Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143531.roa
File:                     AS143531.roa (raw, json)
Hash identifier:          yJfSPYEmOwQzXtF/TGgSuHeqybyL630vrDSsIEyPQoM=
Subject key identifier:   5F:0A:67:BD:FC:35:72:6B:C2:F9:D7:69:5B:4C:FA:26:E4:F0:19:44
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4400D6304005F6C91888DB3AB83E5461072FD33A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143531.roa
Signing time:             Tue 26 May 2026 03:16:37 +0000
ROA not before:           Tue 26 May 2026 03:11:37 +0000
ROA not after:            Tue 25 May 2027 03:16:37 +0000
asID:                     143531
IP address blocks:        240a:a371::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:00:d6:30:40:05:f6:c9:18:88:db:3a:b8:3e:54:61:07:2f:d3:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:11:37 2026 GMT
            Not After : May 25 03:16:37 2027 GMT
        Subject: CN=5F0A67BDFC35726BC2F9D7695B4CFA26E4F01944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:db:11:8c:ad:af:9c:cf:fd:e2:38:fa:f3:c6:
                    03:41:8d:ae:41:7f:df:9e:53:6d:f6:92:a9:de:fd:
                    a3:57:c4:12:cc:a7:5e:44:a6:ba:24:92:b4:8f:09:
                    02:65:12:be:f1:06:8a:05:6e:3a:22:cb:1c:7d:dd:
                    c5:7a:88:a3:bc:b4:10:69:eb:7e:74:06:62:33:b1:
                    5d:1f:15:e7:56:b3:51:e4:5a:e6:1c:0b:2c:f2:48:
                    40:44:54:ad:79:89:2e:46:3b:d1:5f:49:46:f2:c6:
                    2d:12:f8:bb:1b:c4:59:4e:35:26:6d:08:bd:ae:b9:
                    08:ee:f3:84:2a:08:89:80:f6:b8:ad:ef:09:69:cb:
                    82:78:42:4e:0e:2d:d8:82:1d:34:f9:6d:0c:55:54:
                    30:18:ba:69:48:16:10:bc:49:c4:ee:aa:bb:a4:94:
                    a9:99:8f:34:0f:20:ed:36:0a:db:ac:5f:ad:69:27:
                    d0:34:6b:19:30:6e:e5:d4:da:39:85:ca:2a:58:07:
                    99:b3:3f:6c:23:7e:36:23:51:d7:9f:49:a4:5e:41:
                    17:98:0a:7c:de:17:ad:ef:6c:18:20:9e:dc:f0:2d:
                    11:4a:32:fe:81:b0:14:61:e6:8a:a0:b9:f4:c2:5e:
                    0c:f1:24:fb:1b:34:ee:20:00:5f:d2:26:39:31:6d:
                    94:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:0A:67:BD:FC:35:72:6B:C2:F9:D7:69:5B:4C:FA:26:E4:F0:19:44
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a371::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:fb:ed:5c:49:1c:05:fc:df:e5:1f:a5:a1:40:8f:07:67:f3:
         47:be:50:2a:9d:ca:5b:8a:f6:c9:3d:5c:91:a4:d0:ad:4c:00:
         7b:a0:12:c3:fe:c9:f3:93:c0:28:df:53:0e:dd:e7:22:3a:cd:
         4c:8c:c3:83:74:b6:5a:7b:bc:c9:a7:ac:5a:94:6d:e5:23:aa:
         df:86:5e:94:fd:25:2d:ee:5a:67:92:9f:ae:3f:e8:0e:3d:25:
         d4:86:cd:fd:5c:f3:62:1d:c8:4b:9e:9a:39:b4:33:22:50:9b:
         47:66:97:99:1b:2a:e7:4b:ae:7e:c8:62:de:3d:d5:a0:a3:fd:
         69:58:73:d2:ef:98:06:02:73:f0:9d:8d:63:e3:68:fe:fa:7b:
         36:60:eb:9e:85:bf:d3:8b:c9:4f:c1:2d:8b:54:a8:31:40:59:
         50:56:6d:88:0e:a4:f3:ca:2c:4c:91:77:fc:c9:29:21:56:06:
         b8:37:15:ef:fa:80:9e:cf:19:5e:cf:65:93:e7:ca:67:dd:fa:
         7c:1e:93:14:43:39:96:7f:75:eb:70:d7:bf:b8:18:f5:81:b0:
         5f:64:d5:dd:11:c4:0a:f5:c3:25:20:49:3c:52:c5:de:fe:d0:
         8c:ff:9a:1f:47:f5:46:25:e1:a4:2e:49:db:5d:e6:cc:03:00:
         ff:7d:52:0b
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIURADWMEAF9skYiNs6uD5UYQcv0zowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMzExMzdaFw0yNzA1MjUwMzE2MzdaMDMxMTAvBgNV
BAMTKDVGMEE2N0JERkMzNTcyNkJDMkY5RDc2OTVCNENGQTI2RTRGMDE5NDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC92xGMra+cz/3iOPrzxgNBja5B
f9+eU232kqne/aNXxBLMp15EprokkrSPCQJlEr7xBooFbjoiyxx93cV6iKO8tBBp
6350BmIzsV0fFedWs1HkWuYcCyzySEBEVK15iS5GO9FfSUbyxi0S+LsbxFlONSZt
CL2uuQju84QqCImA9rit7wlpy4J4Qk4OLdiCHTT5bQxVVDAYumlIFhC8ScTuqruk
lKmZjzQPIO02CtusX61pJ9A0axkwbuXU2jmFyipYB5mzP2wjfjYjUdefSaReQReY
CnzeF63vbBggntzwLRFKMv6BsBRh5oqgufTCXgzxJPsbNO4gAF/SJjkxbZRXAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUXwpnvfw1cmvC+ddpW0z6JuTwGUQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqjcTANBgkqhkiG9w0BAQsFAAOCAQEAjvvt
XEkcBfzf5R+loUCPB2fzR75QKp3KW4r2yT1ckaTQrUwAe6ASw/7J85PAKN9TDt3n
IjrNTIzDg3S2Wnu8yaesWpRt5SOq34ZelP0lLe5aZ5Kfrj/oDj0l1IbN/VzzYh3I
S56aObQzIlCbR2aXmRsq50uufshi3j3VoKP9aVhz0u+YBgJz8J2NY+No/vp7NmDr
noW/04vJT8Eti1SoMUBZUFZtiA6k88osTJF3/MkpIVYGuDcV7/qAns8ZXs9lk+fK
Z936fB6TFEM5ln9163DXv7gY9YGwX2TV3RHECvXDJSBJPFLF3v7QjP+aH0f1RiXh
pC5J213mzAMA/31SCw==
-----END CERTIFICATE-----