Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143850.roa
File:                     AS143850.roa (raw, json)
Hash identifier:          C8xNggCyLnMv3nocl/urQmHswEhsTXjr7PbXqMzvZ5M=
Subject key identifier:   DD:4A:71:9B:89:A5:42:EE:E6:D9:F5:6F:23:F3:71:8E:D5:37:7D:CE
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       60614E6F0D6D372C48AA75D698B70A6BA42604D1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143850.roa
Signing time:             Mon 25 May 2026 06:28:33 +0000
ROA not before:           Mon 25 May 2026 06:23:33 +0000
ROA not after:            Mon 24 May 2027 06:28:33 +0000
asID:                     143850
IP address blocks:        240a:a4b0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:61:4e:6f:0d:6d:37:2c:48:aa:75:d6:98:b7:0a:6b:a4:26:04:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:33 2026 GMT
            Not After : May 24 06:28:33 2027 GMT
        Subject: CN=DD4A719B89A542EEE6D9F56F23F3718ED5377DCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f4:de:89:19:5d:5f:c3:3d:fe:66:b0:ff:43:
                    98:ee:6b:57:15:f0:17:5d:1f:1f:59:6f:99:cf:0b:
                    2e:ec:15:24:b9:84:ae:8b:70:ad:f2:05:43:f0:3c:
                    b1:b2:a6:0d:5b:a7:c8:33:c2:1c:37:92:c2:d8:ce:
                    f2:12:8d:00:74:85:99:de:90:ca:00:ca:1b:aa:ef:
                    88:81:9b:c2:5d:a6:d5:e5:3f:a2:33:d2:2f:66:46:
                    0b:81:37:8f:3f:1a:12:f3:31:00:e3:08:b2:75:6d:
                    ca:c7:66:eb:9b:ea:24:4a:7a:07:7a:d9:ea:66:4e:
                    1c:fa:dd:ff:64:ba:e4:8a:45:f0:dc:f3:35:28:b2:
                    75:87:e3:63:e3:1e:c8:70:55:70:33:5e:2c:6d:06:
                    0c:61:d6:25:31:07:78:cc:cf:d0:77:7e:ee:62:25:
                    42:45:5d:3f:71:48:4b:b3:f9:18:a9:b8:62:a8:75:
                    c6:61:7d:d6:d4:e8:77:a8:f8:c5:81:ad:19:7d:14:
                    84:fa:be:6d:75:22:86:28:cf:d4:69:93:69:ab:91:
                    c9:29:81:e1:69:9e:92:d3:d7:a2:3d:71:0c:63:66:
                    66:11:c3:20:2c:b3:be:85:dd:80:3f:5e:c9:9e:4b:
                    b9:15:cb:9d:3f:01:64:b8:17:a4:56:13:5b:41:3e:
                    ef:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4A:71:9B:89:A5:42:EE:E6:D9:F5:6F:23:F3:71:8E:D5:37:7D:CE
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143850.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a4b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:49:23:40:62:17:e4:49:64:6a:b0:90:23:8a:8a:8a:5a:8a:
         26:93:6d:9c:b5:2d:0f:b6:b7:ef:59:50:bb:e4:14:f3:54:7b:
         09:10:69:2a:46:62:72:76:65:8d:a1:70:1e:75:b0:45:ab:b5:
         b5:14:85:19:19:c9:dc:01:ba:58:c8:b2:ea:8e:86:28:76:bf:
         d8:10:3f:97:aa:1d:d5:a4:0b:a8:c7:cc:16:57:47:6a:b7:bd:
         a2:2f:ff:13:d5:92:02:72:30:e5:8c:53:0d:20:68:46:48:c9:
         05:5f:d3:c8:43:1e:0b:27:5b:4b:49:48:9e:90:63:0a:98:29:
         a2:d4:c0:ea:19:a4:ad:59:ae:19:87:ab:df:d9:40:35:94:dd:
         55:06:be:a7:d3:0e:9a:ee:b5:92:0b:8a:00:05:04:33:bf:11:
         49:8f:f6:15:f1:a5:37:58:b0:54:52:fb:07:ea:53:a6:85:fe:
         83:70:43:f2:f5:76:b0:f0:ff:60:dc:54:ba:b5:c8:14:3b:82:
         54:63:2c:c6:6f:8c:ed:09:21:45:83:0b:d0:4a:d1:35:95:f4:
         f9:4e:42:1b:11:8e:65:1b:0f:61:19:40:b8:c7:db:24:d1:96:
         a9:88:9d:cc:46:23:c4:21:b0:48:11:b8:58:45:ab:64:90:8f:
         9d:5f:d4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----