Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143426.roa
File:                     AS143426.roa (raw, json)
Hash identifier:          rpL5PL1YmNp559Jnd6duXlagctKMbfD5bxpHTj+ZTSc=
Subject key identifier:   A8:AA:1E:72:AB:95:26:54:23:32:CE:74:81:97:27:13:E3:93:2A:A3
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7681FA91C926A8543355AFD291753BB84B2FA7FA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143426.roa
Signing time:             Tue 26 May 2026 02:35:28 +0000
ROA not before:           Tue 26 May 2026 02:30:28 +0000
ROA not after:            Tue 25 May 2027 02:35:28 +0000
asID:                     143426
IP address blocks:        240a:a308::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:81:fa:91:c9:26:a8:54:33:55:af:d2:91:75:3b:b8:4b:2f:a7:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:30:28 2026 GMT
            Not After : May 25 02:35:28 2027 GMT
        Subject: CN=A8AA1E72AB9526542332CE7481972713E3932AA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b4:a7:9d:39:c5:67:97:6f:7a:a9:bd:90:74:
                    9d:ef:07:f1:c3:4b:3c:60:b1:5b:b2:0c:1a:d4:7e:
                    ec:6b:b7:47:af:c0:f4:7a:7e:cf:68:d5:fe:1d:81:
                    0f:ae:ae:51:a7:65:82:15:db:aa:ac:15:2f:16:3f:
                    cd:a7:5b:71:6f:53:98:5b:90:0c:e6:fe:eb:53:30:
                    4b:ba:af:b5:59:1a:56:3f:d8:d6:86:c1:91:74:9c:
                    14:3c:a3:92:d1:c5:cb:68:cd:d7:b0:ae:6e:a2:07:
                    06:cf:04:20:06:20:e6:9c:b5:31:7d:9c:48:24:ef:
                    a9:f7:e4:47:85:34:2b:af:ab:83:20:88:83:71:df:
                    2a:33:29:aa:38:18:4e:19:a7:74:f9:5c:c4:47:4f:
                    d4:da:95:7c:24:0a:d1:55:5a:92:58:57:35:98:f8:
                    c8:59:b6:3e:ec:61:a7:6f:b7:e5:a9:36:3b:f9:7d:
                    3e:26:a8:84:e3:cd:06:44:e5:50:77:09:0f:aa:9d:
                    3a:17:75:5b:1a:ae:e7:62:e5:9c:99:72:45:ac:5c:
                    f5:24:20:1c:99:a3:90:d8:d8:01:4c:7a:f5:67:2b:
                    75:01:80:a0:fd:01:61:78:58:fc:dc:bb:bd:e5:d9:
                    7c:55:49:4d:a6:d8:e5:ae:13:58:25:0c:e7:3f:7d:
                    e2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:AA:1E:72:AB:95:26:54:23:32:CE:74:81:97:27:13:E3:93:2A:A3
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143426.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a308::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:96:67:19:95:70:7c:7c:a9:30:dc:2b:be:2d:84:d4:f5:4f:
         34:a0:82:89:f3:24:fb:44:4c:64:f1:1c:61:40:65:1e:f7:8b:
         db:6c:67:66:e6:11:3b:fb:64:f3:49:24:dd:71:81:5a:7b:6d:
         7b:8b:b4:18:9c:84:1f:32:ab:ab:e8:00:e3:c9:01:09:25:0f:
         ef:69:31:18:0d:23:79:9a:d6:d0:2c:2c:25:6e:af:12:11:ac:
         b8:44:69:8a:d8:ae:c1:36:63:69:47:f6:54:29:23:98:76:17:
         29:d7:c6:af:f5:dc:a6:c7:6a:00:0b:7f:3d:44:d0:6b:d9:4a:
         b2:49:7f:de:59:23:bd:a8:af:18:02:a4:9d:63:eb:a0:92:ec:
         cb:72:e7:5c:41:f4:5a:1a:5e:00:74:5c:8a:6c:8f:5f:ef:ac:
         82:a1:92:e8:2d:47:ce:be:3a:75:61:35:e0:33:ad:09:7e:89:
         18:8d:98:c7:3b:72:30:0c:7f:72:42:12:ea:ed:60:ae:02:f5:
         ce:f2:88:ef:41:1c:37:f5:83:62:ef:5e:4b:5f:44:87:6f:79:
         41:f3:fb:60:6e:b2:da:bf:0c:a2:ca:50:d8:75:b5:65:80:d5:
         83:8a:c5:81:ac:25:e9:d7:72:ac:67:bd:52:80:79:98:69:b5:
         7d:b2:83:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----