Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143713.roa
File:                     AS143713.roa (raw, json)
Hash identifier:          hQnPFa4SGFOEA7Xfla6+zpuWlIvtQTUxxwv4ZeVVENs=
Subject key identifier:   6D:AC:BC:46:CB:4D:D0:72:AE:F2:DF:55:04:2F:02:0A:0E:78:DF:58
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       76EBC198CEBB43623BFB6D5509F42FDC488A9B13
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143713.roa
Signing time:             Mon 25 May 2026 01:38:21 +0000
ROA not before:           Mon 25 May 2026 01:33:21 +0000
ROA not after:            Mon 24 May 2027 01:38:21 +0000
asID:                     143713
IP address blocks:        240a:a427::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:eb:c1:98:ce:bb:43:62:3b:fb:6d:55:09:f4:2f:dc:48:8a:9b:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:21 2026 GMT
            Not After : May 24 01:38:21 2027 GMT
        Subject: CN=6DACBC46CB4DD072AEF2DF55042F020A0E78DF58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8d:a9:69:98:30:27:4f:e9:2e:01:9f:62:cf:
                    25:c3:5c:64:bb:f4:93:a4:8b:2d:03:cc:0a:27:ab:
                    fd:99:ff:16:ea:f3:2d:c2:8b:ed:5f:f1:72:75:1b:
                    90:98:90:ea:79:d4:d5:62:3b:b4:7a:5e:ee:67:64:
                    41:ec:01:05:7a:4f:87:27:99:35:69:d2:c1:a1:56:
                    9f:a4:3b:28:58:6e:59:aa:5b:2d:37:92:ca:cd:f8:
                    8f:28:7e:68:20:dc:4a:a2:c5:eb:58:62:24:d3:c1:
                    7d:0f:05:51:cf:ce:bd:75:60:e5:f8:03:31:ce:67:
                    7c:8f:b7:43:93:33:08:f3:cc:3c:cb:80:09:d9:70:
                    02:b2:0e:be:59:b7:6a:fc:0e:b5:87:b2:bf:b4:e3:
                    c3:32:01:41:79:6c:77:4a:35:ed:5b:5e:19:ff:01:
                    80:e1:aa:50:86:ab:ae:b0:44:57:24:38:8a:61:b4:
                    66:91:f2:a0:28:ad:a6:4c:3a:d5:fe:b5:af:62:15:
                    e1:29:4b:f8:59:cb:f9:1c:73:b1:01:8e:88:7d:c4:
                    a7:9f:53:58:39:5a:e5:a9:f4:97:8d:19:8e:6a:e0:
                    66:00:6a:de:93:bd:7a:8d:de:11:ad:41:71:84:47:
                    f1:79:2e:ae:e9:55:f5:92:59:4f:47:46:04:7b:20:
                    b7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:AC:BC:46:CB:4D:D0:72:AE:F2:DF:55:04:2F:02:0A:0E:78:DF:58
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143713.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a427::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:0c:1a:17:8e:78:4a:a1:a0:3d:e7:f8:5e:d4:9f:e6:2a:d8:
         5d:ce:9c:d1:ed:a7:4e:69:e3:e3:ca:6b:58:13:c5:95:52:ef:
         3d:09:e5:92:35:42:87:4d:80:2a:3f:09:3f:e7:1f:2a:ba:d0:
         ed:eb:62:c6:b7:18:da:f3:64:6a:51:6c:7b:a0:e3:4c:6a:3c:
         47:40:73:2e:4a:09:4c:ec:db:07:38:cd:55:74:06:b6:e3:29:
         21:bc:52:39:6e:fd:c9:12:b1:a6:ad:49:34:b0:c5:00:56:19:
         e1:89:a3:f4:b6:02:c6:d4:e2:14:c7:b6:b7:d5:e7:f9:72:e0:
         fc:38:7c:ec:e8:3f:c2:1f:b8:27:08:11:d5:02:8e:64:60:f6:
         c0:f9:26:82:ac:c4:b1:5c:59:29:53:3c:8e:5e:64:86:4d:e4:
         de:40:61:75:18:c5:d4:ec:8c:94:43:bc:43:68:e6:19:69:8b:
         9d:47:67:70:65:d1:97:74:0f:1e:62:65:71:79:95:96:ae:ad:
         5a:f8:8c:5f:c5:07:84:cc:85:ed:e0:7f:81:a4:99:c3:87:3f:
         32:64:87:b8:c1:4a:2a:96:bb:6f:0e:34:c7:df:fb:5d:db:c7:
         d0:50:6f:03:8d:ef:6f:71:17:28:e3:be:20:ef:2a:f8:34:ee:
         8e:12:45:a9
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUduvBmM67Q2I7+21VCfQv3EiKmxMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTMzMjFaFw0yNzA1MjQwMTM4MjFaMDMxMTAvBgNV
BAMTKDZEQUNCQzQ2Q0I0REQwNzJBRUYyREY1NTA0MkYwMjBBMEU3OERGNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNjalpmDAnT+kuAZ9izyXDXGS7
9JOkiy0DzAonq/2Z/xbq8y3Ci+1f8XJ1G5CYkOp51NViO7R6Xu5nZEHsAQV6T4cn
mTVp0sGhVp+kOyhYblmqWy03ksrN+I8ofmgg3EqixetYYiTTwX0PBVHPzr11YOX4
AzHOZ3yPt0OTMwjzzDzLgAnZcAKyDr5Zt2r8DrWHsr+048MyAUF5bHdKNe1bXhn/
AYDhqlCGq66wRFckOIphtGaR8qAoraZMOtX+ta9iFeEpS/hZy/kcc7EBjoh9xKef
U1g5WuWp9JeNGY5q4GYAat6TvXqN3hGtQXGER/F5Lq7pVfWSWU9HRgR7ILf7AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUbay8RstN0HKu8t9VBC8CCg5431gwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNzEzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqkJzANBgkqhkiG9w0BAQsFAAOCAQEAqgwa
F454SqGgPef4XtSf5irYXc6c0e2nTmnj48prWBPFlVLvPQnlkjVCh02AKj8JP+cf
KrrQ7etixrcY2vNkalFse6DjTGo8R0BzLkoJTOzbBzjNVXQGtuMpIbxSOW79yRKx
pq1JNLDFAFYZ4Ymj9LYCxtTiFMe2t9Xn+XLg/Dh87Og/wh+4JwgR1QKOZGD2wPkm
gqzEsVxZKVM8jl5khk3k3kBhdRjF1OyMlEO8Q2jmGWmLnUdncGXRl3QPHmJlcXmV
lq6tWviMX8UHhMyF7eB/gaSZw4c/MmSHuMFKKpa7bw40x9/7XdvH0FBvA43vb3EX
KOO+IO8q+DTujhJFqQ==
-----END CERTIFICATE-----