Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143780.roa
File:                     AS143780.roa (raw, json)
Hash identifier:          5Z539kX93b6heEitMpG14I6XPhL1NWpVmVBB9KLzocA=
Subject key identifier:   F8:FC:99:AF:91:46:BF:F4:07:38:B4:2C:21:0B:67:FF:42:B9:FD:C0
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0B99A848671F6D1AB996EF5AE441647CB1A4FDCF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143780.roa
Signing time:             Mon 25 May 2026 01:38:34 +0000
ROA not before:           Mon 25 May 2026 01:33:34 +0000
ROA not after:            Mon 24 May 2027 01:38:34 +0000
asID:                     143780
IP address blocks:        240a:a46a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:99:a8:48:67:1f:6d:1a:b9:96:ef:5a:e4:41:64:7c:b1:a4:fd:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:34 2026 GMT
            Not After : May 24 01:38:34 2027 GMT
        Subject: CN=F8FC99AF9146BFF40738B42C210B67FF42B9FDC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:af:6c:10:74:31:21:a9:13:b8:f2:1c:67:02:
                    65:f0:7f:e7:10:58:e7:29:67:da:cb:6f:68:5a:90:
                    d0:a1:da:51:43:ef:8c:c7:25:8f:d6:2c:d4:b5:3b:
                    40:4d:98:1b:8d:1a:c5:92:39:bd:ad:50:46:0f:77:
                    56:99:c4:15:34:b5:c0:ae:aa:46:c4:6b:25:ee:28:
                    e4:b1:8e:d4:93:39:4a:47:1d:90:d6:57:95:c4:bc:
                    2d:e5:39:8a:41:07:6f:1e:fc:47:c3:11:32:4f:54:
                    9c:a6:a5:29:12:84:bf:d5:60:ea:d6:ca:38:df:32:
                    f6:5b:a6:c9:15:25:5f:fb:46:0a:b7:e1:ca:23:e6:
                    6b:c2:26:78:29:1e:d5:b7:bd:b9:57:79:43:41:96:
                    e3:b8:09:5f:d0:73:a2:df:04:82:a6:bc:f9:5e:22:
                    05:88:82:85:73:75:b4:38:1a:ea:ee:df:a9:a9:69:
                    4d:ad:c3:f0:98:bb:cd:92:56:5b:67:63:25:63:fb:
                    82:a3:a6:e9:3f:02:66:ff:73:75:45:d0:32:48:7c:
                    50:d6:f0:56:c3:c7:73:00:29:eb:e3:a4:da:40:5d:
                    8c:8e:94:11:23:3d:ef:e3:f2:e4:45:2e:80:bf:a7:
                    2d:7a:79:02:a2:c0:4b:83:38:d0:00:f0:63:26:60:
                    ae:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FC:99:AF:91:46:BF:F4:07:38:B4:2C:21:0B:67:FF:42:B9:FD:C0
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143780.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a46a::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:11:7f:62:d5:e7:35:58:a1:29:12:f6:cd:b6:f2:8b:f2:0c:
         06:eb:8e:2f:3e:b5:a5:6d:4d:d1:98:09:36:c3:54:f4:f7:d7:
         67:ec:ac:1a:a9:0d:5b:63:db:b5:b6:d4:fe:b3:de:97:9d:a8:
         4e:10:9b:4b:43:ec:e2:bb:da:a5:61:81:70:04:41:75:41:d7:
         06:be:52:77:f3:de:af:ee:97:05:f7:cb:ed:2b:0d:45:a2:41:
         63:d8:56:69:46:0a:84:88:ae:b6:ad:c4:54:3c:e2:c7:85:25:
         21:33:73:31:21:a6:ba:e4:9e:7b:cd:e7:3a:c1:25:bc:b7:de:
         a2:81:be:ab:ff:93:74:58:c2:f4:02:b7:26:1c:25:f2:d0:78:
         58:7f:92:dc:b2:c5:dd:c8:e6:32:da:4a:2c:09:43:f2:30:f7:
         10:f0:3a:fb:ac:e0:86:f0:ad:2b:f3:0b:06:e5:8f:05:93:b5:
         21:ef:d0:28:50:54:fb:be:32:5d:50:6c:75:48:f4:a6:d0:39:
         4d:4e:01:08:78:45:29:c1:11:25:16:a7:c9:e1:35:f0:84:f9:
         df:5c:4b:d4:1f:54:f2:a9:eb:ac:8b:d6:49:46:02:de:1c:dd:
         31:20:95:14:aa:1c:c1:24:06:eb:6d:b3:57:ab:49:1b:87:67:
         94:f3:65:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----