Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143743.roa
File:                     AS143743.roa (raw, json)
Hash identifier:          4ovzZAq0JxIW323tECGIpMwVIMGcwKWj5h77yL71Qvo=
Subject key identifier:   3A:8D:64:A5:86:B9:8B:89:BD:23:0C:49:48:E6:7B:06:1F:96:42:89
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       45075F82D4B76288B2490FBB8C06C33E2BAC2267
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143743.roa
Signing time:             Fri 22 May 2026 06:05:46 +0000
ROA not before:           Fri 22 May 2026 06:00:46 +0000
ROA not after:            Fri 21 May 2027 06:05:46 +0000
asID:                     143743
IP address blocks:        240a:a445::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:07:5f:82:d4:b7:62:88:b2:49:0f:bb:8c:06:c3:3e:2b:ac:22:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:00:46 2026 GMT
            Not After : May 21 06:05:46 2027 GMT
        Subject: CN=3A8D64A586B98B89BD230C4948E67B061F964289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:06:da:f5:84:ca:19:e8:6c:da:da:e9:56:1c:
                    79:ed:91:dd:c7:aa:89:4e:46:4a:24:8a:48:e7:2a:
                    83:f8:73:fa:b4:7b:b0:20:b3:77:a9:7f:81:e6:4c:
                    a7:23:9a:4d:a4:91:07:da:d0:85:41:13:d9:97:63:
                    b2:18:6c:ff:5a:c8:f6:fa:e8:68:d3:b2:9c:23:49:
                    51:d7:b8:e5:68:32:f8:b1:17:6a:ff:f3:50:1d:2a:
                    49:19:99:8b:85:22:2f:d8:a7:fc:0b:28:09:00:60:
                    d5:59:f5:18:d4:3b:68:9e:db:ca:35:3b:d0:2e:e2:
                    61:4e:60:04:da:16:b3:b6:b5:9a:48:7e:81:e0:b2:
                    14:01:8e:9f:5f:7c:86:40:b7:86:6a:01:db:29:bc:
                    aa:2f:91:8f:06:f1:4d:4a:2b:6e:16:57:38:0d:be:
                    97:7f:84:f4:f0:47:4f:57:9e:b0:17:a5:11:f4:02:
                    80:ab:e2:39:5a:0c:39:25:24:75:9a:3f:31:a4:b3:
                    f7:a4:5e:46:ec:03:13:f8:db:80:b9:86:d8:6f:06:
                    5f:f9:7e:33:3a:96:95:5b:99:f7:8e:3b:31:7e:ed:
                    ab:ba:b0:aa:57:54:d0:f8:7c:99:1f:d0:3f:91:7e:
                    c0:1a:83:18:9b:1e:9e:56:3d:a0:35:96:ea:a4:1b:
                    69:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:8D:64:A5:86:B9:8B:89:BD:23:0C:49:48:E6:7B:06:1F:96:42:89
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143743.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a445::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:fc:1c:b7:4d:56:09:18:45:31:d5:e6:a0:1c:e3:38:1d:bc:
         ce:74:5a:86:b5:71:b3:45:d7:54:8e:42:0f:97:ce:b1:ed:a5:
         48:04:7a:49:2c:1e:c3:2e:e0:ce:28:ed:1a:ce:40:3b:21:04:
         4c:b4:4b:c0:6d:dc:d5:b4:7f:1e:e7:61:9b:17:cd:6f:0e:5f:
         01:d8:aa:83:ee:6b:80:29:c7:4e:4d:72:cd:1d:d6:27:27:e2:
         4d:9b:d3:9e:4a:7a:77:19:83:83:11:e0:02:9f:be:20:56:d9:
         89:ee:4c:17:c1:be:da:c8:dd:0b:bb:a9:e7:e9:49:9d:03:4c:
         c4:cb:dd:51:15:fe:39:63:72:8d:c7:bb:48:f4:4c:d7:29:ec:
         b6:d8:c9:4d:b7:6b:86:59:c9:95:b4:1a:ac:c0:ee:e1:a1:eb:
         5f:83:80:90:a2:c2:ce:89:b4:dc:95:15:88:e0:7b:07:74:49:
         bb:59:2e:b6:a2:96:64:d9:0c:bf:c1:d8:fa:0f:8c:4b:70:bf:
         cf:2e:21:df:a6:7a:ef:a1:ac:19:f8:c7:b3:fd:61:b5:c9:61:
         54:35:02:14:1a:24:81:df:e3:1e:14:18:f2:56:2a:38:13:ff:
         27:6e:78:74:a0:21:27:f2:80:2f:f8:10:f6:f5:6c:0c:4b:15:
         23:8e:10:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----