Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143659.roa
File:                     AS143659.roa (raw, json)
Hash identifier:          YxSp/4Q/d0cUugdslpVcu+IBtpHiJfzRoxoLJ69ITyQ=
Subject key identifier:   7A:CB:CC:7E:9B:F1:CF:BC:00:81:FF:C9:7A:01:D5:3E:28:86:23:A9
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       63AE630F0D91360F9D636B2DFD6B565B9D8605D7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143659.roa
Signing time:             Tue 26 May 2026 03:17:08 +0000
ROA not before:           Tue 26 May 2026 03:12:08 +0000
ROA not after:            Tue 25 May 2027 03:17:08 +0000
asID:                     143659
IP address blocks:        240a:a3f1::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ae:63:0f:0d:91:36:0f:9d:63:6b:2d:fd:6b:56:5b:9d:86:05:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:12:08 2026 GMT
            Not After : May 25 03:17:08 2027 GMT
        Subject: CN=7ACBCC7E9BF1CFBC0081FFC97A01D53E288623A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:26:87:0a:ec:8c:1c:8e:3e:26:4c:5f:6a:26:
                    e0:33:cd:fc:37:b4:c1:fe:aa:9d:0e:42:05:9c:a7:
                    16:2e:f1:62:48:20:a9:22:90:b6:6a:bb:fb:98:c8:
                    79:f8:7e:dc:81:a3:a9:02:d2:38:1f:72:1f:12:9a:
                    eb:8b:30:30:9f:c7:9c:84:a9:df:86:c3:ed:4f:8c:
                    2a:16:3f:c2:70:4a:f6:82:69:a0:10:87:df:8c:29:
                    c6:22:d8:25:79:7c:a1:a9:96:f0:df:b2:a5:26:5f:
                    d0:c3:29:fb:26:1e:01:db:c0:7f:35:13:c6:7a:cf:
                    56:12:24:ff:bc:67:a6:1e:bd:92:85:93:00:03:f5:
                    8d:7c:9e:f4:ed:86:f5:71:e7:b9:4a:39:fd:19:71:
                    28:dd:e2:24:7e:b6:4e:d7:af:e2:67:a6:ef:12:c4:
                    9f:3d:9c:db:32:b0:24:f1:b5:68:a4:23:bc:21:c2:
                    8e:bf:01:18:1b:f9:67:e8:27:49:2b:3e:87:9c:1e:
                    9b:82:b7:66:3b:e8:09:72:fd:0f:69:17:14:3c:db:
                    a8:91:fa:55:f0:19:67:63:d4:66:ce:b4:eb:cd:a6:
                    bc:b3:1c:c5:15:39:55:0f:e0:dd:44:37:52:f0:4f:
                    6e:98:31:7b:5f:75:a4:ae:17:d8:99:16:c1:42:a0:
                    a6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:CB:CC:7E:9B:F1:CF:BC:00:81:FF:C9:7A:01:D5:3E:28:86:23:A9
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143659.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a3f1::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:39:d9:55:55:ed:8f:1b:e1:d1:68:6f:27:cb:91:f0:59:5b:
         cd:a7:3d:dc:56:32:b4:30:10:ab:7b:14:00:0b:99:f8:0d:9e:
         96:e4:7c:95:df:4b:ed:b1:8b:9c:32:d0:d1:b6:d5:90:03:b5:
         ee:a9:0a:b7:f5:8b:78:62:1b:fb:76:c2:40:9b:dd:4f:3b:c2:
         14:b0:b2:0c:60:c7:9c:29:35:27:32:71:d9:51:ac:49:28:38:
         16:40:85:c3:97:0d:ee:a8:e2:02:ed:61:69:ea:d3:d3:65:b4:
         14:a9:ce:b1:18:12:fa:6c:ec:a4:0e:42:30:b7:bf:7b:40:b6:
         5c:20:b3:d3:9c:df:50:fc:71:ce:66:fb:fa:4d:de:ea:9c:b2:
         85:fc:2d:14:49:17:2c:20:4f:84:fc:88:30:cb:82:9d:a6:4d:
         c0:bc:b2:df:4c:25:13:91:7c:6e:cf:e3:f6:11:1a:bc:27:8a:
         5d:35:50:2f:43:f2:a2:49:e5:5d:e6:2a:82:d5:45:53:c7:47:
         3e:f8:e5:5b:fb:cb:bd:b5:03:c2:ed:ae:29:2d:3a:35:98:5b:
         54:d9:b0:c1:24:a7:11:db:75:09:47:bc:6f:1f:a2:c4:e5:b2:
         33:ed:dd:92:14:b8:45:bf:c8:bd:3d:e4:78:19:b3:d0:fd:72:
         51:98:b0:47
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUY65jDw2RNg+dY2st/WtWW52GBdcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMzEyMDhaFw0yNzA1MjUwMzE3MDhaMDMxMTAvBgNV
BAMTKDdBQ0JDQzdFOUJGMUNGQkMwMDgxRkZDOTdBMDFENTNFMjg4NjIzQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/JocK7Iwcjj4mTF9qJuAzzfw3
tMH+qp0OQgWcpxYu8WJIIKkikLZqu/uYyHn4ftyBo6kC0jgfch8SmuuLMDCfx5yE
qd+Gw+1PjCoWP8JwSvaCaaAQh9+MKcYi2CV5fKGplvDfsqUmX9DDKfsmHgHbwH81
E8Z6z1YSJP+8Z6YevZKFkwAD9Y18nvTthvVx57lKOf0ZcSjd4iR+tk7Xr+Jnpu8S
xJ89nNsysCTxtWikI7whwo6/ARgb+WfoJ0krPoecHpuCt2Y76Aly/Q9pFxQ826iR
+lXwGWdj1GbOtOvNpryzHMUVOVUP4N1EN1LwT26YMXtfdaSuF9iZFsFCoKYxAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUesvMfpvxz7wAgf/JegHVPiiGI6kwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNjU5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqj8TANBgkqhkiG9w0BAQsFAAOCAQEAsDnZ
VVXtjxvh0WhvJ8uR8Flbzac93FYytDAQq3sUAAuZ+A2eluR8ld9L7bGLnDLQ0bbV
kAO17qkKt/WLeGIb+3bCQJvdTzvCFLCyDGDHnCk1JzJx2VGsSSg4FkCFw5cN7qji
Au1haerT02W0FKnOsRgS+mzspA5CMLe/e0C2XCCz05zfUPxxzmb7+k3e6pyyhfwt
FEkXLCBPhPyIMMuCnaZNwLyy30wlE5F8bs/j9hEavCeKXTVQL0PyoknlXeYqgtVF
U8dHPvjlW/vLvbUDwu2uKS06NZhbVNmwwSSnEdt1CUe8bx+ixOWyM+3dkhS4Rb/I
vT3keBmz0P1yUZiwRw==
-----END CERTIFICATE-----