Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143781.roa
File:                     AS143781.roa (raw, json)
Hash identifier:          Gx4wfC5GME2CBYcbCLPC8jN/Ielc7+VeWjWheAFcy+Q=
Subject key identifier:   3B:7B:01:46:E4:80:B8:3F:03:6E:42:BB:2A:B8:10:0F:4E:E1:76:06
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       169E1869575496D8AAFD9BDBCBC8ECB1B7524A86
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143781.roa
Signing time:             Tue 26 May 2026 03:16:33 +0000
ROA not before:           Tue 26 May 2026 03:11:33 +0000
ROA not after:            Tue 25 May 2027 03:16:33 +0000
asID:                     143781
IP address blocks:        240a:a46b::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:9e:18:69:57:54:96:d8:aa:fd:9b:db:cb:c8:ec:b1:b7:52:4a:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:11:33 2026 GMT
            Not After : May 25 03:16:33 2027 GMT
        Subject: CN=3B7B0146E480B83F036E42BB2AB8100F4EE17606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5e:8f:57:c5:e8:db:f4:a1:ba:f1:0f:23:c3:
                    c7:b8:88:f3:cb:b1:66:80:96:78:b3:51:57:89:f4:
                    34:44:4e:87:0b:87:7c:66:4c:1d:73:39:ea:22:93:
                    18:ac:b4:8f:8b:80:cb:bf:c2:e7:5e:ae:b9:b4:8a:
                    c2:ab:39:9a:a6:3e:0c:71:b2:43:57:aa:ff:bd:cd:
                    6c:06:04:5a:d5:a5:12:62:b0:a9:e3:0f:a3:a2:d5:
                    75:29:6a:e7:6d:da:09:b3:1e:63:4e:a4:42:92:1d:
                    bc:71:f1:f7:f2:1a:e6:ff:58:09:a3:74:f3:08:68:
                    db:a7:db:5f:95:aa:e7:75:2f:cb:43:8a:23:d3:f9:
                    30:d7:b4:06:8a:49:a1:7d:ae:15:88:6f:dd:c9:1b:
                    71:f6:47:c1:17:9c:7d:43:31:26:41:28:33:0a:53:
                    90:ce:38:19:f5:d5:f5:2f:f6:ee:41:9a:5a:50:98:
                    cc:e2:a7:a0:0d:80:52:2a:18:8c:30:7d:76:a2:8e:
                    40:06:74:32:fa:f9:f0:34:ce:c0:3b:14:86:f5:9a:
                    87:4d:23:31:2d:38:af:91:f2:26:c4:f4:b3:13:85:
                    65:e9:fd:8c:8d:3d:4e:d5:05:d2:c8:81:4c:dd:63:
                    28:77:5e:c7:88:9f:bf:be:42:de:9b:e7:0b:1f:a2:
                    65:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7B:01:46:E4:80:B8:3F:03:6E:42:BB:2A:B8:10:0F:4E:E1:76:06
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143781.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a46b::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:9b:e1:e5:bf:34:1a:b3:d2:a8:45:1b:2c:37:df:79:fd:3a:
         64:c3:ba:30:2d:49:4c:6e:4c:4b:c3:59:1c:ce:05:eb:12:e9:
         99:97:31:6d:90:9b:fb:fd:f3:7f:34:59:f8:f0:27:b8:8d:17:
         1e:69:66:70:96:0e:78:7c:5a:84:fc:5f:25:87:68:f1:23:44:
         6e:f8:a5:1e:77:2a:40:01:cc:f5:c7:34:5e:cc:b8:dd:b0:15:
         38:41:d6:be:61:34:8d:cd:46:fc:ed:a0:7f:8a:b1:6d:21:fa:
         50:79:da:38:60:b6:a0:77:ef:5e:59:5c:4e:0b:0c:bf:87:d0:
         03:76:39:c1:9e:47:35:84:70:a2:e7:69:3d:40:eb:b5:64:6c:
         57:a7:3f:d5:61:4d:84:21:ed:fd:08:8e:dc:0f:2c:02:b1:2c:
         e3:6d:ca:c3:f1:92:dd:91:da:38:14:cd:f9:9f:c5:97:d2:b7:
         11:fa:12:a4:2a:cb:7c:fe:e1:20:16:43:93:1f:22:6c:4a:2f:
         28:8d:33:a7:d8:51:fe:7f:f2:92:a2:fd:64:14:b7:27:36:de:
         d2:17:76:21:73:8b:35:3a:dd:7e:5d:b2:44:52:ea:41:c9:67:
         7b:50:07:86:ad:7d:b1:ac:d8:30:52:58:1c:0c:a1:0a:99:02:
         92:66:a3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----