Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143551.roa
File:                     AS143551.roa (raw, json)
Hash identifier:          eTIHWlrdt6By96DjYs6VW0e436KjaC4ioG6tTuGBZiQ=
Subject key identifier:   8C:AF:0A:7D:C5:7B:53:8B:41:CE:9C:57:65:1B:C2:51:A6:44:DF:80
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5C163A1F58AF6579820801534CB87D9B3E88ED00
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143551.roa
Signing time:             Mon 25 May 2026 03:19:46 +0000
ROA not before:           Mon 25 May 2026 03:14:46 +0000
ROA not after:            Mon 24 May 2027 03:19:46 +0000
asID:                     143551
IP address blocks:        240a:a385::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:16:3a:1f:58:af:65:79:82:08:01:53:4c:b8:7d:9b:3e:88:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:46 2026 GMT
            Not After : May 24 03:19:46 2027 GMT
        Subject: CN=8CAF0A7DC57B538B41CE9C57651BC251A644DF80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bd:58:d9:a3:3f:d2:32:12:d8:d6:22:3f:8b:
                    4f:f7:c3:ee:17:1e:ca:53:cc:1c:e4:93:f8:64:e4:
                    9a:24:7b:b5:ea:41:23:32:ad:c7:f9:e0:d6:fc:c8:
                    aa:f4:79:ac:2f:64:08:51:5e:ac:51:c3:e6:86:b0:
                    11:b2:7e:e4:93:da:d7:af:00:23:4d:3e:43:0d:f8:
                    9e:31:37:4c:a2:8c:27:80:20:e9:74:0b:8d:2c:ef:
                    c5:a7:3e:42:a6:cf:01:45:0b:d0:33:b1:76:b5:8e:
                    95:17:45:74:cd:f6:a9:28:74:ba:d2:c4:5e:9b:0e:
                    99:8b:fb:3b:4b:01:1b:2c:f5:77:e2:de:f1:17:d9:
                    67:ec:12:68:32:e2:92:b5:51:5b:c5:eb:ea:e1:68:
                    26:bf:02:cc:1a:d5:f8:ea:b2:78:e2:9a:43:7a:97:
                    76:88:14:c8:9a:fb:70:69:0e:dc:d7:0a:0e:bc:1f:
                    b2:d6:c3:4b:91:25:ce:ee:8d:19:ef:09:3f:8f:f5:
                    2f:e6:a9:eb:96:09:24:fe:5d:aa:66:20:86:ef:e4:
                    24:ca:01:8d:2c:f9:33:2d:29:af:19:a7:f8:ee:7f:
                    04:3e:d3:c5:ba:9a:78:c7:b5:71:4b:b6:17:12:c4:
                    62:8e:9c:52:18:87:7b:f0:55:0c:9f:ce:45:2a:53:
                    62:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:AF:0A:7D:C5:7B:53:8B:41:CE:9C:57:65:1B:C2:51:A6:44:DF:80
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143551.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a385::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:09:06:27:52:02:5a:1d:e7:6f:f9:3b:45:dd:d3:fc:0d:9d:
         ae:83:ee:c2:a2:2f:c2:d5:da:ff:74:b5:e4:c3:b1:fe:f7:cc:
         82:f5:8b:d1:7a:28:b2:a4:2e:16:a8:2d:8c:96:bc:87:c5:c7:
         47:2e:4f:98:b0:49:f1:2d:7a:9d:92:90:5d:11:06:a4:f5:65:
         f7:be:be:4f:01:b3:4b:14:53:0b:c0:94:d7:cb:29:d9:39:93:
         cd:ce:38:a9:0b:ed:4e:78:de:bc:48:87:4e:da:3a:56:a6:98:
         94:b6:8a:c2:0a:97:78:f3:d3:88:38:f3:e7:16:c4:1a:66:57:
         71:35:71:78:cd:dd:56:51:5b:71:e0:3e:79:a5:6c:cc:0c:e3:
         73:ed:6b:05:4b:e2:00:b1:2c:e1:23:7d:45:a6:f3:6a:47:5f:
         8e:39:47:38:42:1e:56:6b:3c:dd:cf:cf:64:cc:b1:1d:2b:67:
         76:4a:19:27:02:fd:9d:d7:94:70:8d:53:1d:81:f9:ac:93:24:
         bd:3f:7d:89:ce:d5:82:95:1a:f8:0d:6f:34:90:3f:32:46:c9:
         9b:e2:45:3c:49:f3:0f:d7:2f:ff:73:25:b2:31:cc:67:3c:c1:
         67:3b:5d:57:ca:31:f8:29:a8:91:e4:fd:c2:d1:c8:a4:fc:d5:
         af:7a:9d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----