Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143839.roa
File:                     AS143839.roa (raw, json)
Hash identifier:          sZo225dxccYeRDDCvBLINVrLTSA6A88OoD9jn92n+oY=
Subject key identifier:   B7:14:E3:28:DA:5C:FD:1F:01:1D:5C:EC:9F:FF:97:0C:C3:C4:24:FF
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       044B62E33B6520D51BEE5F002683D2DEC93A8325
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143839.roa
Signing time:             Mon 25 May 2026 06:28:13 +0000
ROA not before:           Mon 25 May 2026 06:23:13 +0000
ROA not after:            Mon 24 May 2027 06:28:13 +0000
asID:                     143839
IP address blocks:        240a:a4a5::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:4b:62:e3:3b:65:20:d5:1b:ee:5f:00:26:83:d2:de:c9:3a:83:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:13 2026 GMT
            Not After : May 24 06:28:13 2027 GMT
        Subject: CN=B714E328DA5CFD1F011D5CEC9FFF970CC3C424FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f4:3f:62:98:6d:13:ff:a4:e8:8d:53:40:da:
                    f8:d1:70:15:e1:bf:01:ee:bf:ad:01:75:9d:7c:b7:
                    5d:1e:76:54:96:65:ab:5b:8a:83:83:0d:69:3f:c5:
                    40:48:73:c4:81:a9:e1:dc:5f:2b:c3:0a:01:22:d8:
                    20:1a:f4:78:8d:86:11:56:89:20:d7:d1:f8:7a:70:
                    a6:1c:67:6c:7f:11:e5:fb:a8:73:11:45:91:7f:1d:
                    8f:91:8d:39:e1:d9:7d:d4:64:7b:17:9f:7b:63:55:
                    e1:41:bb:19:63:67:ec:a0:02:5e:f6:6d:f6:39:5f:
                    d5:e6:bb:dc:00:70:30:32:69:b1:b8:10:cc:c6:6f:
                    7e:8b:fb:eb:5c:a1:76:eb:b1:48:88:cc:f7:6e:98:
                    36:4a:39:be:64:fb:d0:c9:4c:09:b8:9d:7e:36:ec:
                    46:a5:f2:be:14:32:78:3e:c0:76:31:87:3b:b1:20:
                    3d:22:fd:d8:0f:0e:d7:13:f0:4f:6c:54:16:fc:39:
                    fa:0a:a9:07:37:b9:e4:88:17:8e:a1:a6:33:fd:b7:
                    72:ca:db:e3:2f:7c:05:e4:83:6e:c4:0d:8d:a5:0d:
                    b3:8e:15:fa:60:79:5a:a5:38:d9:26:86:0f:b2:88:
                    2a:91:6c:82:32:69:4f:14:dd:fb:41:d2:6e:9f:ce:
                    05:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:14:E3:28:DA:5C:FD:1F:01:1D:5C:EC:9F:FF:97:0C:C3:C4:24:FF
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a4a5::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:42:26:32:00:e9:90:24:ba:c6:ea:c3:b9:d2:02:eb:a4:24:
         64:a5:ad:89:31:19:df:74:e4:4a:8a:57:13:33:8e:a0:05:55:
         44:37:b5:6a:50:bd:45:a9:b2:06:76:47:fe:9a:d0:99:af:a9:
         a6:ac:4a:33:39:71:35:1b:d5:fa:7e:00:c0:52:3d:af:a2:45:
         12:8a:38:01:68:92:74:41:54:a7:5d:7d:47:25:5f:04:ef:85:
         6a:38:3e:f2:8f:b5:94:f3:56:be:eb:ab:68:30:54:d1:36:dd:
         1d:97:3b:6b:5c:3b:a6:81:6e:17:89:2d:5d:b4:5b:43:00:16:
         30:e7:c2:4f:5f:c8:7b:a2:33:d6:e9:16:a5:ae:fe:fb:c6:5b:
         9e:25:b1:d2:49:35:0a:64:44:fd:f5:f0:17:7e:e0:90:24:66:
         0d:b4:8b:e0:b2:66:08:88:86:1c:40:93:8e:3d:2f:35:56:08:
         7a:98:be:fd:75:66:02:36:38:06:32:6c:d3:51:ef:73:f6:2b:
         55:52:27:6a:6b:89:bd:b9:d5:4f:b4:3f:c1:53:d0:75:32:1c:
         fe:de:70:c8:7a:93:2f:89:8b:74:8e:12:7f:a6:75:de:af:b5:
         fa:31:d1:45:7a:9c:29:8d:a7:fc:f9:f6:b5:cc:46:f6:df:d9:
         be:15:bf:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----