Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143583.roa
File:                     AS143583.roa (raw, json)
Hash identifier:          lMxYFW/Z4y02aaJbDOr4pS4FQy6Pq0g0AQoxys4Q5J4=
Subject key identifier:   F1:4A:EF:7F:5D:75:DF:08:36:92:D3:28:7C:FC:E5:6A:CF:A3:03:00
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7EB3CC9E0DB0331E945C214EE80E150877F76DEB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143583.roa
Signing time:             Mon 25 May 2026 03:19:44 +0000
ROA not before:           Mon 25 May 2026 03:14:44 +0000
ROA not after:            Mon 24 May 2027 03:19:44 +0000
asID:                     143583
IP address blocks:        240a:a3a5::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b3:cc:9e:0d:b0:33:1e:94:5c:21:4e:e8:0e:15:08:77:f7:6d:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:44 2026 GMT
            Not After : May 24 03:19:44 2027 GMT
        Subject: CN=F14AEF7F5D75DF083692D3287CFCE56ACFA30300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b3:0b:f6:d9:7b:cf:20:7e:19:dc:c0:ba:50:
                    74:87:ec:d8:bc:9d:8b:d2:3a:d4:94:c0:24:12:34:
                    1b:68:34:83:6e:ba:39:e5:37:74:e7:00:b5:36:a9:
                    aa:75:73:a5:91:e3:1f:a1:85:7e:99:0e:90:ba:c5:
                    bc:f5:31:03:8f:e3:92:9e:32:bf:a9:e6:fb:b0:81:
                    62:28:1c:79:38:54:43:75:f3:ac:50:fd:48:33:93:
                    6b:9a:22:15:e0:b7:59:8e:43:ea:27:29:c4:02:1d:
                    77:ba:d8:17:cc:89:5e:73:12:4f:aa:08:19:81:f1:
                    98:49:6b:2c:aa:5d:8c:79:18:f0:41:f1:d2:78:ca:
                    7a:6f:eb:5b:91:8c:86:a5:a7:cb:71:17:49:25:32:
                    fa:e0:1e:0e:29:33:ab:4e:70:65:29:da:3b:88:9e:
                    90:1d:36:72:d5:02:03:c1:a1:e2:f1:b6:c1:78:5a:
                    a4:07:5a:64:76:8c:a0:31:92:57:ba:f9:98:07:f4:
                    8e:bd:27:82:52:ac:39:67:ae:f7:3c:6d:78:71:e2:
                    f4:71:88:bc:27:7e:d7:04:bc:3b:c8:9d:f8:eb:22:
                    c3:07:4b:3b:64:d4:1b:a5:12:64:12:02:2f:43:ac:
                    de:f4:a8:04:43:6a:be:22:60:c9:ad:72:ae:92:61:
                    ed:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:4A:EF:7F:5D:75:DF:08:36:92:D3:28:7C:FC:E5:6A:CF:A3:03:00
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143583.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a3a5::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:a2:1f:0d:09:2c:58:0f:4d:bb:bd:13:d1:1a:1c:7e:4c:c9:
         0b:15:95:fe:46:86:02:e6:59:a5:22:29:f8:94:26:8b:bd:c7:
         82:ee:74:ec:6c:4a:24:10:d6:1b:ae:8f:db:fe:3d:9a:96:70:
         7e:fd:d9:58:b3:43:0c:e4:06:c7:4d:8f:94:76:47:83:52:72:
         87:58:0c:51:79:57:d9:ed:85:96:d3:56:33:d5:84:0c:5f:63:
         b4:18:85:70:b9:61:75:31:78:a2:0a:57:16:c5:31:b1:8a:72:
         f9:41:bc:4a:49:af:c7:3c:94:0a:3b:65:f5:3c:83:51:c0:da:
         81:22:40:64:20:8f:e1:57:31:3e:24:b2:e5:e4:5f:5d:d3:d9:
         4a:81:d8:f3:bb:0c:72:5f:6a:6a:c7:83:6f:37:86:2e:2e:29:
         08:cb:5b:b0:37:c7:16:72:98:65:69:ea:ac:b3:85:5d:03:03:
         52:e5:95:18:11:81:a8:34:b9:c9:79:ce:55:50:30:f3:7f:30:
         c3:38:65:63:ac:6c:b8:22:05:ea:28:be:10:5c:5d:a0:7d:38:
         5b:09:7e:78:1e:0b:23:8b:44:a0:4c:f1:8c:10:f2:49:20:86:
         2b:ff:9b:64:33:2a:bb:85:5c:10:b5:bd:3f:1f:99:2a:1e:b2:
         7b:7f:14:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----