Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143664.roa
File:                     AS143664.roa (raw, json)
Hash identifier:          b4inPYFXFwDKIT/DK6xwOwEF4+zEziGId1AuSHhCugs=
Subject key identifier:   8A:86:F4:6D:C5:A9:BB:4E:7E:8C:BC:D3:66:D7:CD:5F:DB:6E:0B:C1
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       010B6B110A7253BFBD4DA3BF597C40869EB10FAF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143664.roa
Signing time:             Fri 22 May 2026 06:27:41 +0000
ROA not before:           Fri 22 May 2026 06:22:41 +0000
ROA not after:            Fri 21 May 2027 06:27:41 +0000
asID:                     143664
IP address blocks:        240a:a3f6::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0b:6b:11:0a:72:53:bf:bd:4d:a3:bf:59:7c:40:86:9e:b1:0f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:22:41 2026 GMT
            Not After : May 21 06:27:41 2027 GMT
        Subject: CN=8A86F46DC5A9BB4E7E8CBCD366D7CD5FDB6E0BC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:55:34:ac:fa:5b:ff:16:c0:48:9b:b4:f6:0c:
                    9f:03:4e:68:57:52:3b:e8:10:da:47:be:c6:89:ab:
                    a7:69:39:9f:5b:26:9b:32:42:da:17:e6:42:c4:fe:
                    6a:ef:19:79:c9:39:1b:86:6d:04:a4:07:66:94:b8:
                    c1:3c:89:5c:fb:25:44:65:3e:a9:61:3e:49:fa:4a:
                    56:d2:6e:d4:f5:93:6a:1d:8f:b3:98:54:7e:8f:0a:
                    96:68:5b:54:92:16:47:45:79:2b:47:df:99:53:05:
                    97:f8:74:ca:31:0a:b2:c7:82:6f:41:da:ab:a5:cc:
                    42:d9:f9:e4:87:1b:80:31:01:d8:d9:96:ac:5f:eb:
                    88:a2:8c:f7:a2:63:7f:1c:2b:ec:21:cd:cf:d9:d3:
                    fb:9c:93:f1:17:ce:1b:40:4a:dc:57:12:62:dd:40:
                    49:cf:d6:b3:85:b1:b7:cb:7d:e0:87:12:7d:a1:ed:
                    f2:53:98:d9:2a:ec:0e:19:6b:a3:e6:40:52:15:8c:
                    41:c2:3e:13:93:e1:8d:38:bb:9c:09:37:c5:3c:59:
                    f9:92:f9:23:b2:3c:bf:37:f2:73:72:48:7b:e0:40:
                    66:1f:1a:7e:e5:3f:3b:2a:60:be:e4:d9:02:ea:cb:
                    c3:51:cc:8a:e4:89:0f:a9:5e:15:fd:8d:71:f7:4e:
                    65:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:86:F4:6D:C5:A9:BB:4E:7E:8C:BC:D3:66:D7:CD:5F:DB:6E:0B:C1
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143664.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a3f6::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:05:f5:cf:43:73:eb:0b:c1:21:6d:8a:00:a4:a3:2e:12:d9:
         3b:29:aa:e3:f7:a8:84:83:6e:39:22:85:9f:8f:5e:6b:e6:06:
         fe:79:1c:74:96:b4:df:a1:77:ff:8d:7f:26:62:ff:53:67:f4:
         fa:0f:d0:b4:85:be:f1:36:2e:cc:6b:dd:44:d5:04:ca:70:29:
         fe:62:2d:03:38:59:cf:16:8a:c3:96:ce:ba:b7:79:d5:0c:1f:
         6f:8c:b1:cc:ab:71:21:21:65:ea:ba:ea:c3:69:31:a8:07:46:
         2a:b4:e4:c5:79:46:fb:34:d6:2a:c8:f0:ae:97:54:33:e8:01:
         59:64:0d:e9:ba:00:81:7d:a6:db:3b:fc:ca:7e:4f:8a:d2:4a:
         12:a0:29:57:b5:3e:6e:a8:fd:99:07:22:04:e2:bf:18:15:91:
         ae:b2:88:e2:bd:81:15:18:72:b7:b2:a4:6a:db:1c:a2:82:da:
         16:cb:fa:e2:7e:36:67:7f:05:d7:c2:ed:74:94:1b:f1:a0:27:
         3e:a7:c2:2c:1c:f3:4c:2e:91:7b:aa:c8:ed:ee:01:1e:ff:4c:
         b9:72:7a:81:d2:bd:5a:13:d2:c0:b7:b0:09:d3:dc:e6:ba:91:
         c8:44:9a:bc:8f:b2:30:ef:94:c6:11:eb:10:9d:a3:b4:d7:de:
         21:6e:6f:4c
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUAQtrEQpyU7+9TaO/WXxAhp6xD68wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjIyNDFaFw0yNzA1MjEwNjI3NDFaMDMxMTAvBgNV
BAMTKDhBODZGNDZEQzVBOUJCNEU3RThDQkNEMzY2RDdDRDVGREI2RTBCQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfVTSs+lv/FsBIm7T2DJ8DTmhX
UjvoENpHvsaJq6dpOZ9bJpsyQtoX5kLE/mrvGXnJORuGbQSkB2aUuME8iVz7JURl
PqlhPkn6SlbSbtT1k2odj7OYVH6PCpZoW1SSFkdFeStH35lTBZf4dMoxCrLHgm9B
2qulzELZ+eSHG4AxAdjZlqxf64iijPeiY38cK+whzc/Z0/uck/EXzhtAStxXEmLd
QEnP1rOFsbfLfeCHEn2h7fJTmNkq7A4Za6PmQFIVjEHCPhOT4Y04u5wJN8U8WfmS
+SOyPL838nNySHvgQGYfGn7lPzsqYL7k2QLqy8NRzIrkiQ+pXhX9jXH3TmU7AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUiob0bcWpu05+jLzTZtfNX9tuC8EwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNjY0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqj9jANBgkqhkiG9w0BAQsFAAOCAQEASgX1
z0Nz6wvBIW2KAKSjLhLZOymq4/eohINuOSKFn49ea+YG/nkcdJa036F3/41/JmL/
U2f0+g/QtIW+8TYuzGvdRNUEynAp/mItAzhZzxaKw5bOurd51Qwfb4yxzKtxISFl
6rrqw2kxqAdGKrTkxXlG+zTWKsjwrpdUM+gBWWQN6boAgX2m2zv8yn5PitJKEqAp
V7U+bqj9mQciBOK/GBWRrrKI4r2BFRhyt7KkatscooLaFsv64n42Z38F18LtdJQb
8aAnPqfCLBzzTC6Re6rI7e4BHv9MuXJ6gdK9WhPSwLewCdPc5rqRyESavI+yMO+U
xhHrEJ2jtNfeIW5vTA==
-----END CERTIFICATE-----