Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143686.roa
File:                     AS143686.roa (raw, json)
Hash identifier:          jvrXRXG1435wdrIXXur8qYZR7lyE0gzkOh+K3C5ABdc=
Subject key identifier:   70:A7:E4:9C:49:30:C6:0D:27:60:AA:8B:7A:50:D6:0D:88:28:1A:52
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       05F7C7A2BF0BB88323B836D1246EA46558987138
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143686.roa
Signing time:             Fri 22 May 2026 06:46:31 +0000
ROA not before:           Fri 22 May 2026 06:41:31 +0000
ROA not after:            Fri 21 May 2027 06:46:31 +0000
asID:                     143686
IP address blocks:        240a:a40c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f7:c7:a2:bf:0b:b8:83:23:b8:36:d1:24:6e:a4:65:58:98:71:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:31 2026 GMT
            Not After : May 21 06:46:31 2027 GMT
        Subject: CN=70A7E49C4930C60D2760AA8B7A50D60D88281A52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2f:a8:5c:c9:83:38:7c:d0:d7:7f:0f:88:68:
                    a4:b7:43:74:f3:f4:d3:3b:46:8a:91:29:1c:cb:35:
                    02:2a:c3:d5:42:b2:a9:de:07:f0:a4:f8:07:57:83:
                    ee:b7:cf:64:52:2a:3b:ca:08:00:0e:d4:18:c6:50:
                    14:6b:c8:4a:74:c7:c6:19:b7:55:73:e4:c3:8d:e5:
                    ca:d6:2d:b1:7f:68:d6:c1:5a:f7:2d:f9:c9:ca:14:
                    c0:3c:d7:57:1d:d3:06:02:46:61:2a:96:79:e6:6b:
                    de:e4:f0:f1:f7:7c:94:83:92:a0:ea:94:2a:01:c1:
                    a8:83:c1:0e:88:7b:5b:9e:78:7a:46:86:48:16:9c:
                    3e:1b:74:5d:49:49:69:e8:69:a1:88:8f:99:82:1c:
                    b3:74:21:28:e5:ab:22:11:e5:fa:87:75:fd:c2:5c:
                    a3:48:65:36:ad:9f:4d:ee:78:6c:55:d0:41:54:8f:
                    85:de:fa:90:c0:0b:5d:fb:b0:8d:4d:aa:d2:93:9b:
                    62:f4:ef:22:ff:f6:7f:06:67:c9:4d:c0:d7:dc:08:
                    36:4b:c5:09:c5:49:08:f4:0f:be:95:42:54:84:5a:
                    2f:f9:c1:18:c1:97:1b:1b:29:a8:62:0f:a1:0e:d5:
                    dd:fe:85:2b:36:b3:c3:7c:c6:9a:83:1d:af:c8:86:
                    ef:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A7:E4:9C:49:30:C6:0D:27:60:AA:8B:7A:50:D6:0D:88:28:1A:52
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143686.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a40c::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:83:77:71:85:b0:cb:99:0d:fb:ec:05:11:40:18:6c:47:d4:
         49:38:da:38:34:fb:52:be:04:a2:0b:31:64:c4:25:0b:81:d0:
         f6:7d:76:71:e2:76:b7:e0:de:c0:cc:31:eb:4f:9e:25:62:9f:
         e4:ea:86:f9:38:0d:f6:67:1c:66:fa:8a:cf:f6:12:67:27:67:
         97:5e:c0:14:b2:02:3e:29:2f:19:4d:94:18:95:99:47:82:87:
         98:23:7b:0a:d4:86:c4:d1:5c:eb:a0:c7:cb:14:62:c6:c1:37:
         18:55:1c:65:c1:44:ee:c7:94:33:5d:7b:f8:2f:16:92:85:22:
         d0:6e:34:f3:61:e3:d6:52:a8:0c:4f:78:d4:52:2d:45:d5:a7:
         d7:bc:d7:5c:24:f1:76:26:4e:0a:75:4d:09:91:4e:82:b6:1a:
         e9:a6:54:5e:2b:aa:d4:7d:d0:18:97:8d:6b:85:a9:1a:84:35:
         98:1c:25:47:b5:4d:b0:d0:3f:03:7f:4a:b2:6d:50:ff:6c:d6:
         67:b3:b8:fa:34:36:50:d3:cf:ea:ea:a6:2f:10:a8:a1:3b:98:
         2d:cb:83:fa:03:e0:88:3d:a8:4d:d7:74:e8:a7:d9:be:ba:92:
         ba:9f:bc:1f:71:9d:df:0e:2d:4c:96:74:78:89:24:da:87:1c:
         d1:c0:87:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----