Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143848.roa
File:                     AS143848.roa (raw, json)
Hash identifier:          PjFWkGr6khtdLU7NSTalQJfUOP7ICOJO9OAomScvkDI=
Subject key identifier:   96:80:4C:84:92:14:D5:BF:84:1A:32:30:A6:8E:F3:56:A2:8E:EB:F0
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       49BBCE1799C0F812CBD9D91FE72B67456EC1BA89
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143848.roa
Signing time:             Fri 22 May 2026 02:47:33 +0000
ROA not before:           Fri 22 May 2026 02:42:33 +0000
ROA not after:            Fri 21 May 2027 02:47:33 +0000
asID:                     143848
IP address blocks:        240a:a4ae::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:bb:ce:17:99:c0:f8:12:cb:d9:d9:1f:e7:2b:67:45:6e:c1:ba:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:42:33 2026 GMT
            Not After : May 21 02:47:33 2027 GMT
        Subject: CN=96804C849214D5BF841A3230A68EF356A28EEBF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c2:4e:49:21:4b:01:5e:88:e3:17:00:b6:15:
                    1e:8f:20:19:ec:37:9e:f0:ab:e1:f6:9b:b9:04:6e:
                    c4:1c:fa:b7:98:17:92:ff:98:66:83:63:81:3d:18:
                    37:ff:f3:f6:32:51:b9:60:3c:2f:b2:da:95:c6:9a:
                    78:78:87:b4:bb:3b:3e:27:1f:9f:24:f3:e2:32:46:
                    9b:b3:f1:c3:9a:28:c8:ce:2f:b4:e1:3e:65:0e:75:
                    f3:9a:79:4d:f5:70:c8:45:ba:80:6f:cc:c5:e0:d0:
                    77:2b:23:e6:54:a9:86:e6:92:a0:11:b6:4a:65:3e:
                    47:d0:61:ac:c9:d2:d7:d2:03:58:3a:11:90:76:e2:
                    86:f5:1b:e4:89:cb:a6:64:44:a0:5f:10:48:24:10:
                    85:8e:fd:47:ec:6f:3e:82:e7:92:56:a1:8a:c0:3d:
                    ea:15:19:3a:32:ef:df:1f:37:37:df:8f:c9:da:42:
                    92:22:1d:74:fe:21:56:07:00:94:38:03:dd:cf:1a:
                    6e:a2:d9:32:ce:af:31:ab:2a:c6:cc:20:5d:5a:ae:
                    89:ef:eb:82:c2:92:4d:88:3d:05:fd:a4:58:12:b9:
                    53:64:a5:25:af:46:72:43:1b:94:a5:d5:7d:e3:93:
                    12:d2:83:57:a8:93:cd:a5:ef:c7:1c:98:87:6c:62:
                    76:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:80:4C:84:92:14:D5:BF:84:1A:32:30:A6:8E:F3:56:A2:8E:EB:F0
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143848.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a4ae::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:de:7a:3e:09:17:d7:a8:58:5f:41:02:e6:b9:57:61:dd:73:
         bf:67:21:67:f4:09:d0:9f:cc:a8:63:d0:fc:3b:3b:53:eb:3a:
         fc:a0:3a:3f:e8:d6:14:4d:78:66:b9:b0:a2:47:63:57:57:77:
         a3:3c:96:7f:a5:50:76:b2:78:b6:1b:e4:b6:48:0f:bc:b5:60:
         d3:d3:df:27:ee:82:60:59:8d:24:c0:3f:89:89:29:95:ed:5c:
         8d:3d:9f:f0:6f:da:d9:72:37:bb:7c:b3:c2:36:ae:1c:eb:43:
         ff:25:a3:ad:02:5b:11:44:d3:d8:de:aa:b8:4f:8a:3e:77:ab:
         be:93:49:9e:e6:a8:98:c7:01:a3:10:08:2e:aa:cc:5f:e1:80:
         6b:76:70:0f:9f:64:0d:77:0d:33:95:1e:b0:96:10:b4:5e:4e:
         40:8b:3c:7f:e1:a6:c6:60:1a:95:37:1c:c4:5a:67:34:49:9f:
         3f:9b:6d:ba:4a:6d:24:0b:e2:90:ff:1e:c0:a3:fa:48:cc:53:
         1a:f9:cc:74:2d:45:5e:9a:3f:2b:db:4d:51:d5:38:c6:27:a8:
         e2:90:6e:8c:89:a7:cd:77:51:99:a6:38:d0:6b:16:2e:81:80:
         63:e3:4e:71:69:37:61:d8:cc:5d:c7:89:8c:63:75:a5:13:25:
         fc:b3:56:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----