Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143881.roa
File:                     AS143881.roa (raw, json)
Hash identifier:          4hzHffXV1hv39B8P6gtH/upodnoAqKAVy6s0Ga7MGqE=
Subject key identifier:   EC:E4:12:7E:DC:34:14:FB:89:24:58:75:C3:63:B2:A5:5A:76:99:5F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6670CAD32F2B177526466AE23CF3C74A6CEA9B45
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143881.roa
Signing time:             Fri 22 May 2026 07:32:04 +0000
ROA not before:           Fri 22 May 2026 07:27:04 +0000
ROA not after:            Fri 21 May 2027 07:32:04 +0000
asID:                     143881
IP address blocks:        240a:a4cf::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:70:ca:d3:2f:2b:17:75:26:46:6a:e2:3c:f3:c7:4a:6c:ea:9b:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:04 2026 GMT
            Not After : May 21 07:32:04 2027 GMT
        Subject: CN=ECE4127EDC3414FB89245875C363B2A55A76995F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f2:5b:a2:9b:d1:ce:78:11:31:77:59:47:40:
                    2a:ca:f0:e1:f6:88:e3:21:00:a8:3e:88:e9:08:33:
                    79:76:1c:9a:e6:18:f3:78:4e:61:0c:02:c0:25:91:
                    c9:13:17:46:4c:35:df:2f:12:fc:b1:8e:cb:29:6a:
                    97:69:ed:76:d0:22:56:53:3e:13:4c:79:46:f2:51:
                    c6:38:bc:b4:56:ff:2d:74:21:c3:55:b6:c0:99:5a:
                    66:98:28:4a:38:56:fe:18:29:09:82:93:61:ae:a8:
                    12:4d:33:b6:ac:4f:ca:39:8c:41:ac:56:cd:11:82:
                    13:00:8c:c3:ed:82:09:f9:54:3e:27:95:c4:9e:e0:
                    d5:f7:30:71:d7:cc:4b:3d:bd:25:bc:4f:6f:bd:e0:
                    0c:38:7d:50:0e:6c:ba:e4:fa:9c:80:1e:29:4f:10:
                    91:fb:8a:27:f2:c4:38:8f:b2:ae:a5:61:f7:fb:90:
                    d5:3c:94:ec:00:c9:d8:8f:f1:f6:79:36:74:74:95:
                    52:ee:ce:49:56:e3:ea:69:c8:85:83:66:5d:c0:24:
                    63:49:b1:1a:9e:7e:d2:1f:a5:00:d6:3b:4f:5e:b0:
                    18:eb:82:92:70:dd:cc:b6:97:eb:16:a8:55:1e:3b:
                    4b:5a:76:c6:67:81:db:78:97:78:fe:bf:e1:e7:a0:
                    dc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E4:12:7E:DC:34:14:FB:89:24:58:75:C3:63:B2:A5:5A:76:99:5F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143881.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a4cf::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:d2:95:0d:ba:b1:e6:85:2a:04:dd:cd:8a:74:04:56:c5:36:
         4d:89:51:72:e5:02:44:0c:61:70:d2:e4:14:b4:e7:cf:60:a9:
         d8:88:fd:f8:a0:17:3d:05:93:d3:90:e5:8f:3e:9d:d0:d6:ca:
         b7:3e:59:d2:89:a5:fb:dc:75:b0:26:a4:a6:a0:bb:a3:d6:84:
         1d:1b:84:67:97:da:60:a2:a3:d8:79:32:59:cb:cb:e9:d3:a7:
         c1:0c:81:74:69:a2:39:da:0e:8e:57:b6:30:62:be:4b:53:c5:
         d9:a4:cb:ab:83:3a:23:33:6c:e3:c6:32:7e:71:e3:21:e5:b6:
         21:10:02:cd:c8:ff:b4:27:20:01:b0:60:e7:6a:01:ed:00:88:
         13:64:77:5e:a2:61:6b:bf:78:d1:34:c4:a9:ce:1e:3b:dc:61:
         e2:ee:dd:0c:73:e7:80:18:64:1f:98:d3:9d:87:e5:b1:9a:eb:
         7a:bf:64:9b:1c:4f:e6:7f:62:e7:a6:2d:3c:2c:9b:8c:cd:65:
         6a:3a:6d:3a:b8:df:ac:91:35:68:dc:04:8a:af:98:58:bc:79:
         12:f8:b5:c0:9c:9f:a2:55:c5:80:52:d7:e7:96:a4:25:32:5d:
         7a:f7:69:99:83:6c:53:58:3b:74:0c:e7:4d:b4:e2:58:c2:f2:
         10:1c:24:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----