Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143869.roa
File:                     AS143869.roa (raw, json)
Hash identifier:          mRaZ+R9jTfOobNn0X96SHD4MpEpf+wUUSJWzpAildCI=
Subject key identifier:   46:A7:B1:22:EA:CE:4A:92:EA:42:33:2D:67:29:5C:F1:05:E7:92:B3
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4A44A4D7DBB9D2F3FE4153E72E9C3265546C7B6A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143869.roa
Signing time:             Fri 22 May 2026 07:24:30 +0000
ROA not before:           Fri 22 May 2026 07:19:30 +0000
ROA not after:            Fri 21 May 2027 07:24:30 +0000
asID:                     143869
IP address blocks:        240a:a4c3::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:44:a4:d7:db:b9:d2:f3:fe:41:53:e7:2e:9c:32:65:54:6c:7b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:19:30 2026 GMT
            Not After : May 21 07:24:30 2027 GMT
        Subject: CN=46A7B122EACE4A92EA42332D67295CF105E792B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ad:63:c1:ea:55:f5:3d:e9:a5:3f:f1:b8:cc:
                    ed:bb:6f:07:03:09:a6:72:0e:46:4a:1f:8a:68:3a:
                    ed:1b:9c:ce:a1:6f:69:9d:0a:52:f7:bf:89:19:a9:
                    dd:82:fe:ef:be:6e:1f:64:ad:83:53:2d:7a:4a:21:
                    5b:57:45:ad:f3:4c:b3:36:e0:b3:49:d6:4d:35:a6:
                    a9:57:29:71:f7:67:d0:2d:2c:7d:66:2b:90:c1:32:
                    89:67:24:e2:06:54:0e:d4:2f:38:1b:3f:29:91:34:
                    e3:0f:2e:51:4a:4e:28:d5:0d:0c:46:94:80:aa:d0:
                    00:94:9a:50:e6:96:80:5c:67:2c:fb:e3:cd:9c:21:
                    8e:ae:8f:fd:99:48:16:98:58:c5:25:53:a2:34:73:
                    31:0d:a6:7b:2f:c5:96:27:7f:3b:80:07:ea:80:4a:
                    2c:f4:99:24:44:cb:cb:d9:21:ea:e9:ac:bf:c8:ff:
                    8f:79:7e:f0:39:d5:b0:c5:37:78:93:a0:cb:bd:97:
                    66:70:f8:22:8f:47:4b:d5:c9:7c:d3:a6:21:3a:26:
                    08:6e:18:24:b0:43:5a:0d:2e:a8:d8:08:3b:d3:98:
                    06:7e:ff:31:28:5d:12:07:72:6d:40:a3:c7:2e:de:
                    9e:f6:40:8f:3f:fe:c5:81:d1:43:cf:81:fe:ec:29:
                    14:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A7:B1:22:EA:CE:4A:92:EA:42:33:2D:67:29:5C:F1:05:E7:92:B3
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143869.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a4c3::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:b8:44:f5:87:5d:cc:bd:92:84:ab:6c:fb:c0:fe:33:b2:fc:
         7d:76:c5:22:aa:97:e0:6f:aa:46:a9:d2:5d:bb:1f:03:ac:b8:
         ac:66:a9:bb:ad:12:37:8c:5f:10:52:df:b7:92:47:3d:d6:e9:
         18:23:f8:28:47:1b:08:b6:5b:ed:1d:69:ab:5a:87:6e:50:0d:
         c9:0b:54:92:20:70:66:2c:71:d4:19:83:8b:fd:99:b2:4b:9e:
         7d:a8:9a:9f:ef:68:04:f4:c1:45:c5:5b:8d:23:39:29:4e:86:
         f0:61:65:e3:d7:4c:f1:91:b0:7b:0b:a7:91:2a:dd:ab:f4:3d:
         a3:cd:d0:e7:34:dd:16:de:6f:31:22:ea:fa:fd:f2:b0:08:26:
         43:cd:cc:11:c0:d9:64:c7:c5:c6:63:dc:4f:cc:67:a1:40:be:
         62:03:45:48:44:44:09:79:16:5b:68:95:97:48:eb:f0:79:8f:
         dc:21:4a:8d:e3:35:fa:61:09:52:2e:53:2f:b5:b7:77:b0:69:
         be:a6:71:8d:3d:ab:80:91:7f:0e:92:a6:52:1a:25:dd:3e:a1:
         3f:b8:5c:78:d4:e0:9b:61:da:44:b3:30:a6:73:ce:86:5d:56:
         6c:59:77:45:ab:4d:99:4d:30:6b:ea:6b:9f:d2:d8:eb:f9:a9:
         dc:1f:14:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----