Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143389.roa
File:                     AS143389.roa (raw, json)
Hash identifier:          Ey89YW3PKkVbmX6xSOQ2fUd8HS0bxSTV2m2Qf1vu16g=
Subject key identifier:   FB:CF:05:C4:94:BF:37:88:29:41:B1:AA:61:AD:E7:0A:B8:41:F8:49
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4E04EDD2AFF743D89C152300C5A4E190C872D511
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143389.roa
Signing time:             Fri 22 May 2026 07:24:25 +0000
ROA not before:           Fri 22 May 2026 07:19:25 +0000
ROA not after:            Fri 21 May 2027 07:24:25 +0000
asID:                     143389
IP address blocks:        240a:a2e3::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:04:ed:d2:af:f7:43:d8:9c:15:23:00:c5:a4:e1:90:c8:72:d5:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:19:25 2026 GMT
            Not After : May 21 07:24:25 2027 GMT
        Subject: CN=FBCF05C494BF37882941B1AA61ADE70AB841F849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a2:8d:b3:59:bf:48:f7:23:19:9e:6c:85:ed:
                    6b:25:e9:6f:f0:d4:c8:70:ff:0f:f5:ad:13:6a:5a:
                    cb:2b:e2:c1:e7:4e:b6:25:23:7e:e4:5c:b5:46:c4:
                    2a:be:10:68:87:f2:45:22:e3:8a:cb:3d:72:f4:d3:
                    06:59:67:eb:7f:e4:06:02:5f:4b:b9:6e:84:ba:36:
                    79:08:cd:6d:43:87:c1:8a:40:56:bb:d4:d6:33:8a:
                    0b:69:08:f0:32:06:4f:a3:5a:d3:dd:f5:21:e9:45:
                    b5:c3:91:32:fc:70:72:69:04:11:3a:f8:ad:40:2c:
                    57:28:72:d3:47:81:fe:77:2a:44:85:0b:9a:46:4c:
                    7f:1e:b9:85:c2:c8:f0:4a:a9:13:4e:55:15:e2:c8:
                    e8:e0:8a:38:85:4a:34:f4:35:47:f1:71:92:6f:79:
                    aa:db:58:24:27:0e:65:b5:05:87:8a:0a:5d:cf:19:
                    b0:f9:e0:79:c4:04:64:7a:e6:1b:2b:ce:d6:b0:45:
                    07:8f:84:47:23:55:65:40:e3:0f:a9:39:9c:be:8e:
                    9b:54:ef:e8:77:7e:61:3d:0a:60:0c:03:05:4c:02:
                    33:8b:ad:31:f1:d7:ec:45:f2:f7:34:e6:63:cd:5d:
                    ea:25:e6:46:7f:a8:07:ca:74:31:7e:83:a5:e5:93:
                    3f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:CF:05:C4:94:BF:37:88:29:41:B1:AA:61:AD:E7:0A:B8:41:F8:49
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143389.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a2e3::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:1a:94:22:2c:4e:63:75:6b:48:dc:9a:06:98:fd:eb:c9:9e:
         98:e4:d1:da:73:97:93:ed:0f:bc:4b:37:43:1d:62:60:95:be:
         58:64:37:fb:f9:2b:ef:c5:a5:1d:80:9e:73:1c:33:77:3e:16:
         c3:89:33:22:51:e2:44:e8:ec:19:f0:83:e8:ce:1d:14:d9:fa:
         0b:a4:f8:e9:57:d3:44:ed:0c:23:83:6d:a5:e7:c6:ed:cd:9d:
         7f:5c:86:99:e4:b7:61:21:fb:28:1d:db:f8:d1:51:08:2b:a0:
         0f:ff:95:3b:ca:6b:f6:79:96:95:be:98:3a:63:e5:9d:e1:06:
         c0:12:5d:16:43:3f:07:5a:59:7e:ad:e6:18:0d:3f:92:7c:b4:
         80:84:4f:b6:57:32:7e:0a:cc:81:eb:52:0c:15:52:f4:6d:37:
         74:c1:e1:71:7a:f9:10:ac:2f:8f:64:1f:5d:0e:4b:e9:bf:41:
         c6:4b:65:01:6c:22:70:96:db:72:ad:cf:12:72:c7:ba:d6:5a:
         d7:fe:ef:6d:8e:80:c4:58:c7:3f:b5:91:c5:81:32:ed:02:ec:
         0f:e1:68:dc:46:e8:fe:52:8c:bd:7b:52:1d:03:06:6b:ab:06:
         93:cf:c5:a4:b9:82:7b:5d:9e:cd:ed:e7:22:2d:c8:f5:2e:73:
         62:c8:ab:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----