Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143478.roa
File:                     AS143478.roa (raw, json)
Hash identifier:          SitieQPPFZcjm2kve9jU9FxK2Anq2KFscke0Tewjp0I=
Subject key identifier:   B9:D2:66:CD:6B:5B:C7:AD:37:70:3E:8A:72:E0:28:55:24:1F:58:82
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1354F5395D03B6A098A8A903332CD59739FB2A81
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143478.roa
Signing time:             Fri 22 May 2026 07:24:37 +0000
ROA not before:           Fri 22 May 2026 07:19:37 +0000
ROA not after:            Fri 21 May 2027 07:24:37 +0000
asID:                     143478
IP address blocks:        240a:a33c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:54:f5:39:5d:03:b6:a0:98:a8:a9:03:33:2c:d5:97:39:fb:2a:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:19:37 2026 GMT
            Not After : May 21 07:24:37 2027 GMT
        Subject: CN=B9D266CD6B5BC7AD37703E8A72E02855241F5882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:01:2c:88:8a:75:ad:91:89:92:f2:01:61:8b:
                    ff:c0:b9:b0:0e:21:34:36:34:3b:6c:d0:06:d0:25:
                    19:63:22:fe:b2:0f:d0:0b:a6:91:a7:72:5c:86:72:
                    3d:0f:fe:a5:05:18:40:1e:1d:48:48:6c:ce:51:17:
                    c2:2f:c5:02:e0:84:9d:99:2c:cf:73:47:5e:7f:b7:
                    ba:9b:9a:84:be:3b:82:00:f9:ed:7c:36:aa:0b:13:
                    e2:9e:cf:73:60:2d:90:18:11:a5:11:71:95:99:51:
                    45:ac:39:fa:21:cf:21:34:35:b4:b7:e6:38:04:31:
                    e8:a2:3d:6a:0b:16:ab:7c:87:d3:e8:3d:18:0c:75:
                    6e:ab:9b:48:d4:33:cf:d4:15:68:4b:5f:28:61:69:
                    53:bd:52:6f:cf:66:81:46:16:3b:ab:3f:fe:3a:9b:
                    1f:d3:fb:1c:fc:d4:e2:51:08:bf:56:18:c7:c6:a8:
                    7d:37:3f:2e:44:77:aa:03:e9:29:bf:c8:01:f1:c0:
                    e4:ec:88:5b:d7:d4:95:10:51:3e:42:87:0e:3e:d6:
                    4c:35:1e:15:ab:a2:a0:ba:99:bb:90:97:20:80:89:
                    fe:75:7e:c9:02:0e:19:12:f2:49:4b:fd:07:70:9d:
                    7a:84:fa:27:f2:a5:50:6e:58:e2:5a:68:31:10:70:
                    48:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D2:66:CD:6B:5B:C7:AD:37:70:3E:8A:72:E0:28:55:24:1F:58:82
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143478.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a33c::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:4d:c6:52:03:04:84:7f:46:7e:d3:b0:c9:bc:47:82:a9:84:
         1c:d3:0e:ec:2c:47:97:95:28:9b:e6:31:f4:39:f5:fd:b7:a2:
         14:5e:b9:cd:d1:88:51:24:1d:40:36:5c:e6:41:31:e8:ca:d0:
         6f:fa:43:f3:78:b4:df:46:55:6a:0c:8a:4f:b9:2a:23:95:06:
         5a:1e:28:c9:44:22:1c:47:fe:da:b7:ae:db:a5:b5:3c:09:12:
         a4:8a:1b:14:fa:39:61:6b:27:bf:80:b0:93:a7:c2:29:55:1f:
         f6:dc:26:41:47:ef:70:ea:da:a1:39:4a:1d:17:c6:d4:83:55:
         28:c5:ca:7a:00:15:7f:c1:40:a5:b8:33:2f:1d:75:94:ff:79:
         12:00:24:e8:7d:6f:53:60:b9:98:d6:56:2f:f9:d4:bc:72:3f:
         fe:34:7c:0b:4c:8f:9a:0c:c1:82:30:9a:39:c2:d0:0c:35:89:
         61:d6:23:dc:71:e9:da:1e:4a:f5:c1:c6:6f:b0:d9:2d:b9:96:
         e4:01:67:09:7a:61:3e:de:74:ca:5a:49:ce:0b:8f:33:94:ff:
         74:95:bd:ba:35:8c:32:df:62:ec:cc:de:a1:46:35:7c:82:c5:
         d5:d1:bb:41:ee:eb:60:25:6c:b2:50:04:45:23:ae:b9:b7:c0:
         aa:10:89:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----