Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143681.roa
File:                     AS143681.roa (raw, json)
Hash identifier:          o+4jXbBecCEEtH85BY2vP9bIL8u2hAjJ6Uw+z8XvXmg=
Subject key identifier:   C5:14:1B:45:63:4D:9B:53:DA:8C:43:AE:DE:80:7E:10:A9:91:DF:0A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5BA71AB7AF439E74BEB0A26EAAC9DF51664BD109
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143681.roa
Signing time:             Mon 25 May 2026 03:19:14 +0000
ROA not before:           Mon 25 May 2026 03:14:14 +0000
ROA not after:            Mon 24 May 2027 03:19:14 +0000
asID:                     143681
IP address blocks:        240a:a407::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:a7:1a:b7:af:43:9e:74:be:b0:a2:6e:aa:c9:df:51:66:4b:d1:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:14 2026 GMT
            Not After : May 24 03:19:14 2027 GMT
        Subject: CN=C5141B45634D9B53DA8C43AEDE807E10A991DF0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:eb:b9:84:a2:c5:e8:f9:05:c9:2c:65:e5:19:
                    23:1e:f1:df:40:4a:dc:4b:59:61:a9:a4:69:c6:6d:
                    29:98:00:ad:43:5e:92:48:55:31:26:4f:15:aa:38:
                    0a:d4:55:b9:53:15:61:a2:92:03:22:da:76:39:ba:
                    b5:a8:67:4a:ac:51:39:ae:c8:28:bd:a3:37:f2:06:
                    e6:e8:d4:87:e2:8f:a3:77:ac:54:1f:bf:3e:9d:99:
                    05:ab:57:3c:87:2b:5d:66:d3:a0:a0:e5:18:b9:3e:
                    7d:13:92:f1:7f:ff:94:09:0f:0b:f4:7b:51:90:2c:
                    19:7e:43:eb:cc:3b:8b:02:f7:d2:55:00:6c:7d:59:
                    51:97:c5:f2:ae:ec:fe:fb:26:8f:74:c8:a3:4b:db:
                    d7:27:e5:ad:70:e9:37:49:75:11:52:fb:87:19:99:
                    04:04:ca:82:cf:23:aa:fe:8e:30:e5:e5:b4:29:75:
                    51:95:69:38:1e:36:9a:7f:d4:6c:ea:54:d5:a7:ea:
                    3c:b6:20:2b:6c:82:81:bc:ca:6f:3d:8b:67:0c:e0:
                    55:26:d4:01:1f:77:45:fc:67:61:9a:a6:db:3d:76:
                    f2:9a:e3:ba:27:88:68:80:cc:9f:0d:b6:77:b4:e1:
                    8f:2c:7e:3a:61:23:f3:49:b0:8b:a1:57:fd:a5:d2:
                    0e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:14:1B:45:63:4D:9B:53:DA:8C:43:AE:DE:80:7E:10:A9:91:DF:0A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143681.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a407::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:7f:df:43:a0:51:75:b6:1f:84:64:15:3b:86:bd:02:c0:4a:
         1b:5a:a6:c9:89:c9:c8:ed:ba:b9:49:ce:e5:f1:02:eb:1f:9c:
         f5:fe:b5:5c:59:32:be:df:d1:09:62:77:49:60:bd:20:d0:77:
         5a:e4:4d:54:03:53:df:f3:da:9a:c2:a5:a7:81:63:b1:91:76:
         4e:aa:86:6f:98:b2:8b:c4:13:93:14:7e:80:5b:3b:c1:29:74:
         9f:65:97:28:0a:40:a7:c7:5b:a9:48:e6:63:73:47:ba:13:b3:
         e5:11:7f:c8:4f:32:44:e8:ef:57:c5:ab:81:47:f3:0f:fd:c5:
         bc:34:1a:24:fa:97:74:b0:d8:f4:89:1d:c6:52:e4:dc:d5:96:
         54:9a:c3:4c:7b:63:0d:02:e1:5a:94:dc:eb:48:bf:fc:df:29:
         65:7f:4f:04:a5:55:52:ec:00:b9:87:0d:71:9f:91:c4:64:16:
         b3:05:c8:f8:72:82:51:df:5e:e2:d8:5c:53:84:65:6f:4a:76:
         c5:18:82:c2:e5:94:98:90:36:23:a7:96:21:1f:e5:f9:75:b9:
         7f:38:0c:f2:e2:64:55:b9:ef:42:a8:82:78:e0:0c:80:f3:7b:
         af:07:c8:80:01:57:ca:e9:de:44:52:75:b1:ce:a6:10:5b:f2:
         61:c8:8e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----