Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143434.roa
File:                     AS143434.roa (raw, json)
Hash identifier:          ryOLl9pwvOifjjzQzc4ugA1yK92SwR/L/wpeo+Aq9j4=
Subject key identifier:   C2:98:AF:AD:8E:D3:2D:71:58:DC:17:74:B2:52:40:D7:D0:18:ED:16
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1F234D16F6987E47AC4D337CFA65AB63D5D473B8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143434.roa
Signing time:             Mon 25 May 2026 01:38:12 +0000
ROA not before:           Mon 25 May 2026 01:33:12 +0000
ROA not after:            Mon 24 May 2027 01:38:12 +0000
asID:                     143434
IP address blocks:        240a:a310::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:23:4d:16:f6:98:7e:47:ac:4d:33:7c:fa:65:ab:63:d5:d4:73:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:12 2026 GMT
            Not After : May 24 01:38:12 2027 GMT
        Subject: CN=C298AFAD8ED32D7158DC1774B25240D7D018ED16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:08:06:07:bc:45:05:9f:0c:cf:37:4c:7f:8d:
                    4b:7b:d3:f1:9f:6a:61:0b:ea:c5:7c:ef:b8:9e:80:
                    92:29:37:4e:aa:4e:92:89:e1:15:47:4e:b1:f3:fe:
                    d8:50:e8:5b:de:17:39:d5:13:0f:db:a0:19:1d:5a:
                    3c:80:0d:63:d8:ef:15:d2:39:ed:43:06:c6:be:e8:
                    bd:c3:e9:8e:16:56:f5:52:a6:ae:e7:c6:aa:88:3e:
                    db:12:ef:f7:fb:9f:dd:80:c9:b7:a2:7e:77:f3:13:
                    d1:25:01:ff:d1:86:d6:0b:1c:4b:6a:1b:7b:13:cd:
                    d1:6a:75:9a:55:41:c1:a3:2c:e5:1a:df:e3:86:83:
                    6c:71:3a:73:0f:2a:f3:b1:e5:cc:8d:96:a1:21:5c:
                    a6:3c:cd:61:9d:69:87:94:85:fd:92:bb:15:fb:12:
                    d8:2a:68:0c:5c:29:36:ca:29:18:68:5d:8c:e7:cb:
                    5f:f5:e2:4b:12:5f:c4:2b:91:19:08:35:bb:51:2d:
                    6b:55:6c:00:33:8f:e1:43:ee:96:e6:e6:ee:1b:14:
                    40:d3:a4:1a:05:14:21:4b:62:c7:f9:cd:53:85:53:
                    01:b6:91:f2:d6:67:34:80:09:06:8b:14:de:18:bf:
                    c1:b7:3c:ed:13:b4:ac:f0:fa:ba:e1:e9:10:ae:23:
                    33:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:98:AF:AD:8E:D3:2D:71:58:DC:17:74:B2:52:40:D7:D0:18:ED:16
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a310::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:fc:ac:41:8d:1a:73:8a:a2:57:3e:d1:fe:d6:82:41:f3:f6:
         19:f0:27:08:86:3b:d6:f7:8c:db:d7:60:01:bb:ac:51:19:4f:
         af:30:8f:d9:33:2a:61:7f:0d:f4:ce:b6:ad:5b:ba:fc:c1:5c:
         34:79:9d:88:f1:69:4d:f8:ce:16:61:13:4a:22:19:12:4d:91:
         cc:e3:b7:71:f5:c3:3b:b7:12:64:f6:f6:aa:af:c7:16:28:95:
         c3:24:f9:4e:70:9e:eb:64:4c:63:2c:4f:60:c9:f0:8c:01:63:
         59:c6:a6:53:42:80:21:ce:ae:75:97:1b:68:9e:05:72:35:4a:
         f1:da:78:a2:31:57:a0:d4:cf:e4:9f:dc:23:34:84:c2:dc:ae:
         7b:04:3d:6b:a1:63:1e:e4:be:0e:96:b2:cf:d6:44:1f:f6:4d:
         3f:71:b5:a6:8a:58:d0:38:6f:d6:74:b7:a6:67:47:c0:39:3a:
         6c:3b:f8:73:7e:a6:25:31:4f:c6:d7:46:e6:0d:2e:69:74:55:
         41:b4:69:0a:55:b4:37:06:9c:52:2c:cb:51:0b:05:ac:ed:94:
         0a:55:1f:ec:bc:9c:0b:2b:56:d4:62:b8:9b:8b:3c:a2:a7:2f:
         dd:80:a2:3a:bb:e3:c8:5b:92:29:ae:b2:e2:41:d4:58:bf:01:
         69:0c:e8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----