Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143874.roa
File:                     AS143874.roa (raw, json)
Hash identifier:          pgOhr5joDJqz8fngGmg8MPoa7aj1aA25zzDfkNf9XWY=
Subject key identifier:   71:46:CE:FB:DB:CF:ED:50:8E:BB:E2:E4:A3:0A:32:AF:7D:60:08:B3
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3F2E62BA44B95752BA9BEEDCE9714C83A547BC5E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143874.roa
Signing time:             Fri 22 May 2026 06:58:51 +0000
ROA not before:           Fri 22 May 2026 06:53:51 +0000
ROA not after:            Fri 21 May 2027 06:58:51 +0000
asID:                     143874
IP address blocks:        240a:a4c8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:2e:62:ba:44:b9:57:52:ba:9b:ee:dc:e9:71:4c:83:a5:47:bc:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:51 2026 GMT
            Not After : May 21 06:58:51 2027 GMT
        Subject: CN=7146CEFBDBCFED508EBBE2E4A30A32AF7D6008B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8d:20:e5:76:ef:b6:2d:74:5a:23:96:24:75:
                    d8:c5:b8:3b:b3:ba:c8:a0:a5:1c:c0:37:cf:6f:98:
                    aa:f5:0d:8b:ca:bc:0e:69:47:a7:2f:25:da:03:40:
                    cd:27:6b:36:ed:a2:ce:d2:b1:9d:70:d4:da:48:b5:
                    81:41:e9:5a:30:c7:0e:b9:74:01:bf:b8:78:b2:a5:
                    45:c5:d0:5d:bd:35:8d:18:36:2f:ee:4b:b6:99:af:
                    34:d5:ca:d3:55:fe:ce:aa:d5:7c:1c:bc:e7:a8:43:
                    6f:1f:de:cf:28:9a:1f:22:44:62:6f:7e:03:6d:2b:
                    b9:ff:a1:7f:84:bb:c6:9c:19:7e:d9:5f:4f:8d:85:
                    d6:c9:42:f3:e9:bc:05:e1:3e:4b:dc:af:d6:a1:e3:
                    a5:2b:b7:f3:51:7f:08:68:2a:a2:33:76:7c:85:80:
                    bc:bc:ec:ce:fe:5f:da:62:55:2e:20:40:c6:9e:e5:
                    f5:70:fe:3f:b8:1c:88:13:91:c3:17:52:2e:b1:08:
                    85:02:3c:8f:23:8e:24:21:89:d9:11:e6:04:ff:af:
                    ff:11:f8:06:93:b4:1c:96:a5:86:65:b8:a0:86:33:
                    44:7f:c3:d1:c8:2c:7a:17:0a:2b:2d:a3:af:d6:73:
                    b0:58:a6:ef:51:77:5c:75:c0:06:e9:fe:f8:94:50:
                    d9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:46:CE:FB:DB:CF:ED:50:8E:BB:E2:E4:A3:0A:32:AF:7D:60:08:B3
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143874.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a4c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:6d:12:b9:e0:76:3f:9f:df:72:e7:8f:65:7c:2c:76:51:78:
         f6:e0:0b:88:f0:23:76:0f:f9:b1:00:88:40:d7:72:f3:89:c9:
         45:43:eb:28:f5:80:37:fd:f8:00:e6:b9:96:a1:66:83:ec:cf:
         d5:96:e4:24:fc:98:b2:9f:e7:ce:73:ef:fb:9e:ca:fe:c4:eb:
         11:7e:66:b6:32:e0:57:54:e6:1e:14:d5:72:66:94:67:ce:fa:
         41:35:e4:a1:b3:fd:64:92:d6:a8:82:d8:a5:a5:0c:93:a5:67:
         d6:76:76:01:b0:86:57:ef:69:63:1e:2b:da:9a:06:b4:f8:5e:
         a7:47:1d:5f:b8:fe:72:33:84:c2:40:0c:ed:61:82:b6:ba:84:
         57:a1:07:52:43:93:cc:01:b1:e0:b4:8f:21:4a:fb:1b:9e:27:
         30:71:33:54:67:1e:97:c1:1e:b2:ff:37:8f:e3:27:e9:67:79:
         e6:29:19:fe:ea:78:e5:f6:ba:59:49:02:f1:d2:a7:53:28:17:
         15:df:6c:8e:77:ed:7e:d1:aa:66:b6:27:2d:31:83:eb:34:0b:
         67:ad:a7:31:94:9e:2a:20:66:da:e6:f7:58:6e:85:5e:6c:e9:
         16:aa:e8:8d:0f:92:b1:9c:2f:2f:65:4c:ae:ec:e1:30:1d:63:
         4c:71:93:cf
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUPy5iukS5V1K6m+7c6XFMg6VHvF4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjUzNTFaFw0yNzA1MjEwNjU4NTFaMDMxMTAvBgNV
BAMTKDcxNDZDRUZCREJDRkVENTA4RUJCRTJFNEEzMEEzMkFGN0Q2MDA4QjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/jSDldu+2LXRaI5YkddjFuDuz
usigpRzAN89vmKr1DYvKvA5pR6cvJdoDQM0nazbtos7SsZ1w1NpItYFB6Vowxw65
dAG/uHiypUXF0F29NY0YNi/uS7aZrzTVytNV/s6q1XwcvOeoQ28f3s8omh8iRGJv
fgNtK7n/oX+Eu8acGX7ZX0+NhdbJQvPpvAXhPkvcr9ah46Urt/NRfwhoKqIzdnyF
gLy87M7+X9piVS4gQMae5fVw/j+4HIgTkcMXUi6xCIUCPI8jjiQhidkR5gT/r/8R
+AaTtByWpYZluKCGM0R/w9HILHoXCisto6/Wc7BYpu9Rd1x1wAbp/viUUNljAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUcUbO+9vP7VCOu+Lkowoyr31gCLMwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzODc0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqkyDANBgkqhkiG9w0BAQsFAAOCAQEAXG0S
ueB2P5/fcuePZXwsdlF49uALiPAjdg/5sQCIQNdy84nJRUPrKPWAN/34AOa5lqFm
g+zP1ZbkJPyYsp/nznPv+57K/sTrEX5mtjLgV1TmHhTVcmaUZ876QTXkobP9ZJLW
qILYpaUMk6Vn1nZ2AbCGV+9pYx4r2poGtPhep0cdX7j+cjOEwkAM7WGCtrqEV6EH
UkOTzAGx4LSPIUr7G54nMHEzVGcel8Eesv83j+Mn6Wd55ikZ/up45fa6WUkC8dKn
UygXFd9sjnftftGqZrYnLTGD6zQLZ62nMZSeKiBm2ub3WG6FXmzpFqrojQ+SsZwv
L2VMruzhMB1jTHGTzw==
-----END CERTIFICATE-----