Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143455.roa
File:                     AS143455.roa (raw, json)
Hash identifier:          z8HNDvz9fs3F8ekFNF77sRTxuLWyIqWsohfg0q7izX0=
Subject key identifier:   EA:87:04:35:4F:47:70:67:49:B8:CB:70:71:42:26:75:F4:FA:78:7E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3CA5964E6627F494DBB0B4B58F8826D0640A0A13
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143455.roa
Signing time:             Fri 22 May 2026 04:08:07 +0000
ROA not before:           Fri 22 May 2026 04:03:07 +0000
ROA not after:            Fri 21 May 2027 04:08:07 +0000
asID:                     143455
IP address blocks:        240a:a325::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a5:96:4e:66:27:f4:94:db:b0:b4:b5:8f:88:26:d0:64:0a:0a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:03:07 2026 GMT
            Not After : May 21 04:08:07 2027 GMT
        Subject: CN=EA8704354F47706749B8CB7071422675F4FA787E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:90:03:53:2e:36:08:c8:fd:38:8e:fd:64:15:
                    41:7d:e1:fe:59:c9:23:6d:56:55:51:8c:19:e0:2a:
                    92:13:62:2c:70:7d:d0:92:59:b3:6f:31:85:04:c0:
                    07:dc:b0:95:41:10:ca:cc:e2:d7:3b:44:a6:d6:f3:
                    22:5e:77:79:02:5f:9c:b1:a5:6f:e4:09:cf:58:0d:
                    70:28:b6:82:6f:79:a1:bc:9d:70:89:45:be:a5:9f:
                    a3:9e:8f:59:e5:86:81:c0:3e:55:f1:f8:e6:bc:eb:
                    fd:e1:7e:07:b6:1d:43:94:62:96:bf:27:21:2e:81:
                    f7:0d:8b:7e:12:8c:a8:97:88:bb:5b:7b:bb:43:15:
                    cb:68:36:14:d2:dc:2f:38:41:64:8f:77:29:b8:92:
                    f3:f1:9b:c7:70:ad:ff:01:a9:4d:2a:1b:49:51:7e:
                    9f:ac:65:84:5a:40:b9:4c:18:02:9a:47:31:fc:5f:
                    06:cb:09:71:53:8e:ff:3f:66:96:2a:be:e4:a9:20:
                    4e:ac:de:a3:7b:3e:16:13:29:04:44:8f:1b:44:b3:
                    4b:3e:8e:fc:e5:d1:83:28:db:65:b2:63:9a:0e:12:
                    d2:89:7f:3a:f4:27:c6:86:03:a6:1d:87:8c:4a:01:
                    ed:cc:98:76:13:67:71:d9:0d:a1:c7:0a:5d:f9:36:
                    0e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:87:04:35:4F:47:70:67:49:B8:CB:70:71:42:26:75:F4:FA:78:7E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143455.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a325::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:46:96:36:27:63:e9:c7:93:6a:e6:ca:3e:97:77:19:d2:51:
         65:1b:47:99:8b:d6:04:6b:1a:9a:0f:d5:35:f5:10:3f:1b:bd:
         24:f4:e6:f5:9a:9b:db:d4:33:43:f3:eb:4a:45:71:6e:10:3d:
         11:5f:0d:33:26:d7:79:83:af:33:63:9a:c4:ec:ad:3b:fe:ed:
         ef:06:a7:13:16:59:ef:e7:16:57:b0:b4:d1:09:ba:fd:e7:8c:
         5f:1c:29:9a:11:96:b8:40:5f:8d:11:5a:fb:4a:21:25:fe:20:
         83:f3:a4:0e:da:63:79:2f:bc:81:01:bf:fc:27:4a:41:ae:d9:
         85:0c:0b:11:fc:94:ee:e6:cd:41:a2:f5:99:ac:0b:a5:51:e2:
         81:4a:86:04:6a:e0:7b:f1:9c:5b:d5:03:29:57:2b:c0:61:82:
         aa:cc:a3:98:df:72:f9:74:88:2e:c9:a9:b3:23:9a:4c:f9:2e:
         07:c9:66:b8:1b:b9:9b:84:a1:64:ab:60:94:ff:d8:9e:c5:73:
         30:3e:eb:e9:6e:76:a4:f9:6c:88:3e:5c:51:50:48:f9:96:fe:
         d0:5e:65:a7:83:33:36:16:f0:34:37:6b:c5:af:3f:fc:f1:39:
         88:fb:2a:34:bb:cf:45:d6:d2:cc:a3:35:f8:98:a0:8e:2f:21:
         59:7d:27:3e
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUPKWWTmYn9JTbsLS1j4gm0GQKChMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDAzMDdaFw0yNzA1MjEwNDA4MDdaMDMxMTAvBgNV
BAMTKEVBODcwNDM1NEY0NzcwNjc0OUI4Q0I3MDcxNDIyNjc1RjRGQTc4N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCckANTLjYIyP04jv1kFUF94f5Z
ySNtVlVRjBngKpITYixwfdCSWbNvMYUEwAfcsJVBEMrM4tc7RKbW8yJed3kCX5yx
pW/kCc9YDXAotoJveaG8nXCJRb6ln6Oej1nlhoHAPlXx+Oa86/3hfge2HUOUYpa/
JyEugfcNi34SjKiXiLtbe7tDFctoNhTS3C84QWSPdym4kvPxm8dwrf8BqU0qG0lR
fp+sZYRaQLlMGAKaRzH8XwbLCXFTjv8/ZpYqvuSpIE6s3qN7PhYTKQREjxtEs0s+
jvzl0YMo22WyY5oOEtKJfzr0J8aGA6Ydh4xKAe3MmHYTZ3HZDaHHCl35Ng6BAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU6ocENU9HcGdJuMtwcUImdfT6eH4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNDU1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqjJTANBgkqhkiG9w0BAQsFAAOCAQEAmkaW
Nidj6ceTaubKPpd3GdJRZRtHmYvWBGsamg/VNfUQPxu9JPTm9Zqb29QzQ/PrSkVx
bhA9EV8NMybXeYOvM2OaxOytO/7t7wanExZZ7+cWV7C00Qm6/eeMXxwpmhGWuEBf
jRFa+0ohJf4gg/OkDtpjeS+8gQG//CdKQa7ZhQwLEfyU7ubNQaL1mawLpVHigUqG
BGrge/GcW9UDKVcrwGGCqsyjmN9y+XSILsmpsyOaTPkuB8lmuBu5m4ShZKtglP/Y
nsVzMD7r6W52pPlsiD5cUVBI+Zb+0F5lp4MzNhbwNDdrxa8//PE5iPsqNLvPRdbS
zKM1+Jigji8hWX0nPg==
-----END CERTIFICATE-----