Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143730.roa
File:                     AS143730.roa (raw, json)
Hash identifier:          VIf1n7KUTsd7VrcnZf32PEWr6wofXDneeQFIVsNK1D4=
Subject key identifier:   EC:8F:5A:C6:55:FC:83:67:57:18:49:E0:A6:62:EB:76:3F:D1:BF:31
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       02D5A79EBD374D2A9664AF20E407BDC2DA16142C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143730.roa
Signing time:             Mon 25 May 2026 06:28:23 +0000
ROA not before:           Mon 25 May 2026 06:23:23 +0000
ROA not after:            Mon 24 May 2027 06:28:23 +0000
asID:                     143730
IP address blocks:        240a:a438::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:d5:a7:9e:bd:37:4d:2a:96:64:af:20:e4:07:bd:c2:da:16:14:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:23 2026 GMT
            Not After : May 24 06:28:23 2027 GMT
        Subject: CN=EC8F5AC655FC8367571849E0A662EB763FD1BF31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d4:c2:b7:81:00:97:ef:df:56:dd:ef:1b:02:
                    37:94:c7:3e:7f:24:d5:dc:1e:53:a6:fe:6e:d8:26:
                    f2:f6:db:62:b5:59:89:e7:c0:d6:82:56:95:02:01:
                    08:c6:63:01:54:d9:c3:9c:b0:24:2c:79:c3:e0:61:
                    c1:79:f4:53:2b:2c:c4:24:bf:16:97:4a:8e:a7:52:
                    8b:64:96:ca:95:5b:3c:61:47:43:2e:43:51:88:27:
                    6e:41:54:7b:6a:1e:c2:fa:26:21:15:a0:42:a9:31:
                    74:58:33:6a:7a:e6:16:4b:8a:ac:d2:4c:fa:c5:7d:
                    9c:c9:1a:26:83:53:5c:5b:43:7b:a7:d2:b0:50:d9:
                    7f:e9:d7:86:27:8f:bc:0a:ed:4e:61:32:2f:a7:df:
                    54:dd:81:2f:39:c4:6c:06:fa:36:96:4e:9e:41:6a:
                    70:93:32:22:90:0f:56:53:bd:b6:0c:d7:b2:90:e1:
                    cb:b6:8e:03:a1:2f:98:c8:11:75:62:55:ff:a3:79:
                    81:cf:60:8e:89:7c:59:97:a7:30:1c:73:5c:bb:97:
                    98:27:15:cd:79:06:a4:b5:48:58:4c:d1:95:df:ec:
                    20:29:30:a1:ab:ab:9b:92:73:a4:99:8a:6f:4e:5f:
                    d1:86:27:da:f4:79:7b:b6:9d:1f:cd:ce:25:43:60:
                    7c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:8F:5A:C6:55:FC:83:67:57:18:49:E0:A6:62:EB:76:3F:D1:BF:31
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a438::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:cf:03:d8:19:71:5c:22:16:39:60:3e:ea:b9:9e:4f:fc:22:
         f4:56:bd:75:70:b5:1d:55:ef:88:91:2e:0a:10:21:45:44:f5:
         43:90:da:e3:23:3a:8c:19:a8:bb:cf:f5:d2:35:d7:79:78:9d:
         2b:58:a8:f3:4f:e5:8c:3d:d9:f6:36:8b:57:79:3d:c5:db:07:
         21:5e:2d:7e:d5:e4:ed:99:dd:11:8d:3b:8d:4e:c4:d2:35:6b:
         d3:64:34:ae:5c:c6:0a:ad:96:29:49:38:9c:11:0a:67:86:a1:
         be:36:f2:dc:bd:57:c7:36:ad:93:42:d7:ea:a4:2d:58:5d:d9:
         64:06:0c:18:16:76:8b:20:c0:9b:93:c6:56:67:c2:2e:ce:72:
         99:91:1f:a5:00:d1:d6:c5:b0:f8:4f:60:b6:d6:ac:30:a0:86:
         de:af:76:e9:eb:3f:88:d4:28:0c:f1:69:bb:3b:c8:31:15:a4:
         56:29:e1:49:8d:35:91:60:7b:78:2e:c3:21:2b:3f:98:5a:01:
         46:0e:f4:eb:c6:5e:6a:54:61:ff:b2:dc:ab:a6:4a:be:da:aa:
         5c:12:be:67:f1:a7:d5:e3:7f:71:33:9b:8c:96:ad:7c:d5:9f:
         69:a6:50:3d:25:5d:ad:2e:c1:f6:64:0b:5f:62:7a:f4:67:15:
         ae:ae:48:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----