Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143871.roa
File:                     AS143871.roa (raw, json)
Hash identifier:          TjPd/aQvHep2ExoWhJEnYUCg87AMph/03/aLUIj8rQ0=
Subject key identifier:   FC:A4:F5:3D:31:FF:42:54:5E:F0:2B:88:BA:5B:CB:90:85:8B:11:A8
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7FF156AE48F819301CC12E64B613804CDB78D9D0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143871.roa
Signing time:             Mon 25 May 2026 02:22:34 +0000
ROA not before:           Mon 25 May 2026 02:17:34 +0000
ROA not after:            Mon 24 May 2027 02:22:34 +0000
asID:                     143871
IP address blocks:        240a:a4c5::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f1:56:ae:48:f8:19:30:1c:c1:2e:64:b6:13:80:4c:db:78:d9:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 02:17:34 2026 GMT
            Not After : May 24 02:22:34 2027 GMT
        Subject: CN=FCA4F53D31FF42545EF02B88BA5BCB90858B11A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:05:7c:16:39:ea:3d:14:24:81:10:3d:7b:1f:
                    84:90:19:04:d5:0d:c0:85:33:67:7b:a7:50:84:2b:
                    13:ee:68:6f:46:8d:ac:b9:c2:4b:30:ea:cf:70:a4:
                    39:35:7f:82:a0:41:7f:0f:91:00:0e:54:4e:55:32:
                    49:eb:bd:a9:88:4d:57:5f:3f:7e:83:b9:37:0f:65:
                    60:f4:1e:a5:8e:09:00:93:0e:15:61:03:f3:e8:54:
                    64:6b:4b:88:c4:9e:ef:b9:c7:be:37:97:01:61:b8:
                    4c:a9:b5:77:41:b0:61:5b:9e:70:2c:52:67:fd:0a:
                    6f:68:31:96:67:27:43:aa:3d:96:88:98:91:06:ed:
                    be:47:f6:1d:87:e9:e2:76:60:c8:9e:eb:26:e9:5c:
                    14:77:42:c7:bf:0e:fb:ba:32:c7:a5:8d:82:b9:ec:
                    d8:df:41:00:87:65:75:ff:b6:2d:3e:2f:4f:34:e2:
                    e0:90:f9:67:26:fa:f8:68:f7:c5:69:d7:87:df:64:
                    87:87:74:47:61:99:f8:ac:50:c3:76:7c:ec:e4:d8:
                    70:c8:99:03:34:91:6d:93:3f:cf:04:c4:23:dc:b8:
                    13:43:2d:d6:59:e6:a3:1c:0c:15:23:b6:c4:31:00:
                    47:c9:7d:c1:25:02:f5:d5:d0:1c:d4:81:ab:cf:e6:
                    f0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A4:F5:3D:31:FF:42:54:5E:F0:2B:88:BA:5B:CB:90:85:8B:11:A8
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143871.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a4c5::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:ae:fe:72:18:3b:7c:17:de:5f:f4:cc:bf:c4:d8:12:99:d5:
         29:e7:7a:5d:85:d7:36:9d:e3:09:e1:62:81:2b:c2:6f:7f:0e:
         4e:0b:cf:1c:e8:c0:82:23:e9:a5:be:ee:83:34:14:e5:11:3c:
         37:44:18:ce:d8:1a:d9:d1:16:52:ad:5c:6e:43:d9:52:3d:85:
         b8:63:64:c8:dc:f2:27:d5:3d:dd:20:f9:82:6a:1c:32:ad:0b:
         4a:37:66:3c:ef:fd:2c:67:7d:d1:ea:02:d5:04:cc:49:64:da:
         89:b9:9d:2b:c4:12:6a:12:df:fd:f9:60:f3:ab:94:4f:a6:98:
         e9:23:29:bd:24:af:1a:51:eb:83:1c:fd:6e:3e:60:ef:ac:d9:
         40:82:41:89:7d:b8:76:50:9b:66:f4:0b:0e:fe:cd:40:26:d7:
         0b:f9:d8:97:94:2a:fc:74:14:cf:02:92:c0:ab:47:07:8c:61:
         4d:c8:29:4c:7d:23:fd:2d:f1:c4:c9:04:6c:68:37:9c:d1:e6:
         e2:b8:b8:be:3a:13:86:e3:df:34:d1:54:e3:53:37:d5:f8:97:
         e8:7b:e1:2d:8e:3e:98:80:7e:f7:8a:73:70:1d:67:08:7d:c5:
         a7:0d:fa:bf:f6:38:b9:57:79:01:1c:ed:7e:df:1b:9a:02:27:
         86:b3:56:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----