Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143430.roa
File:                     AS143430.roa (raw, json)
Hash identifier:          2Gey8xkrhhKicOf3vxI37r8zFSITrJSraCZ0HcrILK8=
Subject key identifier:   D5:E7:74:E5:E3:2B:52:C2:A5:36:E4:D7:04:50:5E:B0:5F:97:D6:26
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       16E0EEA019BA82B726084B3FFAFF12C9868105E7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143430.roa
Signing time:             Tue 26 May 2026 06:30:45 +0000
ROA not before:           Tue 26 May 2026 06:25:45 +0000
ROA not after:            Tue 25 May 2027 06:30:45 +0000
asID:                     143430
IP address blocks:        240a:a30c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e0:ee:a0:19:ba:82:b7:26:08:4b:3f:fa:ff:12:c9:86:81:05:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:45 2026 GMT
            Not After : May 25 06:30:45 2027 GMT
        Subject: CN=D5E774E5E32B52C2A536E4D704505EB05F97D626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4c:ca:a7:38:52:b7:22:24:2d:df:3a:21:9d:
                    44:ad:77:51:41:e3:ce:25:58:eb:0a:0c:95:58:2e:
                    00:ba:95:e7:b3:0e:cf:93:44:e3:2f:01:96:e5:38:
                    10:de:59:b2:7a:5b:6f:e2:c7:cb:0f:3d:ec:cd:b2:
                    cd:68:5c:8b:0b:e7:8d:6a:9e:b9:61:60:8e:30:87:
                    10:13:cf:13:49:98:2b:ee:4c:03:94:0b:82:4c:48:
                    b3:e2:83:be:b2:ad:9e:4a:c3:b5:6b:33:29:7d:48:
                    77:eb:7f:5c:ed:c8:42:d9:7c:59:44:9e:f5:a4:0f:
                    31:bf:e6:86:2f:8c:39:d3:bf:74:97:66:1c:db:41:
                    25:7e:e1:14:44:74:77:e6:34:05:8a:e1:51:49:4a:
                    05:90:9d:1c:27:37:eb:50:ea:f7:50:71:b7:00:4c:
                    45:7b:c9:71:91:f4:64:c9:2c:f7:4e:f3:fb:8d:56:
                    d4:93:5b:34:28:1f:cd:e0:8d:41:a9:10:80:9b:4d:
                    de:85:b3:95:c6:04:50:11:d0:15:a4:d2:ec:88:2f:
                    c3:ca:01:f0:72:b1:f1:ee:6c:9e:37:6e:ae:05:80:
                    bc:57:f3:83:64:1c:c3:38:f9:b0:76:5a:0c:de:97:
                    52:ec:9f:fb:6f:3b:66:0b:6b:94:14:10:91:32:37:
                    a9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E7:74:E5:E3:2B:52:C2:A5:36:E4:D7:04:50:5E:B0:5F:97:D6:26
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a30c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:4a:ee:ff:6f:34:74:a1:e8:54:04:a4:3c:55:65:63:b4:95:
         a8:c5:25:05:51:da:dd:21:90:fb:d1:03:2f:57:ce:f1:24:50:
         68:bb:1d:b7:33:11:ed:75:6e:37:84:d7:ac:e6:4f:f4:ad:c3:
         35:7e:03:9c:6b:9d:9f:41:b4:b0:b6:d6:6b:a3:43:45:da:18:
         fc:87:66:85:e6:3e:a6:d6:f4:b8:d4:83:34:4d:74:ba:b1:cd:
         cf:11:f7:cb:c7:c1:36:f4:ba:0b:a0:3d:06:fb:5d:20:06:9b:
         6b:b2:cf:67:ba:ab:60:92:f4:26:a2:53:15:eb:23:b0:00:12:
         4b:61:3c:b8:a6:bd:55:8d:9e:46:95:c7:6d:6e:9a:f4:05:5c:
         58:9a:40:c5:fb:b2:ab:67:9a:f1:c6:21:4a:93:ba:30:28:c2:
         b6:6d:77:75:12:9c:d0:b6:29:a6:5b:79:8b:f3:7e:86:0f:70:
         d1:c1:55:8f:5d:ec:af:7c:f7:21:d8:89:3a:d8:a8:7e:be:a0:
         34:74:f3:5b:92:5a:53:77:af:be:7e:34:08:cc:93:16:09:91:
         20:e8:dc:79:67:3d:e7:d7:41:d8:13:aa:5c:91:e5:3c:60:b6:
         0c:d8:3e:3b:cb:06:d0:5c:a8:1d:ac:1b:ab:5b:89:a8:25:68:
         9e:67:7f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----