Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143526.roa
File:                     AS143526.roa (raw, json)
Hash identifier:          j80Bxs7Tr1feA/1rWZVIDmQ3uHRYztwuO7AJJqH65Pg=
Subject key identifier:   49:69:CE:AA:E7:FF:22:24:B6:24:AF:80:82:F5:D9:01:22:29:54:12
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2F00FDD7C8081C9402B6EFF9B2F0B3C25FCD11B4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143526.roa
Signing time:             Fri 22 May 2026 01:50:26 +0000
ROA not before:           Fri 22 May 2026 01:45:26 +0000
ROA not after:            Fri 21 May 2027 01:50:26 +0000
asID:                     143526
IP address blocks:        240a:a36c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:00:fd:d7:c8:08:1c:94:02:b6:ef:f9:b2:f0:b3:c2:5f:cd:11:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:26 2026 GMT
            Not After : May 21 01:50:26 2027 GMT
        Subject: CN=4969CEAAE7FF2224B624AF8082F5D90122295412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a9:4f:3b:dd:ca:d5:49:f0:ea:69:ca:71:6f:
                    13:b2:3d:98:4a:db:7b:1d:ec:07:f9:c4:61:42:fd:
                    05:5c:16:82:1b:de:b5:01:4c:46:2a:07:86:a0:fa:
                    c8:f4:02:be:89:98:e6:8c:ff:5f:0f:38:28:be:b1:
                    84:04:e4:2c:64:77:c5:f5:4e:20:4c:bb:09:7f:17:
                    53:49:b6:32:b3:88:39:97:0e:be:81:da:c8:fb:ac:
                    4f:0d:ac:26:f2:6c:ae:3f:e0:8f:f1:d9:38:bf:73:
                    88:9e:d3:22:b6:92:56:84:da:7c:bb:62:0a:10:ff:
                    1e:74:b3:79:01:fa:fa:18:33:62:cc:f9:93:07:7b:
                    63:48:9c:83:be:51:a5:3d:84:7d:dc:f9:18:69:34:
                    3f:aa:0b:6e:d5:a4:be:ec:40:b9:0d:e6:52:cd:45:
                    ba:1c:50:eb:21:76:b2:d1:82:64:67:e0:44:68:96:
                    06:58:83:8f:0a:bf:82:74:89:6f:a5:78:5b:17:cf:
                    bb:4d:e5:76:4d:a4:d7:8d:1b:17:ae:26:14:30:da:
                    fb:cd:2a:8e:96:da:10:49:ba:29:cf:1a:f9:b8:1b:
                    8a:0b:01:1c:ec:ad:12:cc:fb:b2:eb:2e:79:02:b5:
                    51:70:f5:ca:81:2d:53:f5:25:25:e0:ba:2c:df:63:
                    40:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:69:CE:AA:E7:FF:22:24:B6:24:AF:80:82:F5:D9:01:22:29:54:12
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143526.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a36c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:34:b1:67:42:0e:b3:25:00:0c:02:4e:89:12:4b:85:f1:8d:
         db:54:ef:fc:a1:4e:38:b3:48:77:cd:3a:e6:66:83:68:f7:df:
         7b:87:12:39:15:e1:50:b2:ae:55:a1:fd:ff:4d:f7:22:50:21:
         5e:66:15:c1:47:14:63:85:f3:b2:a9:8b:0a:51:2b:c5:91:e7:
         c3:0a:12:b2:35:5e:df:b5:c8:fb:12:7a:8b:28:f4:29:b0:98:
         18:3d:5c:e5:4e:2c:10:e1:5a:57:da:f3:73:eb:0d:43:99:a6:
         40:b0:a0:4d:42:bf:e6:7d:c9:4b:93:ab:c2:b4:1f:55:b4:71:
         05:af:1d:2d:91:37:c3:e5:ba:d4:3a:d9:37:0c:06:c3:98:0c:
         db:e5:b8:ba:99:2f:79:ca:03:fb:fd:3e:be:82:fd:6e:62:f0:
         c7:7e:31:c6:6a:8c:7a:2a:6e:b4:fa:4a:81:15:4a:31:3c:19:
         de:ab:6d:f2:fe:ad:96:f0:01:e5:0a:d4:15:2c:96:b6:c6:a0:
         27:98:9e:d5:2e:78:6f:50:a7:d6:de:5c:36:0b:11:dc:7f:1c:
         f5:0a:21:4e:a2:3c:7a:80:71:c4:07:36:bf:2e:6e:59:12:a0:
         15:52:08:90:06:c9:4c:76:8c:de:0f:da:92:f5:ca:0c:f3:85:
         19:a8:44:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----