Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143733.roa
File:                     AS143733.roa (raw, json)
Hash identifier:          NxFYvnLSSAkLGz8+cjLXg7ynkd2jaanWyBiy+h1O70Y=
Subject key identifier:   2C:8D:39:E3:45:B7:1D:81:67:F0:44:30:0B:F3:AA:36:4F:A4:8A:5A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       11C2661838D08D891354D21286C7853F6E780011
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143733.roa
Signing time:             Tue 26 May 2026 01:13:33 +0000
ROA not before:           Tue 26 May 2026 01:08:33 +0000
ROA not after:            Tue 25 May 2027 01:13:33 +0000
asID:                     143733
IP address blocks:        240a:a43b::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:c2:66:18:38:d0:8d:89:13:54:d2:12:86:c7:85:3f:6e:78:00:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:08:33 2026 GMT
            Not After : May 25 01:13:33 2027 GMT
        Subject: CN=2C8D39E345B71D8167F044300BF3AA364FA48A5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:55:35:a6:58:40:1d:e2:19:50:b9:67:e4:5b:
                    32:77:58:05:2b:ea:13:56:0e:19:4e:03:6b:2b:6d:
                    6e:90:61:df:0c:e0:78:8d:c5:63:2d:69:ef:2b:6a:
                    0d:ae:93:6d:8e:db:eb:09:3d:21:49:c4:fb:57:5a:
                    34:57:4e:ba:d0:92:15:e4:a3:29:79:8e:e5:88:0a:
                    87:a0:a6:a8:99:e5:c6:d6:1e:f3:d1:2e:69:46:0e:
                    f4:8e:fc:d9:1d:a6:04:a7:87:5f:a6:d1:e0:72:6d:
                    cb:9a:8e:6a:80:d8:cf:10:39:fa:17:db:e3:ae:f7:
                    9f:eb:1b:20:47:7d:b8:a0:c7:87:6c:b5:2f:91:fb:
                    8f:b6:c1:0e:dc:aa:e4:01:1d:f9:98:91:19:49:96:
                    60:ef:f9:44:ec:a6:96:23:00:76:d0:9f:ce:b2:da:
                    3f:72:c2:76:04:fe:52:7d:fb:f1:40:be:e3:43:a6:
                    4f:28:8b:57:eb:3d:e2:eb:4f:38:8c:e5:4c:ec:92:
                    5b:01:7f:e5:cc:2d:ea:67:48:67:58:56:f1:f5:15:
                    b9:22:28:32:22:89:93:ac:0d:0b:33:8c:6b:f5:6a:
                    02:98:8a:2b:1f:d1:44:99:7c:6f:7b:7b:58:f6:f8:
                    9b:bd:c5:86:24:10:6e:52:29:ee:b4:a8:67:69:2b:
                    dc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8D:39:E3:45:B7:1D:81:67:F0:44:30:0B:F3:AA:36:4F:A4:8A:5A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a43b::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:9f:86:ab:e8:0f:89:a0:a0:04:4f:38:f1:75:f9:5d:29:f7:
         3a:08:77:b7:f3:3a:87:2c:9d:64:ee:0f:a2:c2:4a:4f:5f:7a:
         ba:f0:51:08:b1:06:03:98:06:cd:4e:c6:c6:b0:f3:01:96:38:
         bd:ee:bd:61:e4:c9:f2:a7:1a:fa:4a:fb:91:5a:7f:28:37:71:
         49:25:4b:84:8e:e3:2e:cf:90:46:b1:62:ce:1a:a7:00:4d:9b:
         4b:c2:08:80:e8:0e:2f:79:0d:85:8d:e1:9e:f7:33:f8:56:66:
         94:a7:79:69:a1:f2:83:d6:d2:cb:e0:0e:95:31:ba:e6:99:22:
         17:78:2e:97:ba:16:2e:32:76:69:95:21:92:e1:9a:a7:fc:85:
         bd:64:ba:58:65:81:03:f6:65:a0:6f:22:be:29:b7:d4:79:78:
         41:1d:c4:9d:fd:fc:25:6a:f5:8e:40:01:51:c6:09:6b:85:9c:
         7c:b7:53:1b:24:d5:9a:e6:c6:2d:09:9f:1e:82:03:0b:1f:2c:
         3a:ee:16:50:6c:b5:8e:52:d1:40:14:b7:fd:7e:8f:d5:74:70:
         18:9a:7f:ff:21:48:91:a9:c8:81:9d:1f:92:49:3c:89:e4:56:
         b0:13:9e:06:52:d9:2c:0c:d8:7a:21:ba:b4:1a:28:05:d0:d3:
         78:6c:4f:c3
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUEcJmGDjQjYkTVNIShseFP254ABEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMTA4MzNaFw0yNzA1MjUwMTEzMzNaMDMxMTAvBgNV
BAMTKDJDOEQzOUUzNDVCNzFEODE2N0YwNDQzMDBCRjNBQTM2NEZBNDhBNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLVTWmWEAd4hlQuWfkWzJ3WAUr
6hNWDhlOA2srbW6QYd8M4HiNxWMtae8rag2uk22O2+sJPSFJxPtXWjRXTrrQkhXk
oyl5juWICoegpqiZ5cbWHvPRLmlGDvSO/NkdpgSnh1+m0eBybcuajmqA2M8QOfoX
2+Ou95/rGyBHfbigx4dstS+R+4+2wQ7cquQBHfmYkRlJlmDv+UTsppYjAHbQn86y
2j9ywnYE/lJ9+/FAvuNDpk8oi1frPeLrTziM5UzsklsBf+XMLepnSGdYVvH1Fbki
KDIiiZOsDQszjGv1agKYiisf0USZfG97e1j2+Ju9xYYkEG5SKe60qGdpK9zjAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQULI0540W3HYFn8EQwC/OqNk+kilowHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqkOzANBgkqhkiG9w0BAQsFAAOCAQEARJ+G
q+gPiaCgBE848XX5XSn3Ogh3t/M6hyydZO4PosJKT196uvBRCLEGA5gGzU7GxrDz
AZY4ve69YeTJ8qca+kr7kVp/KDdxSSVLhI7jLs+QRrFizhqnAE2bS8IIgOgOL3kN
hY3hnvcz+FZmlKd5aaHyg9bSy+AOlTG65pkiF3gul7oWLjJ2aZUhkuGap/yFvWS6
WGWBA/ZloG8ivim31Hl4QR3Enf38JWr1jkABUcYJa4WcfLdTGyTVmubGLQmfHoID
Cx8sOu4WUGy1jlLRQBS3/X6P1XRwGJp//yFIkanIgZ0fkkk8ieRWsBOeBlLZLAzY
eiG6tBooBdDTeGxPww==
-----END CERTIFICATE-----