Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143783.roa
File:                     AS143783.roa (raw, json)
Hash identifier:          SO+eOFsQ9DJ9w+yq7kLQqZNg1Q97mBcqJsVyvMHr718=
Subject key identifier:   2C:E6:47:B1:9E:7A:93:37:2D:23:7B:4B:51:B5:65:73:E1:74:7A:6E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       05820CB59D0BE743E13B47749C334B6EBD1993E1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143783.roa
Signing time:             Fri 22 May 2026 04:26:57 +0000
ROA not before:           Fri 22 May 2026 04:21:57 +0000
ROA not after:            Fri 21 May 2027 04:26:57 +0000
asID:                     143783
IP address blocks:        240a:a46d::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:82:0c:b5:9d:0b:e7:43:e1:3b:47:74:9c:33:4b:6e:bd:19:93:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:21:57 2026 GMT
            Not After : May 21 04:26:57 2027 GMT
        Subject: CN=2CE647B19E7A93372D237B4B51B56573E1747A6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:09:d0:f5:ae:e5:03:fb:ac:4a:02:4e:74:1b:
                    ec:bd:8d:1f:9c:f3:61:f2:0d:f8:2c:32:3b:d6:0c:
                    b3:2d:32:73:85:c8:bb:9a:f0:aa:d9:b4:e3:e1:e1:
                    02:a7:e4:25:54:e6:92:71:3b:b7:ef:6c:a5:cd:8a:
                    99:bf:bf:3d:f2:fd:fc:de:0e:95:c2:4c:f7:e3:27:
                    a7:08:82:74:f2:4c:d4:3b:8e:19:30:77:68:69:be:
                    ff:2e:7d:c1:4e:a0:fe:d9:2e:a1:e7:b4:ac:4b:92:
                    7b:82:31:9b:a7:18:d3:33:d7:47:74:7a:d2:11:9c:
                    cb:a5:a8:d9:33:1f:7a:36:67:b7:70:70:f8:9d:22:
                    ce:5b:10:37:68:bb:82:11:9f:d1:4a:0e:38:10:c9:
                    af:16:a2:e3:0e:ea:ec:ec:08:b3:2d:10:ae:d9:90:
                    ed:f6:5a:6c:52:ed:97:f0:42:42:75:42:20:0b:41:
                    e0:e9:bd:a3:f4:c0:6f:f5:5a:d1:05:f8:e2:67:0c:
                    a6:60:fd:92:54:c5:9d:7e:fd:95:d6:3f:53:2a:7d:
                    8e:5d:07:14:45:c4:dd:16:44:62:ea:7d:6c:c8:75:
                    a6:ba:ed:b7:b5:7d:a0:c1:b5:cf:17:2f:f6:8e:f7:
                    ec:b7:f9:72:4e:2a:be:bf:4f:33:bb:53:b1:03:25:
                    c2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E6:47:B1:9E:7A:93:37:2D:23:7B:4B:51:B5:65:73:E1:74:7A:6E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143783.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a46d::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:c5:e3:e6:89:bb:d3:c0:79:3c:dc:21:db:8d:82:55:49:dc:
         e1:2f:5b:4e:4e:bb:cc:26:63:dc:b8:79:1d:9d:82:6b:6a:6a:
         b1:0d:df:76:7e:19:1b:60:85:c4:4a:fa:76:76:28:25:94:1b:
         de:c1:46:e4:7f:9a:e0:71:6e:20:da:dc:e4:b4:16:87:0b:4c:
         b3:b8:4b:b6:aa:68:09:fc:8c:93:3d:85:3a:84:f3:6c:62:c7:
         96:71:7d:a0:74:4a:40:fe:61:f2:33:c1:5d:f4:03:1c:16:1d:
         f7:fc:0e:c8:7d:9e:c6:05:6d:a5:f9:ff:5e:83:f3:f6:cc:76:
         32:42:46:ed:e4:e0:c7:40:dc:90:11:02:26:9d:c1:65:74:b4:
         38:61:bf:43:48:b7:2c:d7:eb:3a:51:cb:d9:b5:9a:9b:0a:01:
         57:fb:da:dd:f4:81:60:21:f2:9c:49:a6:ee:a9:96:fb:e5:6e:
         de:92:50:61:e8:c5:9e:5b:b0:04:3a:3d:c7:f7:6d:d5:c5:97:
         62:c2:f7:97:e7:df:77:c3:f0:78:fe:9c:a8:a7:e2:15:aa:d8:
         df:b2:6f:91:a7:3e:a7:5f:93:0b:e8:99:b9:ca:de:35:98:1c:
         50:8b:3d:d6:e9:1b:3e:36:29:cb:1e:60:bc:a3:f0:1f:3a:24:
         c1:1d:65:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----