Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143425.roa
File:                     AS143425.roa (raw, json)
Hash identifier:          O+A5J17zYPkSnwNw14qAg9naERXcWD37tyqHHiXUg/w=
Subject key identifier:   89:86:6E:20:89:FB:BB:7D:B5:98:15:DA:B6:27:0E:D3:35:A4:22:46
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0AFEF8060ABDC97E4ED2BCA8955ABA48B149E9F0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143425.roa
Signing time:             Fri 22 May 2026 07:09:00 +0000
ROA not before:           Fri 22 May 2026 07:04:00 +0000
ROA not after:            Fri 21 May 2027 07:09:00 +0000
asID:                     143425
IP address blocks:        240a:a307::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:fe:f8:06:0a:bd:c9:7e:4e:d2:bc:a8:95:5a:ba:48:b1:49:e9:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:04:00 2026 GMT
            Not After : May 21 07:09:00 2027 GMT
        Subject: CN=89866E2089FBBB7DB59815DAB6270ED335A42246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8e:d4:b0:26:d9:e1:11:64:d8:33:33:f3:ce:
                    c3:59:2e:e2:16:61:fc:ee:a4:84:de:0f:71:f1:ee:
                    04:aa:d4:ce:24:6f:1b:63:ed:d2:45:18:34:4c:1b:
                    78:75:bb:15:46:41:a6:5f:43:67:4f:e1:bd:0a:96:
                    94:1f:69:58:f7:71:3a:f0:d6:7d:4d:53:12:3c:20:
                    67:8b:f6:13:20:f0:a8:1a:e6:58:48:53:9f:6c:ab:
                    97:4b:32:07:fb:6b:f4:f6:e5:a7:d7:2f:48:19:ec:
                    e9:2a:b5:cc:e2:00:35:0b:08:9a:8a:c9:9b:28:43:
                    63:01:95:69:ce:9e:0b:68:50:db:d4:dd:75:e5:40:
                    d4:36:56:a3:f0:38:57:b3:0b:55:76:16:00:2d:05:
                    d9:7e:5d:75:e2:73:94:b9:af:d6:30:f6:bc:ab:32:
                    70:65:71:dc:38:77:65:94:7d:c7:c7:54:c1:12:6c:
                    b7:93:47:e1:0f:15:73:dc:d1:ff:c6:27:13:bc:31:
                    56:f8:59:f4:96:8f:62:4d:19:91:28:63:b6:a8:93:
                    9d:36:3d:29:fb:f3:6c:9d:7e:bb:77:c9:20:c0:26:
                    01:a3:6c:97:be:24:fe:0b:aa:8e:40:cf:c7:40:06:
                    d9:01:5f:ed:0c:b4:8e:9d:ad:ff:e9:d7:5e:ba:a4:
                    f7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:86:6E:20:89:FB:BB:7D:B5:98:15:DA:B6:27:0E:D3:35:A4:22:46
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143425.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a307::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:fc:68:4b:d0:17:3e:cd:3a:0f:46:41:88:a1:36:d7:be:dc:
         86:55:92:2f:7f:11:e7:1b:7e:c6:cd:ec:9e:a5:6b:9a:3a:3c:
         2c:82:79:20:38:d9:73:61:e2:da:49:ee:68:8e:ac:95:b6:33:
         12:42:e0:41:29:c4:e8:dd:f8:83:11:93:17:ed:85:80:ae:6e:
         7f:f2:43:11:ab:ab:d8:0c:0a:11:83:db:4a:33:3d:f7:2b:e3:
         49:5c:64:36:5c:0e:bc:cb:75:a5:e9:d0:f7:9f:66:9c:f8:e5:
         3a:2c:28:18:1d:6f:03:b6:75:f9:7d:b3:6e:13:20:9e:bc:bb:
         14:db:53:7e:86:b2:11:36:cd:b2:4b:f4:84:fa:82:b2:6f:37:
         57:7e:41:37:78:5c:7b:c1:b5:4a:7c:45:22:1c:01:16:61:04:
         cd:dc:28:39:37:74:9f:e4:e3:37:11:89:ee:06:f7:06:48:ed:
         0a:ce:a3:be:b0:39:e3:61:81:dd:27:cf:ab:7b:56:0f:a1:75:
         8f:67:f2:77:cd:d9:df:6c:a6:5b:33:93:79:85:a3:22:e1:d7:
         15:f2:aa:2a:fb:69:a5:09:cb:b4:6d:d3:7e:f3:aa:08:78:7e:
         cc:41:93:41:f8:67:27:9c:e3:87:80:b7:ce:6f:97:7b:77:20:
         ea:1d:f8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----