Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143835.roa
File:                     AS143835.roa (raw, json)
Hash identifier:          tfYqZwcBFPAC8PGcc1we4sTxR2s3kRx8LY8BwowZlwM=
Subject key identifier:   60:0B:A5:2D:F4:E0:F3:70:C9:FF:00:80:65:A1:5E:13:C6:DA:67:50
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       23ECE2C5E2D95989BE6E784AEE8717F5B18803F4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143835.roa
Signing time:             Fri 22 May 2026 06:58:43 +0000
ROA not before:           Fri 22 May 2026 06:53:43 +0000
ROA not after:            Fri 21 May 2027 06:58:43 +0000
asID:                     143835
IP address blocks:        240a:a4a1::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ec:e2:c5:e2:d9:59:89:be:6e:78:4a:ee:87:17:f5:b1:88:03:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:43 2026 GMT
            Not After : May 21 06:58:43 2027 GMT
        Subject: CN=600BA52DF4E0F370C9FF008065A15E13C6DA6750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a5:18:f1:d4:3c:25:d6:a7:77:82:87:1f:1d:
                    14:d0:e5:49:c8:3b:6e:40:a9:b1:91:20:58:d8:63:
                    b1:09:ed:27:85:bd:1f:9b:eb:9f:48:4f:d8:8e:b2:
                    c8:a2:d0:eb:9a:7c:f6:0e:86:fe:ea:7d:26:b1:af:
                    f3:0b:e8:a4:e3:16:06:f5:53:bd:cf:0f:d9:aa:97:
                    c1:50:fb:cd:3f:eb:9f:4a:f0:16:cd:69:28:bb:dc:
                    98:13:ee:42:c6:13:2a:7d:61:59:63:d6:66:7a:e1:
                    b9:a1:50:de:fc:19:82:f1:6b:3b:9b:c6:fb:0e:32:
                    34:29:d5:e1:73:70:00:85:5c:68:89:7d:f4:1a:66:
                    3c:7e:c7:11:ab:ab:69:9b:7c:94:47:5f:a1:23:de:
                    15:1e:f3:ad:df:8c:4b:e2:ce:19:fe:0e:b2:14:53:
                    db:56:d9:da:23:fc:d3:0c:84:d2:0f:c4:f1:17:e3:
                    32:d7:6f:cf:96:43:3f:a9:da:d2:81:5b:2c:78:52:
                    9c:e4:90:3f:bd:c1:1b:66:95:d6:73:db:95:f3:52:
                    8e:9a:38:21:46:de:4e:9c:4c:72:cf:4f:29:00:60:
                    47:35:fb:44:ef:c8:dd:b0:74:0b:3d:d4:3e:e2:f4:
                    65:01:ae:b4:52:59:58:5d:00:b9:76:59:59:a4:d3:
                    80:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:0B:A5:2D:F4:E0:F3:70:C9:FF:00:80:65:A1:5E:13:C6:DA:67:50
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a4a1::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:83:a3:91:15:54:4c:62:92:ed:79:1b:11:d2:b8:7a:d1:2a:
         e2:6d:30:e8:64:98:8a:7d:b8:ad:9d:3d:22:90:cd:49:ae:b5:
         78:38:67:eb:bd:38:32:7a:22:0e:6d:34:c0:5c:6c:be:7f:36:
         68:52:cd:bb:d6:b4:0c:41:89:e1:19:15:fd:da:7e:89:d9:2f:
         eb:6a:60:2d:b0:a2:8e:76:f2:88:37:49:e3:c4:53:36:0c:87:
         9e:f3:5a:31:f9:be:83:56:15:1f:cb:ee:83:63:a2:4a:45:21:
         6b:30:2a:b9:82:1b:f6:d2:26:f0:cb:d4:77:ad:8b:e8:33:e1:
         b9:65:6c:38:ff:91:d4:4a:8b:b3:11:77:c7:08:17:6c:ba:25:
         9e:1b:18:3e:c7:6c:2a:b6:af:18:10:85:23:a2:c4:88:3f:56:
         4c:f9:bb:ca:b9:d4:38:22:03:5f:25:79:10:f0:f6:89:d3:3e:
         fc:8d:93:4c:d3:6a:d1:6b:55:17:f9:63:96:99:53:b5:fe:51:
         a7:e9:f7:f7:c4:6c:24:a6:15:52:b1:7d:a5:f9:84:69:fc:72:
         5e:ca:9b:1f:56:f7:ff:eb:6b:ae:62:29:ef:2a:b5:8b:72:3a:
         13:13:10:09:e5:62:a2:82:28:7b:63:09:44:24:28:d9:a6:93:
         b4:b9:2a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----