Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143800.roa
File:                     AS143800.roa (raw, json)
Hash identifier:          RGyHpvOHHNd2A6rGbjD7L+kR7ixk6S7ObB3YbaUkHO0=
Subject key identifier:   E7:1A:6F:C9:2D:65:94:43:37:39:67:1B:42:11:C1:BF:6C:87:14:B0
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       73CD2E754EE3565B813B24FE064408799660B54F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143800.roa
Signing time:             Fri 22 May 2026 07:32:14 +0000
ROA not before:           Fri 22 May 2026 07:27:14 +0000
ROA not after:            Fri 21 May 2027 07:32:14 +0000
asID:                     143800
IP address blocks:        240a:a47e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:cd:2e:75:4e:e3:56:5b:81:3b:24:fe:06:44:08:79:96:60:b5:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:14 2026 GMT
            Not After : May 21 07:32:14 2027 GMT
        Subject: CN=E71A6FC92D6594433739671B4211C1BF6C8714B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1d:b4:84:10:a9:26:96:3b:23:19:43:34:e6:
                    41:d1:54:91:29:44:01:58:36:b8:87:91:d5:46:9f:
                    d2:f4:c2:0e:90:1a:8f:84:a0:39:47:38:86:79:96:
                    c4:50:f6:34:15:89:db:09:3b:15:72:fb:61:25:41:
                    3c:3e:a5:93:16:61:4b:52:38:ea:ad:14:54:76:98:
                    de:9e:ce:ed:52:75:be:4f:51:98:95:6b:c0:18:8b:
                    b1:62:94:fe:54:00:73:1d:9c:18:ee:09:66:09:8d:
                    0c:2d:6e:a7:3d:a9:70:f2:86:40:1d:62:ff:90:e8:
                    fc:74:2f:74:a9:59:60:ba:f8:cd:d3:ca:a7:8a:f2:
                    41:49:f7:e5:cb:22:53:dc:6b:9d:b2:87:92:b1:ce:
                    d3:91:99:f4:16:50:50:fd:05:a8:f6:e8:36:6d:60:
                    5f:7d:3d:26:33:5b:0a:14:f0:08:71:78:82:f7:cf:
                    15:a6:7c:d9:fb:c3:ee:72:c1:10:66:75:d8:e0:3f:
                    41:7c:74:2e:94:97:6b:d8:84:c8:c8:12:db:ee:0a:
                    18:10:f1:95:30:dd:07:ad:26:f7:ab:c6:95:ef:2d:
                    5b:d6:4c:6c:7f:04:8d:3c:1b:3a:14:d2:99:0f:2b:
                    b2:de:f9:9f:fe:64:7e:c4:f4:fa:15:71:55:55:7f:
                    20:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1A:6F:C9:2D:65:94:43:37:39:67:1B:42:11:C1:BF:6C:87:14:B0
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143800.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a47e::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:32:11:c2:28:59:71:c7:4e:46:6e:c0:06:cd:84:25:77:9e:
         2c:5f:fb:ab:8e:3d:9d:ae:50:7d:ea:09:0c:2c:1b:49:e6:bd:
         69:de:b4:d5:58:05:12:ee:5b:64:bb:1d:af:46:05:99:20:48:
         de:dc:04:11:c5:34:f2:a2:04:b9:f6:00:ee:cc:0c:55:52:7d:
         56:c1:16:a6:82:95:a2:a0:ed:82:0f:b3:a8:f2:92:04:07:29:
         19:c7:fc:3d:07:fc:45:b6:7c:2a:5e:67:de:69:19:2e:e6:7d:
         89:dd:7f:06:0c:58:e8:06:75:2e:3c:bb:0d:a5:47:37:b7:b7:
         0b:9f:13:93:62:52:fa:f8:e9:42:b0:97:dd:cd:d3:a3:0f:87:
         9e:3a:7d:b2:79:ee:76:3d:c8:34:94:48:37:c4:7e:e3:84:c0:
         f5:79:65:a7:68:44:68:eb:09:58:6f:d3:e2:f6:c0:9f:16:26:
         3f:0c:d7:5c:13:49:9f:03:02:47:29:e0:2c:f1:2e:4f:56:26:
         bc:fe:5f:24:87:4e:e0:91:73:b4:c9:eb:ae:41:63:02:ae:21:
         59:54:ea:0b:4e:9a:0f:ee:30:5c:a5:af:66:ed:7b:e5:e3:ad:
         66:f5:b8:19:d3:be:48:e2:82:f0:08:4d:80:46:28:a5:dc:35:
         5d:f4:33:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----