Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143573.roa
File:                     AS143573.roa (raw, json)
Hash identifier:          3T1mZ1rvacLVHRul9Hp64OPDDEWkqC13F1+2o0nM8Ec=
Subject key identifier:   95:A8:F6:27:10:AF:61:F3:60:C9:A2:24:6B:00:61:2E:B9:74:0A:9E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5E543DD292B0C9D976F1742AAA741AF128319C0A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143573.roa
Signing time:             Mon 25 May 2026 02:22:49 +0000
ROA not before:           Mon 25 May 2026 02:17:49 +0000
ROA not after:            Mon 24 May 2027 02:22:49 +0000
asID:                     143573
IP address blocks:        240a:a39b::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:54:3d:d2:92:b0:c9:d9:76:f1:74:2a:aa:74:1a:f1:28:31:9c:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 02:17:49 2026 GMT
            Not After : May 24 02:22:49 2027 GMT
        Subject: CN=95A8F62710AF61F360C9A2246B00612EB9740A9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:af:c8:88:41:82:04:8c:19:72:27:24:15:e7:
                    72:20:af:41:bd:d5:4d:ef:c7:9c:a7:ff:02:b8:b3:
                    0f:01:91:c9:cd:d0:8c:d6:66:f0:55:05:57:21:9f:
                    cd:09:b1:1a:7a:f9:bf:9d:3a:fa:3f:dd:f0:5a:42:
                    89:c6:56:11:6c:0f:30:c2:24:84:86:33:91:9c:e4:
                    e7:33:12:f3:e3:57:70:f6:96:3a:ab:be:df:6d:72:
                    ab:13:bd:2f:f1:7a:c2:95:0e:82:5c:81:6d:22:96:
                    3d:41:57:8a:0a:26:43:ad:ae:b4:3a:73:0c:5b:fa:
                    d4:05:c7:d6:13:2f:c0:07:c2:c9:a0:1a:93:bc:ee:
                    fd:ba:af:af:e5:ea:a4:fb:12:48:53:3d:e0:31:7e:
                    80:68:df:3d:c9:8b:9c:89:ac:8a:cf:bb:e1:0d:00:
                    e7:2d:9f:cf:f6:37:bc:ef:b2:cf:10:96:71:af:f9:
                    1c:04:12:a3:7e:48:ac:6f:62:0a:5a:96:8b:b9:d2:
                    34:1a:70:ec:ac:e7:51:86:77:d8:1c:8f:f6:2c:3d:
                    e7:c8:0b:fa:a5:85:2e:68:91:15:60:1d:66:03:2c:
                    63:04:a3:42:cf:5f:0c:df:bd:52:3c:11:67:f9:08:
                    b2:5a:e9:c9:88:cb:78:e1:78:d5:3f:a3:6f:ab:d0:
                    57:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A8:F6:27:10:AF:61:F3:60:C9:A2:24:6B:00:61:2E:B9:74:0A:9E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143573.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a39b::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:92:21:88:be:e6:0e:4a:5f:94:fc:de:58:6a:fa:a6:73:5c:
         79:a0:49:b2:66:3b:d3:22:6c:42:83:ff:66:f1:7e:ca:8e:2d:
         e4:90:39:ae:a7:3e:9d:d5:a5:fc:04:b6:17:56:76:60:20:b4:
         23:d1:85:18:6a:9b:37:df:c4:c7:ac:8c:a5:e3:5d:13:86:45:
         ef:ff:5f:71:15:42:8f:d1:97:0c:94:99:7d:37:ce:e2:e7:15:
         64:95:ad:37:51:7d:2a:f8:75:e1:8b:66:06:99:22:fb:22:a0:
         c8:a1:1d:cc:85:56:b3:26:43:ef:96:53:46:2a:b3:69:75:09:
         09:82:50:16:27:72:ca:9b:19:48:9d:9c:8d:d2:4c:27:7e:c5:
         84:e0:6a:2d:65:20:d8:ca:ee:56:69:a4:67:a9:b3:57:c5:53:
         2f:a4:81:79:c9:f7:65:f3:19:97:58:a5:4b:16:1b:fc:ec:ec:
         59:02:31:ad:f9:1e:ca:82:7c:16:cd:d7:88:17:5b:31:40:5a:
         1c:2a:4b:14:ae:87:98:cc:c3:2b:ce:2b:27:87:c6:61:01:87:
         63:a0:e1:ee:b5:74:fb:17:b9:1a:59:fd:ec:f5:80:f4:01:bc:
         7a:d9:a0:82:4e:e8:73:5a:7e:bf:50:46:61:60:9e:e7:9f:e2:
         ec:96:fc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----