Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143736.roa
File:                     AS143736.roa (raw, json)
Hash identifier:          5hcZlLo67+Of2VAcJ2O+0/+kaGTZUFp4LkTLUZFge7Q=
Subject key identifier:   9D:BD:5D:79:D7:7E:59:C8:01:FB:14:33:43:6C:C0:A2:03:57:F3:0C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5D2ACC8A9B072A4C3297E0EE271093EC02962E5F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143736.roa
Signing time:             Fri 22 May 2026 06:46:20 +0000
ROA not before:           Fri 22 May 2026 06:41:20 +0000
ROA not after:            Fri 21 May 2027 06:46:20 +0000
asID:                     143736
IP address blocks:        240a:a43e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:2a:cc:8a:9b:07:2a:4c:32:97:e0:ee:27:10:93:ec:02:96:2e:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:20 2026 GMT
            Not After : May 21 06:46:20 2027 GMT
        Subject: CN=9DBD5D79D77E59C801FB1433436CC0A20357F30C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f7:b5:3c:8e:5e:c4:fc:6f:4e:c5:7d:01:12:
                    fc:4b:b9:01:eb:52:e3:5a:69:de:54:bc:d2:56:b1:
                    05:cd:b7:12:c3:7e:ed:70:17:73:8e:74:2e:26:43:
                    aa:da:cf:2e:c1:73:b0:ed:e2:89:04:22:88:79:71:
                    60:76:3f:ca:ee:5c:9c:d7:d8:9b:26:a7:ec:12:72:
                    36:7b:11:1f:fe:b7:df:ed:a3:0f:13:d4:4b:22:d7:
                    5e:45:05:90:d4:06:d0:ee:9a:31:33:da:6c:29:62:
                    d8:55:c7:24:de:d6:84:94:df:75:71:18:28:ce:8f:
                    b2:50:d8:c3:88:ed:c9:39:7a:92:8d:e3:28:c8:38:
                    62:02:b8:84:41:43:24:74:26:d9:75:3d:62:c0:02:
                    9e:b5:80:fe:61:0f:ec:26:73:bc:df:67:2b:2e:76:
                    9d:a6:a1:59:74:65:42:1a:18:2d:26:e2:66:e2:61:
                    34:7e:5e:83:74:97:ef:c7:cf:14:a9:3b:28:d7:f8:
                    e5:c2:30:21:ae:a8:6b:b4:b4:2a:f1:8d:17:3b:4c:
                    18:b6:2e:06:9a:97:c8:83:23:d0:a5:6c:a6:ea:f8:
                    7d:ec:14:d5:f9:27:6b:52:a6:9e:d9:68:18:21:8e:
                    da:e5:90:88:c9:c8:63:d7:9c:a4:34:c9:8e:93:aa:
                    95:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BD:5D:79:D7:7E:59:C8:01:FB:14:33:43:6C:C0:A2:03:57:F3:0C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a43e::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:53:45:d9:3c:68:8d:2e:a9:1a:1b:8f:ff:8e:2d:e7:e6:d4:
         0d:d5:4c:c6:79:1a:82:e6:54:bf:9e:fe:6b:53:c1:7b:11:d1:
         45:6d:81:00:b4:65:b3:45:bf:7c:04:3d:d5:87:ef:1e:6a:c7:
         1a:7b:84:81:58:49:e7:33:91:3f:d4:c5:d9:76:3b:e6:f0:07:
         58:c1:35:6f:65:ec:49:9d:a7:b5:be:0b:e7:73:5f:fa:55:ac:
         de:1d:fe:fb:c1:54:e4:96:82:2f:a8:ad:d7:ad:fc:d6:10:4f:
         3f:d0:cb:6d:8f:fe:f5:93:ec:56:21:f9:cd:ba:83:73:5e:c1:
         92:40:20:68:d1:59:13:93:da:b8:8a:3e:c0:73:d2:3a:f4:71:
         55:a0:b6:a8:3d:dc:f4:14:c5:8f:cf:55:3a:07:dd:fe:1a:e1:
         07:e6:ba:fc:53:af:6b:36:93:42:9f:ca:4c:71:f8:07:45:87:
         ec:43:c7:4b:58:5e:bd:b4:aa:8a:ef:80:aa:8d:04:b6:b0:2e:
         cd:42:11:7a:65:f6:a5:55:3e:c5:4f:c1:60:33:51:91:ff:00:
         b8:c3:dc:83:29:e5:2c:73:e1:5d:da:5f:f7:e0:ae:17:bf:33:
         d5:bc:f4:0e:ea:01:fa:6b:ac:d6:ec:f9:26:ef:23:3a:c7:c9:
         e1:83:36:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----