Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143357.roa
File:                     AS143357.roa (raw, json)
Hash identifier:          3BooeCLUXi0q5J8mqx4LxmI6SrudHP+TUINQfrXVgu4=
Subject key identifier:   22:3C:E1:7E:63:A9:87:E7:4B:DD:88:5F:A9:CE:9A:1F:19:70:87:FE
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       41D8223FB9757D27DE180F1121F8EB027A6705BB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143357.roa
Signing time:             Mon 25 May 2026 02:22:50 +0000
ROA not before:           Mon 25 May 2026 02:17:50 +0000
ROA not after:            Mon 24 May 2027 02:22:50 +0000
asID:                     143357
IP address blocks:        240a:a2c3::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d8:22:3f:b9:75:7d:27:de:18:0f:11:21:f8:eb:02:7a:67:05:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 02:17:50 2026 GMT
            Not After : May 24 02:22:50 2027 GMT
        Subject: CN=223CE17E63A987E74BDD885FA9CE9A1F197087FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b6:89:85:88:a4:48:d3:ed:9a:8f:e8:4a:2e:
                    3f:23:70:30:8e:17:32:88:70:e5:a8:d1:66:85:43:
                    89:2a:89:ac:e3:6c:9a:c1:e6:a4:ff:f7:34:f4:3b:
                    f4:cd:45:c7:49:98:89:4a:87:d8:92:54:22:a4:bb:
                    82:d1:6c:ec:4a:93:8e:64:89:84:e6:a8:27:25:80:
                    0b:eb:55:0c:c9:09:6c:e6:fa:e8:1e:53:f6:1a:99:
                    c0:b3:17:8e:5f:ff:ef:0e:80:1a:56:ec:a2:72:2f:
                    b2:c4:64:db:60:a6:a9:60:c5:3b:52:8a:cd:cb:2c:
                    0a:85:8d:e7:28:38:99:a5:81:10:c6:69:f2:aa:46:
                    50:3a:ef:69:c1:bd:4d:63:2c:95:db:57:1d:d4:93:
                    10:7b:c6:b6:73:f6:c1:1d:2a:50:92:2e:55:d9:5f:
                    ba:ed:b9:7e:bc:f2:16:2a:bf:0a:00:d5:11:5d:d7:
                    8c:d8:6e:a3:70:57:e2:9f:2b:2c:24:32:c7:31:fd:
                    eb:b1:0a:e9:06:4a:87:54:31:3b:84:16:14:c1:4e:
                    85:63:49:47:42:10:f5:81:07:b2:51:32:aa:8a:87:
                    79:5a:4b:77:14:2c:92:71:ad:8c:bf:a0:57:6a:4b:
                    1b:cb:3d:b1:8b:ef:68:2b:fa:58:d3:62:38:17:1e:
                    72:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:3C:E1:7E:63:A9:87:E7:4B:DD:88:5F:A9:CE:9A:1F:19:70:87:FE
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143357.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a2c3::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:52:98:e6:df:46:1a:b2:a6:c5:ad:da:e1:9a:9e:13:1b:c0:
         c4:57:a7:51:c7:38:5b:fc:af:7d:20:8f:b5:ff:7b:03:e8:a7:
         1d:20:1a:68:65:c9:25:dc:17:55:f6:85:83:dc:be:a9:a7:2f:
         ae:db:dc:17:c3:3e:91:33:2d:4a:d0:9a:5e:6c:e9:89:0d:07:
         d9:88:35:1e:ec:33:25:89:21:17:7a:82:06:6d:4c:5b:93:24:
         94:4c:d8:a6:4f:7d:9d:70:ef:8c:0b:df:5c:19:78:f6:5b:e5:
         59:97:b0:35:ad:60:4d:25:ed:d6:1a:84:e4:95:2d:b5:0e:dd:
         be:64:ad:97:f4:bc:8f:20:ec:6e:2e:60:1f:18:62:72:5a:43:
         02:8d:70:75:ad:cc:0e:68:7d:45:6c:da:96:5e:9a:f8:16:6a:
         c8:d9:b9:be:8a:56:c2:f5:0b:54:0d:7d:8c:9f:56:1c:67:d7:
         1f:b8:b9:50:3d:5f:f1:04:cb:e7:a0:91:1b:b2:e4:08:a8:f3:
         a6:1e:51:96:3a:c6:f8:ef:d8:cc:79:06:c1:0d:cf:14:74:4d:
         a0:b7:5e:ea:cb:96:ed:f4:e0:82:eb:e2:fc:20:db:e4:23:ac:
         08:f9:04:15:04:ee:57:f7:84:05:a6:d6:55:aa:fa:f1:7c:53:
         06:8e:71:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----