Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143431.roa
File:                     AS143431.roa (raw, json)
Hash identifier:          8T5vGUBaV6ynXP6fxLDD/FYHiyvepycylgVT0ZbUkQM=
Subject key identifier:   C1:CE:29:8D:49:FF:28:0A:FD:B3:E8:C2:D1:57:8B:F9:3B:EB:20:03
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0E1C7A177D416EEC3E8280F9290ADF3AEEC1F243
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143431.roa
Signing time:             Fri 22 May 2026 07:09:03 +0000
ROA not before:           Fri 22 May 2026 07:04:03 +0000
ROA not after:            Fri 21 May 2027 07:09:03 +0000
asID:                     143431
IP address blocks:        240a:a30d::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:1c:7a:17:7d:41:6e:ec:3e:82:80:f9:29:0a:df:3a:ee:c1:f2:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:04:03 2026 GMT
            Not After : May 21 07:09:03 2027 GMT
        Subject: CN=C1CE298D49FF280AFDB3E8C2D1578BF93BEB2003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ec:00:04:19:e0:4c:f5:b8:54:81:65:c8:b8:
                    8f:bb:a7:5c:70:4f:d0:2a:07:fe:85:ca:14:ba:d6:
                    e5:4e:1f:e5:c0:4d:73:e4:34:c5:5d:af:07:45:c6:
                    a2:f7:89:27:7e:e3:16:fe:20:42:1c:f3:55:7e:97:
                    05:14:fd:d0:cd:e4:a1:d0:22:a0:0a:e6:7f:07:20:
                    b1:dd:fd:df:88:4a:93:90:bd:0f:cb:81:41:bc:12:
                    91:56:3f:70:f5:e5:2a:67:07:06:b4:1e:eb:eb:df:
                    39:b0:1f:32:d8:3a:78:46:60:ec:6b:cf:5e:bd:e1:
                    76:14:4c:bb:c4:ac:01:81:84:3d:66:bd:95:e4:f6:
                    99:33:5e:d6:2d:af:18:13:0a:c5:ad:c5:8b:ca:dc:
                    99:f3:21:6f:88:48:63:fd:24:17:cc:ef:1f:be:99:
                    34:64:fb:49:e5:36:30:f2:43:04:60:e5:89:49:5b:
                    30:89:05:75:02:1d:98:2b:04:82:03:18:88:ce:4e:
                    24:86:22:b8:eb:12:73:0d:ef:32:40:d6:9a:21:92:
                    12:f8:93:5c:fa:2a:02:b2:d7:2e:d4:86:97:0e:6b:
                    2d:0d:f1:19:c5:1a:d5:70:8d:2d:c3:50:66:40:f8:
                    b1:76:d9:68:89:97:9b:aa:d0:8e:a2:20:b1:f0:37:
                    e8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:CE:29:8D:49:FF:28:0A:FD:B3:E8:C2:D1:57:8B:F9:3B:EB:20:03
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a30d::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:4e:b7:4d:39:48:36:9c:69:19:ca:d7:af:08:3c:0f:86:3d:
         ee:6a:37:63:32:f3:45:fe:ce:16:01:8c:b7:12:7e:b7:e9:fb:
         51:96:d5:36:8b:d1:11:f9:f0:ae:7e:8d:17:fe:fe:4c:a9:d4:
         97:6c:6c:89:e3:10:df:3e:de:f8:44:32:e6:c9:63:77:83:41:
         5b:52:3a:ba:8b:00:e4:dc:be:7c:98:39:df:b2:5e:bb:39:70:
         a5:bf:f3:f4:1e:ad:f8:a0:4d:d7:33:1b:cb:29:f9:f6:03:5c:
         01:91:9d:cd:55:9b:18:6e:b1:3d:9e:fb:42:a5:f3:18:6d:f2:
         15:ce:f4:61:be:ee:6e:11:c3:30:03:14:20:6c:fb:bf:7a:8c:
         a0:29:08:f3:c3:5f:55:c9:d1:8f:16:9f:30:b9:bf:fe:63:64:
         17:46:bf:54:b3:fe:d9:71:2b:cd:40:25:16:12:d5:5b:7d:e4:
         3c:c4:c1:21:76:d4:53:4d:46:7e:38:e1:a1:be:99:57:8e:51:
         3a:1f:c4:a3:ed:1e:c6:32:e7:bc:91:4b:88:8c:4d:76:2d:66:
         2d:94:20:4b:9e:ed:c4:98:b3:43:8b:3c:77:45:3a:0d:26:4e:
         b4:6a:3a:57:9b:79:c2:85:63:0a:ae:c6:5b:81:6b:2c:c8:95:
         48:ea:33:12
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUDhx6F31Bbuw+goD5KQrfOu7B8kMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzA0MDNaFw0yNzA1MjEwNzA5MDNaMDMxMTAvBgNV
BAMTKEMxQ0UyOThENDlGRjI4MEFGREIzRThDMkQxNTc4QkY5M0JFQjIwMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC87AAEGeBM9bhUgWXIuI+7p1xw
T9AqB/6FyhS61uVOH+XATXPkNMVdrwdFxqL3iSd+4xb+IEIc81V+lwUU/dDN5KHQ
IqAK5n8HILHd/d+ISpOQvQ/LgUG8EpFWP3D15SpnBwa0Huvr3zmwHzLYOnhGYOxr
z1694XYUTLvErAGBhD1mvZXk9pkzXtYtrxgTCsWtxYvK3JnzIW+ISGP9JBfM7x++
mTRk+0nlNjDyQwRg5YlJWzCJBXUCHZgrBIIDGIjOTiSGIrjrEnMN7zJA1pohkhL4
k1z6KgKy1y7UhpcOay0N8RnFGtVwjS3DUGZA+LF22WiJl5uq0I6iILHwN+gPAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUwc4pjUn/KAr9s+jC0VeL+TvrIAMwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqjDTANBgkqhkiG9w0BAQsFAAOCAQEAMk63
TTlINpxpGcrXrwg8D4Y97mo3YzLzRf7OFgGMtxJ+t+n7UZbVNovREfnwrn6NF/7+
TKnUl2xsieMQ3z7e+EQy5sljd4NBW1I6uosA5Ny+fJg537Jeuzlwpb/z9B6t+KBN
1zMbyyn59gNcAZGdzVWbGG6xPZ77QqXzGG3yFc70Yb7ubhHDMAMUIGz7v3qMoCkI
88NfVcnRjxafMLm//mNkF0a/VLP+2XErzUAlFhLVW33kPMTBIXbUU01Gfjjhob6Z
V45ROh/Eo+0exjLnvJFLiIxNdi1mLZQgS57txJizQ4s8d0U6DSZOtGo6V5t5woVj
Cq7GW4FrLMiVSOozEg==
-----END CERTIFICATE-----