Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143753.roa
File:                     AS143753.roa (raw, json)
Hash identifier:          nREHqjt31T5FbIwLZRYpnN4xDxLnHMhtTV7bZJgd4nU=
Subject key identifier:   23:FF:18:54:ED:63:2E:6A:53:17:BC:6E:A0:57:04:78:40:8D:F2:98
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4F75E83FC49876D6C4D0F7895A8CA584D2E041DF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143753.roa
Signing time:             Fri 22 May 2026 06:27:34 +0000
ROA not before:           Fri 22 May 2026 06:22:34 +0000
ROA not after:            Fri 21 May 2027 06:27:34 +0000
asID:                     143753
IP address blocks:        240a:a44f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:75:e8:3f:c4:98:76:d6:c4:d0:f7:89:5a:8c:a5:84:d2:e0:41:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:22:34 2026 GMT
            Not After : May 21 06:27:34 2027 GMT
        Subject: CN=23FF1854ED632E6A5317BC6EA0570478408DF298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:04:ae:f2:50:4e:1a:11:22:04:50:4a:ca:20:
                    1d:a5:b9:29:35:92:de:e2:1d:50:72:fa:7d:a6:41:
                    0d:9f:db:1b:ae:ba:40:66:07:9a:05:a4:4e:1b:c1:
                    83:48:93:7a:e4:9a:75:66:0f:39:e3:66:47:b5:ed:
                    ef:8e:2b:4a:51:b5:c4:97:ce:5f:e4:f7:7a:2c:cf:
                    dc:71:6a:12:83:52:d2:e0:f0:8a:53:9c:29:c6:2d:
                    55:4b:4e:6b:f6:73:38:a1:7a:68:9e:ea:a1:c6:bb:
                    67:72:2b:c6:b1:15:cf:f9:d2:97:69:31:da:b2:1c:
                    a9:ae:96:e4:de:39:a7:71:5a:33:0f:90:be:32:7a:
                    b9:e4:ad:31:75:49:00:0b:a1:cb:1d:98:3e:60:cf:
                    9e:7b:1f:da:97:63:36:5b:16:8b:22:00:2d:39:ae:
                    1c:eb:ab:1a:13:c6:c6:bb:cc:ab:45:4c:d0:ac:04:
                    93:9a:cb:a1:d1:fb:ea:e3:72:d6:db:1c:b4:57:a8:
                    45:da:0b:c6:a8:77:d9:56:92:01:20:47:61:e4:57:
                    da:34:1f:f8:0c:1e:0a:9d:7b:57:7d:ec:b8:34:32:
                    5b:5d:6b:41:fc:17:83:a1:d5:cb:e6:1b:6d:0a:3e:
                    03:10:8a:24:be:5f:83:2d:5e:5a:3a:fc:5f:d4:6a:
                    f3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:FF:18:54:ED:63:2E:6A:53:17:BC:6E:A0:57:04:78:40:8D:F2:98
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143753.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a44f::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:12:f5:4f:ed:cd:99:6a:67:27:8b:66:1b:16:b9:08:4d:73:
         7e:35:12:cd:37:3a:46:4d:a9:b9:6b:c6:34:1f:ea:d8:92:5f:
         40:f1:73:6f:1b:fa:94:e6:bc:a1:ae:f6:ac:3f:03:07:27:14:
         da:1a:66:95:50:41:74:55:61:36:df:6d:9a:93:5e:94:76:da:
         12:b5:f5:3f:4b:27:74:a6:f6:30:39:1f:d7:b2:fc:60:82:a8:
         b8:2c:62:4e:36:2f:b7:c2:9b:16:65:32:39:d2:86:85:c5:16:
         19:db:db:86:3d:64:fc:3a:98:e1:88:89:b5:00:67:cb:06:ce:
         b0:e9:0c:b5:8c:fc:04:46:40:fd:a4:14:b2:3b:8b:62:ea:5f:
         ef:7f:0d:11:bd:7e:5e:a8:35:57:d2:9c:5d:9d:4f:5c:73:9b:
         6d:53:65:46:9d:da:15:ff:a8:02:96:6d:a3:14:94:96:fd:f5:
         5a:ff:ca:65:8d:57:5d:e3:f9:ea:25:e9:44:5c:7d:cf:75:2c:
         93:c8:32:ac:ef:ff:e9:d8:9f:3c:06:0a:0a:16:a7:df:c1:f5:
         22:a6:a2:46:04:28:bf:8c:b4:50:d1:b7:e9:a9:40:c6:c9:ef:
         76:48:30:3f:cf:fb:e7:94:50:3f:88:88:09:16:b2:19:de:7f:
         14:4e:12:d5
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUT3XoP8SYdtbE0PeJWoylhNLgQd8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjIyMzRaFw0yNzA1MjEwNjI3MzRaMDMxMTAvBgNV
BAMTKDIzRkYxODU0RUQ2MzJFNkE1MzE3QkM2RUEwNTcwNDc4NDA4REYyOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLBK7yUE4aESIEUErKIB2luSk1
kt7iHVBy+n2mQQ2f2xuuukBmB5oFpE4bwYNIk3rkmnVmDznjZke17e+OK0pRtcSX
zl/k93osz9xxahKDUtLg8IpTnCnGLVVLTmv2czihemie6qHGu2dyK8axFc/50pdp
MdqyHKmuluTeOadxWjMPkL4yernkrTF1SQALocsdmD5gz557H9qXYzZbFosiAC05
rhzrqxoTxsa7zKtFTNCsBJOay6HR++rjctbbHLRXqEXaC8aod9lWkgEgR2HkV9o0
H/gMHgqde1d97Lg0Mltda0H8F4Oh1cvmG20KPgMQiiS+X4MtXlo6/F/UavNvAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUI/8YVO1jLmpTF7xuoFcEeECN8pgwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNzUzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqkTzANBgkqhkiG9w0BAQsFAAOCAQEAZRL1
T+3NmWpnJ4tmGxa5CE1zfjUSzTc6Rk2puWvGNB/q2JJfQPFzbxv6lOa8oa72rD8D
BycU2hpmlVBBdFVhNt9tmpNelHbaErX1P0sndKb2MDkf17L8YIKouCxiTjYvt8Kb
FmUyOdKGhcUWGdvbhj1k/DqY4YiJtQBnywbOsOkMtYz8BEZA/aQUsjuLYupf738N
Eb1+Xqg1V9KcXZ1PXHObbVNlRp3aFf+oApZtoxSUlv31Wv/KZY1XXeP56iXpRFx9
z3Usk8gyrO//6difPAYKChan38H1IqaiRgQov4y0UNG36alAxsnvdkgwP8/755RQ
P4iICRayGd5/FE4S1Q==
-----END CERTIFICATE-----