Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143895.roa
File:                     AS143895.roa (raw, json)
Hash identifier:          /AWq8DwRDoIPQPLSYo0LCqVzUZ5w7ZOLdW+mDzoQqWQ=
Subject key identifier:   39:65:0F:AC:48:A9:EF:40:5A:8C:7A:C4:66:55:CA:68:AC:D1:78:51
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6FAECF9796429BF2DF0366BE44692D5C91B8A187
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143895.roa
Signing time:             Fri 22 May 2026 02:47:36 +0000
ROA not before:           Fri 22 May 2026 02:42:36 +0000
ROA not after:            Fri 21 May 2027 02:47:36 +0000
asID:                     143895
IP address blocks:        240a:a4dd::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ae:cf:97:96:42:9b:f2:df:03:66:be:44:69:2d:5c:91:b8:a1:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:42:36 2026 GMT
            Not After : May 21 02:47:36 2027 GMT
        Subject: CN=39650FAC48A9EF405A8C7AC46655CA68ACD17851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:93:d5:49:26:6f:ad:82:b8:11:ca:5b:7d:57:
                    8b:07:e1:d0:7e:ca:b4:02:5c:83:9e:00:74:57:d3:
                    eb:55:3d:78:57:dc:68:7d:5c:cc:d8:41:f0:aa:18:
                    71:92:30:28:9f:06:50:f7:0a:63:a6:c5:71:91:f5:
                    fa:d6:1b:57:fd:97:9b:dc:c1:01:7c:f7:88:25:bc:
                    d1:d3:29:00:6d:1f:25:c3:b7:18:5d:6b:63:94:d9:
                    1b:c4:02:d0:db:8c:71:c9:72:d3:c3:7b:5a:82:57:
                    00:73:90:02:4a:9c:f4:dc:55:bc:14:0d:93:e4:64:
                    59:ca:f9:33:62:cd:c5:05:fb:22:cf:14:1d:56:69:
                    b0:14:ae:74:d1:fe:28:e3:34:06:c1:6b:98:77:74:
                    f8:b6:df:d8:ac:2b:89:53:1c:38:27:ae:07:23:56:
                    2f:b7:18:ab:67:43:25:24:9f:f4:9d:53:53:7e:f3:
                    10:07:af:f4:18:0c:0c:a6:8b:11:32:c9:6e:52:59:
                    f5:8d:00:47:1d:b1:3b:0c:ac:c6:c9:ea:00:14:92:
                    17:ef:7e:de:49:d8:96:91:0f:52:32:09:8a:3d:68:
                    97:cf:9e:de:05:90:23:15:28:75:ef:f2:fe:ae:9d:
                    89:a5:19:7a:e9:29:11:d8:81:f9:37:be:5b:7f:79:
                    3d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:65:0F:AC:48:A9:EF:40:5A:8C:7A:C4:66:55:CA:68:AC:D1:78:51
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143895.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a4dd::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:64:3e:38:b8:b6:8b:83:8c:ba:97:b6:00:00:e6:56:27:a8:
         0c:51:6a:fb:81:fe:c0:d2:c9:88:7d:4a:d4:bb:04:4d:44:d3:
         a6:13:86:3d:6e:58:b6:5d:80:97:9b:8b:ec:9b:63:d0:46:c6:
         d6:d4:cd:21:42:5c:2d:d1:b9:40:40:27:ad:55:4a:4c:2a:be:
         dd:92:9d:c3:47:56:b6:ef:f0:5b:20:48:32:95:a8:94:18:e2:
         4a:78:ec:dc:8e:47:87:d9:2f:78:3e:db:95:53:71:9a:6f:74:
         e4:08:2b:19:fa:fe:a4:a5:17:db:bc:39:12:10:df:28:f7:4c:
         b0:b6:d4:ca:c9:db:5b:b9:38:9f:f8:91:ac:ef:82:1f:7f:30:
         f9:fb:df:63:72:a2:5e:b0:ab:ec:51:34:b1:ce:b9:26:88:6e:
         aa:85:43:a5:61:25:f5:6f:38:f7:a2:8c:72:d5:8c:61:d1:58:
         64:0e:28:7f:d3:fc:0a:5c:3b:cf:c8:ca:6a:6b:d8:1f:00:c9:
         ae:75:76:c9:62:b3:52:25:e3:00:14:a5:d0:a4:2f:d5:af:3b:
         cd:1f:b6:a0:ea:89:21:76:0b:49:a6:be:52:3e:61:b4:cf:df:
         18:63:34:b5:03:55:13:b3:ad:c4:a6:10:eb:75:eb:4f:9e:4e:
         8d:49:25:c6
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUb67Pl5ZCm/LfA2a+RGktXJG4oYcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMjQyMzZaFw0yNzA1MjEwMjQ3MzZaMDMxMTAvBgNV
BAMTKDM5NjUwRkFDNDhBOUVGNDA1QThDN0FDNDY2NTVDQTY4QUNEMTc4NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCck9VJJm+tgrgRylt9V4sH4dB+
yrQCXIOeAHRX0+tVPXhX3Gh9XMzYQfCqGHGSMCifBlD3CmOmxXGR9frWG1f9l5vc
wQF894glvNHTKQBtHyXDtxhda2OU2RvEAtDbjHHJctPDe1qCVwBzkAJKnPTcVbwU
DZPkZFnK+TNizcUF+yLPFB1WabAUrnTR/ijjNAbBa5h3dPi239isK4lTHDgnrgcj
Vi+3GKtnQyUkn/SdU1N+8xAHr/QYDAymixEyyW5SWfWNAEcdsTsMrMbJ6gAUkhfv
ft5J2JaRD1IyCYo9aJfPnt4FkCMVKHXv8v6unYmlGXrpKRHYgfk3vlt/eT0LAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUOWUPrEip70BajHrEZlXKaKzReFEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzODk1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqk3TANBgkqhkiG9w0BAQsFAAOCAQEAU2Q+
OLi2i4OMupe2AADmVieoDFFq+4H+wNLJiH1K1LsETUTTphOGPW5Ytl2Al5uL7Jtj
0EbG1tTNIUJcLdG5QEAnrVVKTCq+3ZKdw0dWtu/wWyBIMpWolBjiSnjs3I5Hh9kv
eD7blVNxmm905AgrGfr+pKUX27w5EhDfKPdMsLbUysnbW7k4n/iRrO+CH38w+fvf
Y3KiXrCr7FE0sc65JohuqoVDpWEl9W8496KMctWMYdFYZA4of9P8Clw7z8jKamvY
HwDJrnV2yWKzUiXjABSl0KQv1a87zR+2oOqJIXYLSaa+Uj5htM/fGGM0tQNVE7Ot
xKYQ63XrT55OjUklxg==
-----END CERTIFICATE-----