:dd:0c:04:3c:6c:45:b4:40:7b:1d:d3:a0:67:f2:57:
         12:92:bb:10:00:cf:a0:21:98:af:5e:12:9f:8b:f7:c8:01:11:
         7f:5a:f8:5d
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUKPNsSTgG+NghmXRjz+mhn6RbvuIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMzEyMjFaFw0yNzA1MjUwMzE3MjFaMDMxMTAvBgNV
BAMTKEY2MUIzNTlCM0EzNTlGQzE0RDM5ODNBMDcwNUNCMzkzMjZGMkJCQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkYieb/hh/5qjUG2W1bULIhiMl
mxGgVPFdXMUnnBPOswrIHAGf9iuwLFwIRa1635YvyxMZJiKUiUc/S5wjByupGvaj
3JpiLCE5DcG5hwxY6m+9cdhPVPHsOaVWl87k7GevGQ9ka40nStXRH59jzdMH2AAw
Zz4HWv9UFgK+E67esYpdy9ERlQry5tSkojHysDUqztxeutuRtDrfraNOn5STKa9l
k8bOag5/5QdTxD/BqOppM2z1BSQmW2lECv/q/6LOocNGppyOZiqlVQO/9aRNcTcH
T3RywJS9fmLqX+pyuWFcqeQMfC5PoerruFj+Pu9TRjt49p53S6ZRkDGYfrYRAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU9hs1mzo1n8FNOYOgcFyzkybyu7cwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMzQzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqitTANBgkqhkiG9w0BAQsFAAOCAQEAoAWY
KFt494+3DRBRru5wGU3kM06jMosQZg123wKqdRztsV34lUay7gws8+/O4AE9OSUN
D7nz8WZNm08xAcsstiJ2j8gHKHTFQNtAI8nO9oqkNLoDiZqfQvP6Ox6JEWLcP50l
f9gwZScOWf36yCMEj3rTuFeEqU3KJHfcqfHhkNlT03Kxd1O63ZKRgt1R38+b1FcZ
v37/Tg4SZuyhpxDN0r6ObdKUWCmTgaKao6ytmV4Cv+fk8ZMCrQyjrWh/EBmjFDWT
SZcUoklF4K2IeSENtLsD8quuZkqdieft3QwEPGxFtEB7HdOgZ/JXEpK7EADPoCGY
r14Sn4v3yAERf1r4XQ==
-----END CERTIFICATE-----