Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143660.roa
File:                     AS143660.roa (raw, json)
Hash identifier:          J54e35yNXSM5peQNzDl4kZ/5bUQW4ftBtIRcdimFQuc=
Subject key identifier:   B2:3B:31:3B:32:35:9C:39:19:44:4D:D7:2A:47:2B:2A:23:82:16:F0
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       54A61A3C686B0650B417C360E5AE4937E95879C3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143660.roa
Signing time:             Tue 26 May 2026 01:13:15 +0000
ROA not before:           Tue 26 May 2026 01:08:15 +0000
ROA not after:            Tue 25 May 2027 01:13:15 +0000
asID:                     143660
IP address blocks:        240a:a3f2::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:a6:1a:3c:68:6b:06:50:b4:17:c3:60:e5:ae:49:37:e9:58:79:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:08:15 2026 GMT
            Not After : May 25 01:13:15 2027 GMT
        Subject: CN=B23B313B32359C3919444DD72A472B2A238216F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:da:ea:37:a9:43:13:f8:01:5f:d6:e7:d9:d0:
                    d7:4f:94:e5:b3:16:85:b8:13:11:9b:36:76:18:1e:
                    70:d9:4f:54:6f:b6:44:61:a3:ec:98:66:6e:de:9f:
                    0a:e7:27:35:41:67:2c:87:3d:6e:1b:6e:d1:8b:c9:
                    d1:f2:ec:be:53:bf:ac:fe:f5:35:42:8e:79:bc:7c:
                    9b:da:79:63:85:a0:22:3f:5f:69:28:0e:1c:72:e0:
                    42:38:bb:e2:60:46:4d:ce:95:78:b2:cd:81:9a:9b:
                    98:de:c7:f5:c9:b2:37:92:0a:71:c4:77:45:56:44:
                    e6:90:36:05:93:49:89:de:c8:23:17:25:80:f9:92:
                    d7:30:7a:f2:f1:9a:14:1e:fa:16:3d:f7:c6:3c:f3:
                    84:69:84:a6:35:8e:3a:2f:2d:c7:07:cb:cf:b3:b0:
                    21:5b:a2:30:4c:f4:01:74:a0:dd:30:24:b5:5d:0e:
                    3d:41:86:5f:ce:ce:69:3b:57:7f:29:b4:81:fc:3b:
                    88:10:f0:b3:1f:83:b2:cb:c9:5a:17:4a:7b:bc:23:
                    03:ce:74:4c:5a:b0:9d:04:bd:69:7e:03:13:c2:3a:
                    d6:23:a9:c8:7a:d4:e1:0e:b2:79:4a:22:6d:c5:b8:
                    df:8d:c2:f3:ea:78:45:34:3b:2f:b4:08:0d:61:e5:
                    3b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3B:31:3B:32:35:9C:39:19:44:4D:D7:2A:47:2B:2A:23:82:16:F0
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143660.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a3f2::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:ef:90:4a:7b:68:4d:38:e8:36:86:fd:83:78:ee:1b:f7:21:
         a4:3c:85:87:df:63:21:b4:70:00:ea:5d:75:f1:4f:50:6d:8f:
         26:0c:8d:96:fc:8f:b0:fe:5c:e3:75:e6:45:ba:8e:59:9d:be:
         89:0d:a6:45:b6:27:94:ab:5e:0e:f5:fe:00:c7:d1:c6:8a:2c:
         75:81:07:94:6b:77:9c:17:9d:6d:09:58:32:35:85:d6:0b:5f:
         4f:02:28:3a:01:a5:f5:d5:15:1b:75:08:7d:8b:a6:4a:e1:ba:
         97:9a:63:db:48:da:28:c8:3e:ca:d9:6e:e4:d4:7b:06:71:52:
         8c:27:42:b1:d3:d3:46:06:e5:de:13:01:e6:a2:5a:2c:81:82:
         b8:49:c9:2c:19:00:10:c1:fa:94:57:27:a0:eb:68:57:29:16:
         e0:0e:73:3d:a1:21:9e:4d:db:98:fd:0e:8a:71:bc:15:ce:4e:
         8d:b5:ea:72:44:6b:b2:aa:04:4a:40:98:c8:40:26:dd:ec:93:
         54:96:b3:1f:db:99:64:d8:60:71:b5:36:59:da:45:85:11:be:
         0d:ea:f2:ca:2f:62:a3:57:2d:70:79:07:56:c0:6c:73:43:72:
         d1:a4:a8:9d:a8:ac:1c:d2:8a:b7:6d:98:46:27:fc:c0:fd:65:
         47:91:5f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----