Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143652.roa
File:                     AS143652.roa (raw, json)
Hash identifier:          /ytiy+P3wBAPnW/r3q28CG1XbGMHj0zSkFlGGN3bW/s=
Subject key identifier:   DA:F5:EF:C6:F5:3F:BB:AC:E3:8E:62:BE:01:42:C0:02:E6:5B:BC:3A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3720AF9BD676EF7D5EB097AF8BACF1A1FB122E96
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143652.roa
Signing time:             Tue 26 May 2026 06:30:48 +0000
ROA not before:           Tue 26 May 2026 06:25:48 +0000
ROA not after:            Tue 25 May 2027 06:30:48 +0000
asID:                     143652
IP address blocks:        240a:a3ea::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:20:af:9b:d6:76:ef:7d:5e:b0:97:af:8b:ac:f1:a1:fb:12:2e:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:48 2026 GMT
            Not After : May 25 06:30:48 2027 GMT
        Subject: CN=DAF5EFC6F53FBBACE38E62BE0142C002E65BBC3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6b:11:74:05:cd:26:ef:5f:c0:9c:03:06:f0:
                    6b:96:1e:6f:f2:d7:fe:c7:ac:a3:b4:0d:57:f8:21:
                    1e:8e:f3:e3:f4:3c:36:6d:79:5e:f3:c3:0d:20:06:
                    ce:63:2e:9f:da:37:c0:28:7c:34:21:de:bd:5e:3f:
                    13:04:03:78:16:66:21:53:e8:2c:97:6e:74:d8:8e:
                    fd:cd:68:f2:ad:cf:5b:3f:80:9e:a3:f1:bc:4d:44:
                    6a:01:cf:00:92:cb:82:b0:43:2c:6e:c5:73:13:37:
                    6f:aa:e3:c8:b3:d1:8a:81:4a:4c:a3:7b:f4:6e:b3:
                    fe:4c:91:c6:1c:85:88:bd:e9:d3:d5:77:41:8e:f8:
                    07:0f:b0:bc:8e:57:35:16:ca:2e:07:ad:b9:02:44:
                    90:45:8b:be:ae:48:01:2f:b7:5e:69:9d:ba:c9:ab:
                    b4:69:99:44:76:43:6c:fd:ea:f8:6c:5a:08:df:7c:
                    4d:c7:36:04:80:fa:17:51:9e:79:58:88:9a:ce:e1:
                    8f:b6:88:cd:9f:61:a7:39:50:72:e2:17:0d:66:8c:
                    38:98:1a:70:70:2a:57:66:3f:4f:37:23:32:14:a6:
                    18:69:52:97:3b:e0:cf:82:95:35:7b:e2:f2:c7:3d:
                    3c:02:4a:a1:f5:77:bf:6c:48:0a:d7:ef:85:d4:7f:
                    42:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F5:EF:C6:F5:3F:BB:AC:E3:8E:62:BE:01:42:C0:02:E6:5B:BC:3A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143652.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a3ea::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:08:05:3b:11:d6:a0:3b:02:fc:11:29:76:a9:cd:d1:80:01:
         96:06:de:12:98:8e:ae:f5:3f:97:47:0e:b1:2a:3d:44:a3:24:
         1d:6f:3e:f2:eb:83:32:be:0a:4b:09:86:36:29:36:0c:33:b3:
         5b:67:b5:e1:d5:19:2a:ff:cd:f6:bb:81:54:bc:72:0e:df:8f:
         d8:26:8c:ed:5f:7b:d3:29:df:38:7e:aa:b5:72:4d:66:5a:bb:
         ab:44:7c:b0:a2:fe:47:9d:15:6b:09:fa:96:d7:3b:7b:68:f8:
         0f:b2:94:d0:8e:6a:5a:f6:52:62:48:d8:58:6d:44:a4:5d:5d:
         97:92:82:da:a7:e8:d8:60:07:12:c8:53:4e:3d:1b:89:9e:fd:
         f9:68:64:88:06:18:81:b2:25:00:8f:df:a3:18:44:11:b7:c0:
         84:1e:17:14:df:05:35:cf:62:ba:ff:79:d3:1c:7c:5c:88:63:
         f8:55:fd:07:8f:25:ba:fc:96:03:a5:1a:3e:21:b7:cb:8d:12:
         49:0f:50:20:3f:8d:c0:18:63:1a:0c:57:3c:d8:c2:0b:db:84:
         e3:86:92:70:07:c4:cd:dc:67:01:ee:10:5f:08:68:c7:45:b2:
         db:d8:c7:23:93:b7:e6:30:7b:af:96:8f:96:4e:3d:dc:29:13:
         61:40:df:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----