Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143916.roa
File:                     AS143916.roa (raw, json)
Hash identifier:          BfWEQolVD6Qu3K1+pOFMu+ntu42EQoOCnoQAE2XkuyE=
Subject key identifier:   72:DE:D3:F3:1D:34:42:3C:A5:52:D5:D7:66:AE:2C:33:E7:81:A2:FC
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       568640957F6F5654D0D66CBF4BF59B497E11476F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143916.roa
Signing time:             Mon 25 May 2026 01:20:07 +0000
ROA not before:           Mon 25 May 2026 01:15:07 +0000
ROA not after:            Mon 24 May 2027 01:20:07 +0000
asID:                     143916
IP address blocks:        240a:a4f2::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:86:40:95:7f:6f:56:54:d0:d6:6c:bf:4b:f5:9b:49:7e:11:47:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:15:07 2026 GMT
            Not After : May 24 01:20:07 2027 GMT
        Subject: CN=72DED3F31D34423CA552D5D766AE2C33E781A2FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4b:e4:92:46:43:95:50:67:a5:76:87:a5:ef:
                    f3:4c:26:c2:d5:6e:5f:d3:1c:77:76:c1:b8:16:10:
                    09:3d:ba:eb:2f:9e:04:4f:9f:9b:69:f7:6f:26:95:
                    4c:7e:df:8b:19:a4:4a:e9:a8:f5:6b:45:9c:97:93:
                    63:3f:8a:95:44:ba:7b:55:e9:89:34:9f:92:a2:40:
                    27:30:a5:15:89:63:36:3a:a3:55:06:ac:40:99:96:
                    56:09:a1:22:7c:6f:48:fc:a1:3b:00:0f:c7:58:29:
                    f7:a9:f1:ff:ee:3d:f6:4b:44:33:52:e6:90:7c:ed:
                    33:03:9d:5c:12:fc:31:db:6d:e3:2c:a4:ce:a7:ea:
                    38:3b:9e:f1:21:e8:61:8e:cd:a9:23:4b:c8:70:5d:
                    45:f7:46:fa:f2:32:46:d2:91:ac:a9:b8:ca:6c:2d:
                    11:52:df:b4:50:cd:3e:7c:3a:cc:c7:5d:92:77:7e:
                    2a:f4:59:21:28:97:fd:d6:e9:50:27:27:99:ca:bf:
                    05:3f:58:f6:46:09:19:bd:ff:86:d4:3b:2c:46:13:
                    89:4a:ab:ce:0e:fd:81:70:8f:37:c4:d9:4d:ad:fb:
                    ee:18:4c:ca:d8:d1:f5:87:27:96:8f:18:23:66:9a:
                    fc:66:1b:cc:3b:db:78:1a:bf:f0:5d:aa:16:b4:f3:
                    a6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:DE:D3:F3:1D:34:42:3C:A5:52:D5:D7:66:AE:2C:33:E7:81:A2:FC
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143916.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a4f2::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:19:a4:7b:f1:4c:74:b9:60:fa:7b:e8:68:a9:b9:9c:f2:03:
         d2:6a:c9:7f:41:82:76:42:e0:1e:4a:d5:8a:8d:f2:67:dc:55:
         ec:a4:0f:af:f7:0f:53:63:f1:76:04:8f:a3:48:56:44:c8:7c:
         94:65:0f:fd:42:98:ee:e6:e0:a8:aa:d8:69:10:00:cf:f9:5c:
         0e:56:27:df:a7:95:1a:24:04:33:50:37:94:f0:04:75:d5:62:
         d6:6e:9c:95:92:a1:72:72:a6:c2:72:7d:df:67:29:09:aa:4c:
         28:fb:d2:2d:3c:07:83:7f:01:7e:1b:2a:3b:40:f7:27:a4:3c:
         fb:0a:32:6c:81:40:8d:5e:45:17:0f:32:a5:ea:bc:5a:36:16:
         ae:e8:dd:7e:7b:fa:14:85:08:5d:e2:b5:49:76:63:20:b7:00:
         17:c3:32:b2:62:e2:73:09:b2:ca:35:73:03:bf:ab:e5:05:35:
         83:71:4f:55:b7:06:08:b2:4a:bc:f9:12:13:bd:a3:c2:b4:8e:
         8e:ce:ae:c9:cc:b4:85:ef:ff:1c:d6:1f:05:80:04:b3:76:0f:
         a0:42:dd:9e:18:81:da:90:a5:66:70:07:14:5c:11:a1:a5:b9:
         a9:88:96:7e:74:d0:16:61:7c:82:96:a7:c8:81:01:1d:45:40:
         67:25:76:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----