Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143383.roa
File:                     AS143383.roa (raw, json)
Hash identifier:          vWYwHi9mf9A5GPWI3y6jjX1JFA6Z0Je2HKMx09L/tVI=
Subject key identifier:   3B:73:CF:74:13:03:F5:7B:09:FA:1D:E0:53:A8:66:3B:33:B1:ED:20
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3113B994CE938CD28585157EA7678253CE2B6381
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143383.roa
Signing time:             Tue 26 May 2026 08:52:54 +0000
ROA not before:           Tue 26 May 2026 08:47:54 +0000
ROA not after:            Tue 25 May 2027 08:52:54 +0000
asID:                     143383
IP address blocks:        240a:a2dd::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:13:b9:94:ce:93:8c:d2:85:85:15:7e:a7:67:82:53:ce:2b:63:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 08:47:54 2026 GMT
            Not After : May 25 08:52:54 2027 GMT
        Subject: CN=3B73CF741303F57B09FA1DE053A8663B33B1ED20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:59:e5:0a:0f:ec:70:e6:4d:ee:b7:0a:78:e6:
                    5e:a4:fb:13:9f:7f:6e:a9:d8:03:ef:b8:f8:24:cd:
                    bb:60:38:26:bb:da:66:eb:77:9a:d3:c8:55:8e:29:
                    c5:5a:67:2b:95:20:42:fa:a5:9b:e0:5f:03:56:f4:
                    c4:bf:14:fe:01:7d:f0:39:cd:50:50:d5:ac:7b:57:
                    62:33:fd:da:af:16:e7:56:55:e1:d2:f6:f9:ab:45:
                    a0:96:e7:79:52:9b:23:8a:3f:11:c7:9c:a7:46:a1:
                    fa:0d:1f:63:f9:79:1d:bb:91:d9:73:02:55:a7:c9:
                    b9:b4:be:3f:77:4c:20:d5:b0:60:e9:02:57:bb:8c:
                    d8:51:7d:ed:08:43:e2:dd:4f:97:4e:93:f6:b2:b9:
                    53:d0:4f:4b:5f:f6:71:e3:c3:32:da:55:c5:4d:d1:
                    0e:ef:dc:c5:a7:70:e5:6f:24:dc:5c:20:b6:62:df:
                    a5:c7:b5:28:8f:d3:d6:e5:cf:db:77:b2:a6:cb:69:
                    87:f4:75:ac:ab:b7:2d:62:97:f3:19:00:b4:7d:54:
                    c5:95:f9:c8:c0:09:37:1f:cc:a6:3f:8c:6c:77:76:
                    2b:8b:07:0f:1c:d9:1e:fa:ad:8c:62:8b:fb:b0:2d:
                    e7:eb:b5:69:a0:87:c6:b4:4b:ee:64:82:99:a3:7d:
                    fe:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:73:CF:74:13:03:F5:7B:09:FA:1D:E0:53:A8:66:3B:33:B1:ED:20
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143383.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a2dd::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:04:ec:d0:07:89:33:08:55:61:34:cf:5f:dd:ac:a0:56:50:
         16:72:42:de:58:15:d4:ac:2e:3d:a3:fa:c1:5b:45:96:0b:a1:
         41:ad:05:57:5e:d5:0e:e4:2e:f3:11:32:3c:5f:e6:94:2b:79:
         f6:76:88:b9:a2:22:cb:03:0e:f8:cb:2e:9e:75:6c:3c:a9:df:
         25:d1:b9:c4:f2:9c:61:ab:88:47:02:33:50:0f:ef:6f:7f:6d:
         90:60:2e:f8:20:db:67:ac:42:6f:a5:3f:6c:e3:c0:d0:35:78:
         72:62:85:ff:da:72:df:40:88:0f:5a:9c:ea:74:cd:6a:0d:8a:
         52:f7:7a:60:a8:a8:db:1d:c2:3b:12:2d:f3:c3:3a:f5:60:eb:
         2f:21:bb:c1:93:84:c1:5b:be:72:a7:81:be:a0:60:d8:73:49:
         47:43:bf:09:2b:8b:4c:66:f6:9d:71:86:3f:bd:e3:2e:b2:9d:
         cd:f4:cb:62:2b:8d:a7:56:0e:88:db:64:25:80:14:90:ff:91:
         5c:a9:1e:df:3d:d2:29:98:1c:f0:be:a1:44:62:c5:cd:a0:6c:
         2b:20:98:f2:2b:6d:2b:67:20:15:9a:c0:e2:9a:3f:8d:3d:c5:
         7e:8f:39:6a:af:f3:79:b4:3b:5c:7d:08:c8:6c:b7:fe:e8:66:
         55:04:91:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----