Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143394.roa
File:                     AS143394.roa (raw, json)
Hash identifier:          GCcyJbbFa+7b9xUrAFxln2Xg2hlvB6sRtCS9EEuJPB0=
Subject key identifier:   7D:C7:31:4B:1D:11:BD:F4:B3:A6:E6:06:40:02:A6:14:C6:55:31:7D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       314FF854796742AADE5666EC47A59DE023442712
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143394.roa
Signing time:             Fri 22 May 2026 07:32:18 +0000
ROA not before:           Fri 22 May 2026 07:27:18 +0000
ROA not after:            Fri 21 May 2027 07:32:18 +0000
asID:                     143394
IP address blocks:        240a:a2e8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:4f:f8:54:79:67:42:aa:de:56:66:ec:47:a5:9d:e0:23:44:27:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:18 2026 GMT
            Not After : May 21 07:32:18 2027 GMT
        Subject: CN=7DC7314B1D11BDF4B3A6E6064002A614C655317D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a3:fd:20:8a:5e:82:43:1c:1e:61:9f:88:70:
                    ee:ae:93:10:e8:55:d8:0a:bd:23:7b:fd:f8:29:28:
                    de:aa:eb:7c:dc:b1:33:69:46:44:82:12:f1:86:c6:
                    70:fe:d9:9e:91:2d:e1:36:41:fc:3b:82:9d:af:68:
                    96:07:0b:e8:19:8c:ba:c0:e5:63:cc:38:8e:56:6f:
                    ed:2b:e2:88:35:c9:7b:f8:71:a5:9b:93:83:44:5f:
                    10:a3:91:2e:e6:12:7c:05:e0:77:1a:19:f9:5f:61:
                    11:e9:58:b7:59:e2:15:2c:34:45:0f:6f:5d:ca:3d:
                    29:6a:aa:51:f8:85:13:1b:5b:08:4c:31:66:6f:aa:
                    57:f3:dc:f8:fd:05:89:c2:4a:4d:31:85:52:a4:8f:
                    86:e1:8e:e2:92:cd:4a:49:79:05:5c:51:e0:d9:ec:
                    07:f2:26:f5:a3:3f:9f:66:14:f9:0a:f7:f2:7d:05:
                    b5:c9:8d:9d:c9:2a:57:69:8c:0c:7c:8e:24:c1:98:
                    4c:63:e9:6e:a7:85:a8:fe:82:a8:6c:9e:94:73:52:
                    6c:36:3c:21:d0:40:84:7d:3d:c5:ab:38:12:09:a2:
                    9f:4e:9c:76:26:84:4a:e9:4e:ba:8e:5a:a6:c2:62:
                    57:c0:fe:b2:bb:7a:ac:b0:79:49:c6:c6:ad:b1:69:
                    9c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C7:31:4B:1D:11:BD:F4:B3:A6:E6:06:40:02:A6:14:C6:55:31:7D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143394.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a2e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:55:1f:1d:48:31:43:2d:5c:fe:2a:05:f2:07:1c:09:36:75:
         52:96:af:9b:b0:98:8c:ac:79:e3:ee:2f:63:ad:48:76:10:5f:
         16:35:10:b1:df:88:46:d2:f3:08:d4:ad:2e:c4:da:ae:fe:42:
         ae:41:b4:2d:09:6f:30:95:cb:fd:d6:a6:84:c7:8f:ea:bf:98:
         eb:3d:f9:2e:58:8d:4f:ae:2b:e4:5f:09:56:82:f6:16:84:16:
         36:a3:aa:2c:e0:b6:91:b2:5f:53:1f:95:16:2d:1a:bf:06:1b:
         4c:b8:88:fb:e6:2d:0e:c8:a1:9b:4b:12:6f:47:de:fd:d1:14:
         fe:42:dc:0d:9e:7d:dd:80:e7:e3:39:e3:ed:a8:90:74:4f:67:
         69:9f:ee:cc:84:76:47:15:d6:6b:da:8c:b4:1a:d3:60:e7:24:
         68:38:4e:51:c4:0f:60:9a:06:49:d6:dc:1b:9c:3b:01:de:df:
         7c:7a:7c:e7:ed:14:dc:1f:94:ac:d2:91:ff:a9:b2:1a:6a:09:
         ce:3d:52:7d:a7:28:cc:74:9b:f6:22:1f:19:c9:f8:26:d5:3a:
         11:c6:4b:74:01:c3:24:45:9a:3d:ea:4d:82:96:d3:c5:d4:b1:
         6b:0a:bd:3c:9f:fa:6d:d1:9d:a0:04:ef:ba:d7:c7:ec:60:53:
         3f:af:27:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----