Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143521.roa
File:                     AS143521.roa (raw, json)
Hash identifier:          hLUX+QUiFQuW7MMDqY3a+GXwmhak9J9R7RrqCJ/kErM=
Subject key identifier:   F5:94:CE:62:8C:8A:A3:0B:66:CF:0C:CD:F9:12:07:37:DB:E6:52:75
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       56BB19164D2ECD08A6D21E1590DF95EE5B7E76B6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143521.roa
Signing time:             Fri 22 May 2026 07:24:27 +0000
ROA not before:           Fri 22 May 2026 07:19:27 +0000
ROA not after:            Fri 21 May 2027 07:24:27 +0000
asID:                     143521
IP address blocks:        240a:a367::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:bb:19:16:4d:2e:cd:08:a6:d2:1e:15:90:df:95:ee:5b:7e:76:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:19:27 2026 GMT
            Not After : May 21 07:24:27 2027 GMT
        Subject: CN=F594CE628C8AA30B66CF0CCDF9120737DBE65275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bc:ce:f6:7e:79:3a:9d:f4:70:87:36:73:7c:
                    e9:d7:96:fb:6d:93:ba:a6:22:90:6e:55:ce:69:7e:
                    8e:ea:94:4b:08:8a:8d:b0:51:35:ed:d9:4a:05:a8:
                    2f:f3:bc:32:95:53:f9:92:67:c3:cd:1d:5a:3b:e9:
                    8a:da:7a:9d:ea:93:ce:6a:41:3e:a2:4a:6f:8f:96:
                    d2:c6:df:ad:18:d6:d6:4b:82:5d:38:f8:f0:d0:80:
                    86:a5:24:57:93:39:8b:3a:fe:2c:39:04:b7:df:81:
                    e1:a2:b2:34:6a:17:a3:65:02:29:b7:05:29:02:46:
                    55:48:80:d7:3a:c5:f3:12:24:83:10:46:49:ed:d7:
                    8a:12:18:ef:02:3a:ee:09:cc:d4:48:1a:b9:00:1b:
                    e1:c6:51:1c:e8:71:a0:70:d8:ab:fa:97:a3:9b:35:
                    b8:a7:0c:6b:b1:67:c0:17:dd:26:bc:33:f8:0c:7d:
                    93:71:3e:67:b4:4f:91:41:84:12:d5:8e:95:d6:8a:
                    0a:a2:82:c8:27:a1:00:ac:c7:ba:8c:7e:bb:e7:68:
                    69:ee:68:ef:82:3e:a4:d7:d6:5d:f5:db:26:5b:d7:
                    14:04:5a:82:82:4c:52:18:85:5c:79:db:0c:2d:b4:
                    bf:c3:87:81:a0:9e:f1:47:cd:20:d2:7e:18:01:fc:
                    9d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:94:CE:62:8C:8A:A3:0B:66:CF:0C:CD:F9:12:07:37:DB:E6:52:75
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143521.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a367::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:6e:29:f1:22:79:4e:65:6b:a8:f0:86:11:7f:14:58:c9:d6:
         e8:ae:fd:ff:ca:e8:59:b6:60:8b:bc:ef:53:8f:7e:9f:dc:e9:
         a3:c0:71:92:78:d4:55:d1:96:1a:1d:7f:8c:ad:8d:18:ad:ed:
         b5:7e:8f:05:8b:63:9d:61:d7:70:32:1d:d4:ad:c1:f2:24:b0:
         9d:3a:e0:82:a1:da:18:41:91:ab:08:e2:fe:70:3c:31:6f:a4:
         39:0d:99:39:cc:f7:72:59:6f:e5:1c:42:e8:67:fb:05:2e:58:
         60:8e:ab:21:3d:20:26:99:65:2d:21:f3:e0:2b:bf:eb:0d:c5:
         aa:3a:37:b2:e9:89:3a:a9:ef:2f:4f:3e:ec:79:45:e2:c6:17:
         33:54:8c:df:42:ea:32:b3:67:5d:ab:3a:36:fb:a7:8c:c7:1e:
         79:d5:6c:83:18:50:bb:4f:7c:c4:8a:43:c3:98:f8:95:1a:17:
         f7:c7:6c:3b:66:b2:e6:f7:81:4d:3b:af:98:56:fb:fe:d8:6b:
         e5:36:c8:80:ae:f4:88:07:0f:ac:09:3a:7e:b8:22:c4:54:55:
         c3:73:78:9c:a6:ce:72:88:2f:c5:05:74:24:da:4b:78:2e:de:
         a0:43:ba:bb:7c:15:49:f5:c7:89:0f:fb:bb:37:64:10:03:e4:
         69:3c:63:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----