Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143372.roa
File:                     AS143372.roa (raw, json)
Hash identifier:          afd5disuXSpTt8V8OMtxojjWA2m64MjdO/0tEzERkUQ=
Subject key identifier:   0E:8B:FF:16:8F:E4:FE:74:D9:A7:CA:3E:1F:91:1D:ED:C8:4D:4D:3A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       41391F9A6E797C655B1E04B04FFCB8A536C17DD3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143372.roa
Signing time:             Fri 22 May 2026 07:32:11 +0000
ROA not before:           Fri 22 May 2026 07:27:11 +0000
ROA not after:            Fri 21 May 2027 07:32:11 +0000
asID:                     143372
IP address blocks:        240a:a2d2::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:39:1f:9a:6e:79:7c:65:5b:1e:04:b0:4f:fc:b8:a5:36:c1:7d:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:11 2026 GMT
            Not After : May 21 07:32:11 2027 GMT
        Subject: CN=0E8BFF168FE4FE74D9A7CA3E1F911DEDC84D4D3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:40:6e:2f:21:b3:f4:f9:4a:2f:2b:00:4b:ad:
                    68:fa:e1:1e:3a:70:3f:66:fa:f8:e1:b1:4a:ac:6e:
                    c6:8e:d4:68:86:6e:6e:86:63:31:7a:88:8f:15:be:
                    d9:95:e1:71:e0:5d:75:8e:09:48:c0:96:ab:c5:5d:
                    68:44:24:0b:f6:22:99:e3:42:4d:29:3f:d9:fd:a8:
                    9e:71:29:f9:e0:98:5a:48:d6:78:29:e2:1a:f2:06:
                    da:8f:1e:f0:e3:a3:fa:a2:df:43:0f:80:36:c4:f1:
                    49:6d:9c:b1:80:23:d6:12:f1:72:c0:58:a8:71:5d:
                    28:23:87:2d:3b:80:f7:b8:81:3c:50:01:d2:ac:41:
                    e0:17:fd:91:44:d3:66:43:db:62:94:ff:3e:b8:e5:
                    32:1c:66:09:a6:0e:f6:61:b3:25:b5:17:d2:52:af:
                    1c:b6:b1:0a:09:e4:2b:77:ec:f0:ec:4e:0e:2e:b0:
                    98:40:44:7d:4a:98:70:b2:ae:53:8e:8e:b7:85:99:
                    66:c0:38:bd:d8:88:b7:d7:99:e9:4d:d7:20:04:82:
                    4d:b1:d8:f4:b8:db:4c:a7:65:27:ba:23:52:a9:7a:
                    b5:28:ed:b0:97:7d:78:d6:1d:b4:05:c4:cd:06:b9:
                    11:b1:e0:9a:29:be:4d:a2:94:4a:15:84:0a:a1:7e:
                    42:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8B:FF:16:8F:E4:FE:74:D9:A7:CA:3E:1F:91:1D:ED:C8:4D:4D:3A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143372.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a2d2::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:79:8c:14:96:f2:d4:03:60:42:ba:11:26:6a:0f:b4:4c:ae:
         5d:6f:de:b5:a2:11:31:de:3c:7a:41:d6:cb:1e:d4:58:5a:e8:
         3e:00:fe:e5:00:32:c0:a3:81:29:3b:e4:71:7e:44:44:fa:b4:
         33:a5:82:54:51:39:a4:ec:55:5c:ef:47:04:ac:a4:94:b6:b7:
         b9:99:7c:03:15:57:69:a1:b7:3c:55:1a:12:38:ea:5c:0b:10:
         89:5d:ca:19:3f:20:bc:a9:e7:e6:19:ce:36:c8:54:c7:06:8e:
         90:bb:52:c7:14:dd:7f:98:2a:60:50:10:30:57:a1:93:96:16:
         d4:2d:31:2d:60:04:d3:84:44:11:1f:71:ba:3c:82:aa:ed:e8:
         f7:48:da:ae:09:0b:e2:f5:5e:d8:79:51:5b:9b:ee:3c:ee:b9:
         a8:af:6a:74:5a:66:8d:e9:ab:99:a3:d4:ec:ec:92:d9:17:4c:
         da:4f:ab:0e:15:4c:43:b1:af:85:a4:33:74:5e:6b:a6:51:96:
         e6:c8:c1:24:fd:d5:cf:50:97:8d:c9:d4:ae:cc:59:bf:8c:ae:
         02:67:c9:53:9b:c4:46:41:af:42:ff:c6:8b:e6:b5:3e:2b:b0:
         1e:6b:2f:d0:9c:29:8f:6f:d8:dc:78:d1:58:bc:0d:79:20:24:
         7d:dd:f0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----