Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143770.roa
File:                     AS143770.roa (raw, json)
Hash identifier:          rLB4fCp6BWnFZpAV6bJfiekaNJA4Fsf7qmSN5ouZFMQ=
Subject key identifier:   89:EB:75:4D:52:39:49:1A:08:A1:E5:EE:5F:33:FF:CF:F2:5B:FF:BB
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0A1B7050F135609AC3A18B8399ED7EBE610707ED
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143770.roa
Signing time:             Tue 26 May 2026 06:12:28 +0000
ROA not before:           Tue 26 May 2026 06:07:28 +0000
ROA not after:            Tue 25 May 2027 06:12:28 +0000
asID:                     143770
IP address blocks:        240a:a460::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:1b:70:50:f1:35:60:9a:c3:a1:8b:83:99:ed:7e:be:61:07:07:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:07:28 2026 GMT
            Not After : May 25 06:12:28 2027 GMT
        Subject: CN=89EB754D5239491A08A1E5EE5F33FFCFF25BFFBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:06:d1:40:ba:de:ab:9c:6d:e0:35:95:0f:ea:
                    0c:89:f1:66:c8:9c:f0:df:c3:7f:76:9d:9b:09:7b:
                    4c:18:0a:b7:02:2f:c8:58:a0:6c:5f:d8:69:e7:58:
                    c1:d3:f0:40:59:58:e8:47:34:b4:d4:48:9a:51:59:
                    39:0a:cd:69:ce:58:ba:88:f9:47:e4:5a:98:4e:8d:
                    b5:c0:e8:8c:00:d3:87:7c:9d:70:59:bd:e0:67:7d:
                    f7:ee:18:ec:7f:df:52:35:32:e4:0c:f0:5e:35:d5:
                    3f:4f:3e:b1:56:e0:9d:86:57:b8:b1:b5:87:8e:ce:
                    e7:a8:a2:a6:cf:15:d4:d2:c2:84:82:71:51:61:ab:
                    c2:88:ae:a4:c8:0d:24:2e:0d:77:69:f8:24:4c:b1:
                    ac:8c:bc:19:e5:3d:88:b4:e7:2f:dd:41:0a:19:8a:
                    2a:b3:b3:b7:d0:a8:fc:f8:a9:99:6d:a8:02:6c:e8:
                    66:6c:a3:a3:41:f9:2b:2f:5b:99:91:1e:77:fa:a0:
                    26:13:e7:b2:c3:19:5e:dc:ee:24:73:1e:96:e4:5a:
                    dd:6a:fa:2d:d8:43:3a:67:06:bb:d5:15:c5:81:6a:
                    e1:43:a8:6b:36:af:9c:f8:dd:c2:16:41:b9:f9:3f:
                    eb:b8:55:e4:d4:d8:9d:49:19:77:10:48:54:a7:37:
                    6b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:EB:75:4D:52:39:49:1A:08:A1:E5:EE:5F:33:FF:CF:F2:5B:FF:BB
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143770.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a460::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:a7:eb:17:4a:bf:7b:32:44:8d:84:92:cf:57:e6:45:4b:1b:
         eb:95:4c:2a:45:10:7f:f5:6f:58:b8:2b:bb:12:40:af:db:2a:
         65:69:db:82:ed:1e:36:d0:6a:6f:26:ff:14:7e:49:1e:63:d8:
         52:72:a7:de:01:b2:66:04:77:aa:97:5b:0d:6f:49:e8:01:55:
         10:12:c2:59:e9:54:09:96:76:be:76:84:b2:87:0e:b3:e6:3a:
         97:e3:bc:0e:aa:36:b2:46:01:7e:9d:3c:74:66:b0:03:93:fd:
         35:ab:32:1c:d2:52:48:23:d6:df:bc:4c:ec:0e:ba:53:82:16:
         de:75:45:65:7d:cb:ea:74:97:79:29:9b:a2:c2:48:21:4d:fc:
         7a:b6:b7:3d:04:2b:94:a8:31:1e:92:dc:25:ba:b8:d0:36:58:
         54:70:fe:3e:5f:eb:5c:bd:30:95:6b:24:4d:ae:a1:f5:09:3c:
         1a:03:22:e2:76:b0:62:cd:5e:4c:b1:44:01:00:d4:b1:29:b3:
         2f:f0:1f:10:45:33:8c:4d:93:99:80:58:c5:1f:45:a8:d4:68:
         4e:8b:97:fe:1b:cf:bc:5e:80:34:6f:05:f3:d5:28:ad:78:d5:
         be:fb:ae:dd:6c:e0:e9:64:09:59:7d:cb:4a:df:ee:7b:ba:20:
         32:5d:3c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----