Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143797.roa
File:                     AS143797.roa (raw, json)
Hash identifier:          gZEnd3L5a/oxtKpxkGSn5sW6jmfwVn2p1szct1IuvX0=
Subject key identifier:   B6:8A:AC:98:8E:69:F8:62:DC:E9:B9:40:0E:1C:2B:FD:1A:AE:EB:6A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4790344CBFA7653FCA9089C969081447361C9984
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143797.roa
Signing time:             Fri 22 May 2026 07:32:22 +0000
ROA not before:           Fri 22 May 2026 07:27:22 +0000
ROA not after:            Fri 21 May 2027 07:32:22 +0000
asID:                     143797
IP address blocks:        240a:a47b::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:90:34:4c:bf:a7:65:3f:ca:90:89:c9:69:08:14:47:36:1c:99:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:22 2026 GMT
            Not After : May 21 07:32:22 2027 GMT
        Subject: CN=B68AAC988E69F862DCE9B9400E1C2BFD1AAEEB6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0f:5a:52:80:c0:15:0d:f1:5c:da:83:8c:c8:
                    8c:97:30:da:ea:1f:55:3c:8a:93:e1:c9:d5:cd:cf:
                    7c:87:8e:a3:28:6f:2c:08:55:ac:47:e0:7c:4d:10:
                    6f:84:89:96:37:e4:dc:12:17:1a:1c:34:b6:83:bb:
                    7b:e5:ee:02:1c:d2:62:56:15:54:91:d4:ab:3a:d2:
                    f0:8a:03:17:4e:cd:7c:ea:e3:0e:10:e4:45:8a:cb:
                    ea:73:96:d4:dc:26:6c:49:f1:c9:ad:77:f6:3b:85:
                    b2:8e:18:c0:81:77:e5:bd:ff:df:db:81:ae:24:48:
                    f4:2a:3a:9e:2e:72:9b:1a:3c:6d:b5:95:ed:dd:91:
                    d0:9a:02:3c:d5:70:87:f3:0d:2f:cf:a3:a2:7f:4c:
                    ff:0d:61:7f:34:ce:46:eb:12:dc:36:ed:ed:bc:cd:
                    79:c6:1c:5f:ce:67:b8:6e:6f:30:55:80:fb:4d:05:
                    73:eb:c3:0e:59:e8:0e:42:ab:ed:82:e8:7c:89:59:
                    cf:57:49:82:ca:42:9a:b5:bc:10:ea:3d:3a:74:63:
                    b0:21:dd:0a:aa:a8:d7:1c:35:1e:ba:36:aa:40:04:
                    b9:23:c7:6c:c3:f8:30:30:d9:f8:54:8e:7a:de:53:
                    f7:fc:e8:9b:be:8c:1c:f2:10:9b:d5:21:ec:74:f0:
                    a9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:8A:AC:98:8E:69:F8:62:DC:E9:B9:40:0E:1C:2B:FD:1A:AE:EB:6A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143797.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a47b::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:4d:23:6b:5f:ad:09:84:33:ed:47:79:96:5d:95:c6:43:7f:
         95:1a:53:17:ab:85:89:f1:69:76:00:72:24:25:c1:1f:af:90:
         07:fe:a9:7f:50:eb:31:d4:84:6f:a0:e8:31:85:4e:78:23:76:
         f2:1c:aa:4e:9d:2a:b3:8d:d1:15:3d:79:14:c4:05:ee:2e:66:
         bb:9f:90:47:3d:d7:de:6a:23:34:2a:64:de:33:1e:d2:1d:45:
         85:22:c8:77:23:f7:68:8f:f4:a9:3d:3d:c2:50:5e:85:d5:b7:
         98:f4:c0:78:3f:24:c8:05:bf:a9:8c:82:c9:7f:0e:17:06:44:
         75:d2:d4:e6:4b:89:97:16:ea:a0:13:89:3d:e5:f9:c1:02:22:
         8f:dd:07:1f:45:55:53:2b:a6:c1:da:99:bf:a6:4a:e0:67:bb:
         0b:96:d7:36:fe:b6:9a:53:53:ed:af:62:60:de:04:d4:5e:60:
         37:54:08:b6:cb:97:69:5a:d9:71:6a:a6:ab:24:0e:0b:b2:f5:
         67:68:92:46:8d:00:1f:f7:a9:03:ee:74:a4:8d:3e:ff:d8:01:
         dd:c3:99:ab:12:9c:6b:de:09:56:8a:e1:6a:1b:da:43:ed:ee:
         53:03:06:71:41:a4:e4:ec:c8:7b:fa:50:2f:35:51:85:41:c4:
         61:96:dc:19
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUR5A0TL+nZT/KkInJaQgURzYcmYQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzI3MjJaFw0yNzA1MjEwNzMyMjJaMDMxMTAvBgNV
BAMTKEI2OEFBQzk4OEU2OUY4NjJEQ0U5Qjk0MDBFMUMyQkZEMUFBRUVCNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMD1pSgMAVDfFc2oOMyIyXMNrq
H1U8ipPhydXNz3yHjqMobywIVaxH4HxNEG+EiZY35NwSFxocNLaDu3vl7gIc0mJW
FVSR1Ks60vCKAxdOzXzq4w4Q5EWKy+pzltTcJmxJ8cmtd/Y7hbKOGMCBd+W9/9/b
ga4kSPQqOp4ucpsaPG21le3dkdCaAjzVcIfzDS/Po6J/TP8NYX80zkbrEtw27e28
zXnGHF/OZ7hubzBVgPtNBXPrww5Z6A5Cq+2C6HyJWc9XSYLKQpq1vBDqPTp0Y7Ah
3QqqqNccNR66NqpABLkjx2zD+DAw2fhUjnreU/f86Ju+jBzyEJvVIex08KllAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUtoqsmI5p+GLc6blADhwr/Rqu62owHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzNzk3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqkezANBgkqhkiG9w0BAQsFAAOCAQEAc00j
a1+tCYQz7Ud5ll2VxkN/lRpTF6uFifFpdgByJCXBH6+QB/6pf1DrMdSEb6DoMYVO
eCN28hyqTp0qs43RFT15FMQF7i5mu5+QRz3X3mojNCpk3jMe0h1FhSLIdyP3aI/0
qT09wlBehdW3mPTAeD8kyAW/qYyCyX8OFwZEddLU5kuJlxbqoBOJPeX5wQIij90H
H0VVUyumwdqZv6ZK4Ge7C5bXNv62mlNT7a9iYN4E1F5gN1QItsuXaVrZcWqmqyQO
C7L1Z2iSRo0AH/epA+50pI0+/9gB3cOZqxKca94JVorhahvaQ+3uUwMGcUGk5OzI
e/pQLzVRhUHEYZbcGQ==
-----END CERTIFICATE-----