Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143495.roa
File:                     AS143495.roa (raw, json)
Hash identifier:          QUgutbmCg5pGTMOYebQbYH2L2VMa/G+hMXa60PInZrA=
Subject key identifier:   96:ED:1F:6F:D9:2F:82:30:FF:97:E3:49:FE:7F:02:25:A7:AF:8F:59
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1D8A84DF7288564F9BAAF4638B6B27B35F96F0FE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143495.roa
Signing time:             Fri 22 May 2026 07:40:58 +0000
ROA not before:           Fri 22 May 2026 07:35:58 +0000
ROA not after:            Fri 21 May 2027 07:40:58 +0000
asID:                     143495
IP address blocks:        240a:a34d::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:8a:84:df:72:88:56:4f:9b:aa:f4:63:8b:6b:27:b3:5f:96:f0:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:35:58 2026 GMT
            Not After : May 21 07:40:58 2027 GMT
        Subject: CN=96ED1F6FD92F8230FF97E349FE7F0225A7AF8F59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:52:79:d2:7a:8c:ed:12:7a:fe:94:d3:a1:ae:
                    38:07:18:3e:7b:1f:e0:0e:39:54:34:6f:93:5c:02:
                    ff:a2:65:1c:fb:5e:4c:76:47:79:0c:1c:27:0a:c0:
                    27:2c:e1:2f:10:8a:64:01:48:46:c9:d3:28:48:c4:
                    bd:58:33:c6:d3:73:0d:8b:a2:f3:1c:92:fc:4f:39:
                    4f:1d:9e:c6:40:8f:27:14:11:fa:10:53:aa:88:86:
                    73:09:c6:c5:a3:04:13:63:97:46:90:3f:f9:38:16:
                    82:15:8d:56:a5:9c:0b:4d:9c:92:03:d6:a8:54:02:
                    5c:1a:73:7d:0e:d6:8a:7c:f6:b4:ae:51:36:da:cd:
                    9c:d0:64:79:ac:f4:f4:77:6a:65:f6:e4:f6:79:f2:
                    4e:b8:08:ce:a9:49:89:cf:8d:39:b1:29:35:26:97:
                    31:b5:0e:8d:1c:c3:d4:05:2a:d0:0a:dd:d4:f8:e9:
                    2c:7c:50:5d:ca:0f:a4:7b:02:47:75:bd:c3:4a:9f:
                    e8:21:90:3a:75:e1:12:cc:b4:e1:db:84:7a:81:40:
                    fe:d2:e2:13:cc:95:1d:55:a1:8a:df:9b:4f:11:b7:
                    62:78:5b:67:b8:d5:f7:33:ea:8b:36:8e:48:0d:24:
                    f8:8e:b2:39:14:81:b0:9f:d9:ea:4a:2f:8a:b3:d1:
                    a8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:ED:1F:6F:D9:2F:82:30:FF:97:E3:49:FE:7F:02:25:A7:AF:8F:59
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143495.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a34d::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:b6:83:74:ab:f8:48:f1:a9:b6:48:a3:26:90:66:31:f8:c1:
         86:b1:a5:48:91:1d:dc:cb:18:0b:ec:4f:57:e7:7b:da:31:fc:
         8d:33:5f:7a:42:42:05:5d:b9:3e:ad:ec:54:23:86:67:9d:67:
         40:6f:dc:da:16:0b:53:52:a6:d5:af:7a:55:01:05:b8:55:fd:
         36:c0:9c:54:f1:f0:89:40:39:63:45:a9:c9:2e:76:79:1b:3a:
         95:02:b7:a6:17:7b:3b:64:37:75:76:7b:1f:07:85:5e:98:b8:
         7c:73:ae:bc:79:59:60:d3:1a:0c:cf:63:51:20:54:1c:33:66:
         1c:f4:8b:4f:fe:00:c2:8d:27:70:3c:8c:3d:bc:e2:ab:a0:10:
         4c:a9:f8:68:2f:87:05:ec:e6:79:2f:ae:4c:ec:57:a5:1b:9b:
         45:13:33:6c:9f:50:a1:ee:02:73:8c:9d:06:aa:5d:8a:49:89:
         e0:92:a3:89:c0:42:dd:f0:fb:cb:f9:d4:e0:5a:ca:42:90:61:
         44:5a:42:69:34:1b:8d:91:8e:87:bf:51:ca:5c:0e:e0:3b:4e:
         06:f8:8b:60:e8:2a:2d:4a:cd:e7:a2:c8:e5:6a:c5:99:64:66:
         23:d0:76:a2:eb:77:82:96:09:cd:3e:24:09:a8:5c:b0:e5:42:
         96:2a:4e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----