Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143520.roa
File:                     AS143520.roa (raw, json)
Hash identifier:          lYu7DYDzbLqG3EVhIVB/yGQl+I3EVTN9qTS6e6lZBe0=
Subject key identifier:   2B:61:55:E9:D2:B3:F5:F4:F1:FC:7B:DD:1A:92:85:7E:33:EB:55:F4
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       39E1741B5D373A28391D3301E477389454F1E31A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143520.roa
Signing time:             Fri 22 May 2026 02:48:07 +0000
ROA not before:           Fri 22 May 2026 02:43:07 +0000
ROA not after:            Fri 21 May 2027 02:48:07 +0000
asID:                     143520
IP address blocks:        240a:a366::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e1:74:1b:5d:37:3a:28:39:1d:33:01:e4:77:38:94:54:f1:e3:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:43:07 2026 GMT
            Not After : May 21 02:48:07 2027 GMT
        Subject: CN=2B6155E9D2B3F5F4F1FC7BDD1A92857E33EB55F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ce:eb:1a:10:7d:40:aa:43:bc:ec:4a:68:75:
                    c6:5a:14:b6:17:46:16:c4:1b:ad:85:3b:ee:86:48:
                    75:8c:59:22:cc:40:94:4e:e7:43:fc:f3:6b:47:94:
                    6a:ab:8c:fc:1a:43:a5:43:6f:ee:9b:1d:8a:77:9a:
                    73:26:cd:86:88:ff:67:dc:1b:c2:ca:ba:e8:67:30:
                    68:8d:8a:e0:83:e2:56:40:7b:fc:0b:57:c5:86:c9:
                    59:8d:df:a0:95:ce:15:84:ca:76:a9:7a:60:7b:05:
                    81:94:2c:86:6c:78:a7:da:ec:55:f9:47:7c:9c:74:
                    ce:61:1a:57:25:88:5d:85:d8:a2:ab:96:23:3b:09:
                    a8:69:9e:f8:c8:d3:ee:c2:96:53:eb:22:fd:fd:d3:
                    7f:4e:f6:77:b2:2a:4b:8f:35:15:94:8c:ad:c7:ef:
                    47:56:0c:ab:9b:fc:97:a2:db:d0:95:af:51:f7:68:
                    e9:f5:57:4c:a8:aa:3c:c2:d3:bb:4c:0c:0b:a8:c9:
                    aa:3c:19:2e:04:ab:68:bf:56:67:32:4f:72:79:ac:
                    ea:53:46:00:59:bc:6a:c5:b7:f6:ab:0d:b1:5d:88:
                    78:b4:de:38:af:53:bb:e7:80:09:5f:e2:af:04:34:
                    e9:fc:eb:95:93:a8:02:43:5b:30:f2:1e:a1:a7:79:
                    66:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:61:55:E9:D2:B3:F5:F4:F1:FC:7B:DD:1A:92:85:7E:33:EB:55:F4
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143520.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a366::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:ad:b1:5d:f6:d2:78:54:8d:8e:a3:5a:80:19:a3:a3:82:0d:
         f1:49:09:0a:a0:85:03:20:93:9c:2b:53:b7:a6:7e:a1:39:d3:
         57:06:9d:2f:ef:0c:b5:bc:ab:0b:5e:d7:00:68:56:64:be:9e:
         ae:23:42:94:41:0f:78:4d:6a:54:2f:f6:bc:64:4c:64:c7:4b:
         52:7d:ae:fd:7b:85:a1:a9:a1:35:a7:0a:eb:0b:64:fb:1d:6e:
         81:02:76:c8:39:b5:f3:ea:e4:6f:e4:d5:25:3e:cf:68:76:3a:
         37:8a:84:00:d7:cd:39:4a:5d:89:17:de:b2:4e:40:37:22:fc:
         32:23:e7:b3:61:8f:e2:dc:80:bb:f0:11:7e:c9:74:b1:96:49:
         22:fe:02:d1:f1:d0:eb:ea:45:29:b8:6d:90:96:e5:55:6d:14:
         84:24:8f:f4:10:0e:44:31:a4:93:4e:48:a9:9a:8c:3a:e0:99:
         44:d8:17:8d:98:34:42:7f:86:b7:13:0a:d6:8a:7e:73:9e:5c:
         5f:1e:04:e3:0a:61:dc:aa:1b:e9:b1:fc:ba:cb:68:7d:20:40:
         2a:4b:2d:77:df:e7:38:dc:3e:0c:df:9c:69:55:f0:a6:71:fd:
         e7:1b:26:c0:a6:11:13:b8:2e:db:02:b4:38:9c:96:98:f0:c5:
         c2:60:08:d6
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUOeF0G103Oig5HTMB5Hc4lFTx4xowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMjQzMDdaFw0yNzA1MjEwMjQ4MDdaMDMxMTAvBgNV
BAMTKDJCNjE1NUU5RDJCM0Y1RjRGMUZDN0JERDFBOTI4NTdFMzNFQjU1RjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLzusaEH1AqkO87EpodcZaFLYX
RhbEG62FO+6GSHWMWSLMQJRO50P882tHlGqrjPwaQ6VDb+6bHYp3mnMmzYaI/2fc
G8LKuuhnMGiNiuCD4lZAe/wLV8WGyVmN36CVzhWEynapemB7BYGULIZseKfa7FX5
R3ycdM5hGlcliF2F2KKrliM7CahpnvjI0+7CllPrIv39039O9neyKkuPNRWUjK3H
70dWDKub/Jei29CVr1H3aOn1V0yoqjzC07tMDAuoyao8GS4Eq2i/VmcyT3J5rOpT
RgBZvGrFt/arDbFdiHi03jivU7vngAlf4q8ENOn865WTqAJDWzDyHqGneWZHAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUK2FV6dKz9fTx/HvdGpKFfjPrVfQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNTIwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqjZjANBgkqhkiG9w0BAQsFAAOCAQEAu62x
XfbSeFSNjqNagBmjo4IN8UkJCqCFAyCTnCtTt6Z+oTnTVwadL+8MtbyrC17XAGhW
ZL6eriNClEEPeE1qVC/2vGRMZMdLUn2u/XuFoamhNacK6wtk+x1ugQJ2yDm18+rk
b+TVJT7PaHY6N4qEANfNOUpdiRfesk5ANyL8MiPns2GP4tyAu/ARfsl0sZZJIv4C
0fHQ6+pFKbhtkJblVW0UhCSP9BAORDGkk05IqZqMOuCZRNgXjZg0Qn+GtxMK1op+
c55cXx4E4wph3Kob6bH8ustofSBAKkstd9/nONw+DN+caVXwpnH95xsmwKYRE7gu
2wK0OJyWmPDFwmAI1g==
-----END CERTIFICATE-----