Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143466.roa
File:                     AS143466.roa (raw, json)
Hash identifier:          TJZsDVENqDtRJ6sX37jiDuTYopKpA3sDAJDhn48lL+4=
Subject key identifier:   87:51:1B:78:46:CF:57:2A:78:AD:D7:58:73:D7:58:CB:8B:B1:B8:C8
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4AE599DF55749D056E1603EF38C70B108513E79E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143466.roa
Signing time:             Fri 22 May 2026 07:41:23 +0000
ROA not before:           Fri 22 May 2026 07:36:23 +0000
ROA not after:            Fri 21 May 2027 07:41:23 +0000
asID:                     143466
IP address blocks:        240a:a330::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e5:99:df:55:74:9d:05:6e:16:03:ef:38:c7:0b:10:85:13:e7:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:36:23 2026 GMT
            Not After : May 21 07:41:23 2027 GMT
        Subject: CN=87511B7846CF572A78ADD75873D758CB8BB1B8C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f4:78:e5:17:67:e7:9e:f8:a1:61:9f:72:87:
                    b8:e2:cf:7e:bf:58:b8:b8:50:1a:08:20:70:0c:d5:
                    45:c7:32:ff:34:33:72:1d:45:b7:7c:bb:4c:ad:60:
                    57:7d:17:3b:95:89:4a:d0:8d:49:a6:57:0a:34:e1:
                    86:78:a9:59:bd:ab:0e:04:c8:f1:3e:a1:3a:cc:d2:
                    b1:47:db:69:c4:0a:cb:dd:be:c4:ee:c3:09:04:04:
                    4b:b8:66:d6:2e:57:f9:25:fc:23:8b:16:40:44:f2:
                    d4:36:bc:ab:57:a5:a5:5c:2f:d7:eb:4d:2e:d4:6c:
                    73:15:e4:9f:bc:42:db:ac:84:95:8e:18:7f:52:22:
                    ee:82:8b:9b:ed:b7:81:65:9e:b9:0f:bf:2f:51:ad:
                    1a:9f:85:40:66:f0:be:fb:22:75:4f:f0:c0:49:6b:
                    e2:60:9e:94:77:ce:ab:49:dc:68:e9:ef:ad:2f:91:
                    16:c2:53:7a:bb:fb:57:62:14:ae:83:e4:72:6d:dd:
                    48:10:3a:52:db:fb:69:c9:45:2f:eb:5b:8f:b8:ab:
                    17:71:e4:99:a2:2a:7e:92:a9:02:62:c3:7b:15:13:
                    93:59:ed:b5:77:48:28:ff:e3:d0:81:5c:c5:42:10:
                    00:5e:e9:7f:12:b5:99:d2:a5:2d:22:a4:41:48:40:
                    83:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:51:1B:78:46:CF:57:2A:78:AD:D7:58:73:D7:58:CB:8B:B1:B8:C8
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143466.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a330::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:40:dc:2d:75:1a:67:cb:33:2a:38:be:83:1d:5f:3d:7e:6f:
         65:80:e2:6b:32:75:6d:cc:1a:d0:d6:68:8e:4b:cb:e0:f5:ca:
         5b:da:53:83:fa:99:e5:bb:23:b9:d3:09:68:ab:0e:19:bf:a5:
         e5:9b:8f:ba:53:55:96:0a:c7:07:93:48:fc:cc:db:89:75:13:
         31:30:e4:c7:c7:cb:f3:85:c4:0e:e1:f0:30:f7:ab:3a:79:ec:
         e6:27:df:01:ab:fd:e3:44:ef:95:33:2c:ad:e8:55:72:ff:57:
         5a:38:91:bc:3d:fd:b4:36:78:54:a5:67:a1:18:73:0d:98:49:
         c6:ee:d2:e0:f9:52:2c:b2:a9:f9:95:fa:16:98:a6:e5:f8:e4:
         b6:0b:91:45:f7:b3:18:b0:4b:ec:1f:a7:d7:d2:e6:a3:dd:b7:
         61:d6:7b:5b:04:ca:04:81:64:98:6e:47:cc:b5:c4:98:33:80:
         b2:12:17:23:a6:08:14:f0:13:be:1d:18:de:7d:60:98:29:be:
         69:a1:29:ab:58:14:cc:8e:4c:87:c6:64:a5:0d:2d:34:77:7b:
         a9:0e:42:29:cc:a6:c9:54:4a:dc:ed:d2:39:8f:f2:c4:31:cd:
         48:4e:e5:fb:e9:fd:58:43:04:4d:66:33:68:e8:1f:d0:be:8c:
         69:7b:0b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----