Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143950.roa
File:                     AS143950.roa (raw, json)
Hash identifier:          ECdruUc9Qlh/B/+SCMSTJPyjgsTHp1bpKiyKCzQ700w=
Subject key identifier:   1B:A1:FA:F8:C5:06:8C:0E:0F:AB:67:C5:9B:64:AC:0B:84:7A:33:9F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0DA671B0946F16C310ED9E71E6779CF59C92BE87
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143950.roa
Signing time:             Mon 25 May 2026 03:19:47 +0000
ROA not before:           Mon 25 May 2026 03:14:47 +0000
ROA not after:            Mon 24 May 2027 03:19:47 +0000
asID:                     143950
IP address blocks:        240a:a514::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a6:71:b0:94:6f:16:c3:10:ed:9e:71:e6:77:9c:f5:9c:92:be:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:47 2026 GMT
            Not After : May 24 03:19:47 2027 GMT
        Subject: CN=1BA1FAF8C5068C0E0FAB67C59B64AC0B847A339F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e1:e6:a9:40:c9:a6:cb:d2:0b:42:4a:64:d3:
                    44:89:f7:62:f3:e3:0b:16:d8:e2:99:f4:a9:5a:57:
                    e3:e3:fc:10:2c:5a:2f:b6:e7:8f:ef:ca:09:43:a4:
                    dc:1d:59:5a:37:40:df:4f:af:8c:6b:e9:ca:98:58:
                    94:a9:d1:98:03:3b:a9:c4:8f:2b:8e:51:96:e0:c9:
                    15:01:5e:ae:85:e8:c6:27:98:a7:5a:76:c5:d5:c3:
                    01:f1:cb:a6:44:9f:a2:05:0f:eb:ae:a7:02:6c:a6:
                    44:60:6c:d7:01:c7:15:f4:a9:71:50:01:7b:fe:48:
                    46:0a:cb:16:c3:4d:bd:5b:a3:83:75:60:2e:82:56:
                    99:d8:31:4e:6e:3d:a1:71:8c:25:fb:c2:24:66:f4:
                    70:41:eb:cb:01:0e:a9:33:b9:a7:c3:3a:29:fd:27:
                    81:1c:b3:72:05:6f:a0:f1:2c:c4:12:20:98:ca:b4:
                    eb:ef:51:1f:36:3f:26:da:b2:c9:18:27:a1:a4:99:
                    ef:57:0a:a2:3f:1f:61:ee:74:3e:d6:90:0b:58:4e:
                    d2:45:66:84:ae:31:61:29:b3:21:8e:3e:05:59:00:
                    3c:66:67:21:59:d1:c2:4e:01:9c:cf:22:f7:5c:5d:
                    29:68:3f:7d:60:21:e0:c2:fd:a0:b8:4d:51:4b:3f:
                    a8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A1:FA:F8:C5:06:8C:0E:0F:AB:67:C5:9B:64:AC:0B:84:7A:33:9F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143950.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a514::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:62:2c:8e:ce:2a:a4:b0:22:6d:d6:c8:04:14:36:84:b2:6c:
         6e:4d:7f:76:b8:57:08:54:5e:10:b9:ca:b3:f6:63:53:29:c0:
         03:f1:8f:ed:ee:f7:20:a9:11:d9:c4:69:b6:d9:b0:95:c4:ee:
         e2:75:16:80:99:2c:d8:05:0d:b8:e1:8b:59:08:ba:a6:97:69:
         7c:7b:8a:73:c0:d0:04:0f:88:71:69:56:13:25:0c:de:7f:68:
         3f:f6:8b:ea:55:b6:88:e9:f1:8e:a7:01:75:ce:37:77:ae:65:
         9f:d5:d6:de:17:4a:c6:4b:55:d8:6b:7f:0c:ea:b0:f2:d3:e2:
         e9:c6:ce:81:af:4d:74:c6:8d:ed:3c:f6:ce:e6:5a:af:95:25:
         74:b4:83:4d:65:45:26:54:6b:4f:86:c1:00:51:ae:c7:92:e8:
         5f:d6:4e:ff:67:5f:85:87:2e:6f:1c:8b:8d:ef:7b:b8:a4:9f:
         d8:a2:b4:f2:4d:97:27:7d:6a:6b:be:b3:7d:00:6e:34:97:e8:
         55:3d:b0:86:66:ad:5e:1a:bf:d7:85:26:a6:ae:92:da:68:38:
         d8:67:9d:95:19:3f:dd:54:11:59:6f:8a:aa:64:9e:89:0c:a1:
         50:b4:f8:9e:48:80:5a:05:a4:7d:a3:53:6b:fc:0e:a7:f0:ec:
         0a:10:59:7f
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUDaZxsJRvFsMQ7Z5x5nec9ZySvocwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMzE0NDdaFw0yNzA1MjQwMzE5NDdaMDMxMTAvBgNV
BAMTKDFCQTFGQUY4QzUwNjhDMEUwRkFCNjdDNTlCNjRBQzBCODQ3QTMzOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe4eapQMmmy9ILQkpk00SJ92Lz
4wsW2OKZ9KlaV+Pj/BAsWi+254/vyglDpNwdWVo3QN9Pr4xr6cqYWJSp0ZgDO6nE
jyuOUZbgyRUBXq6F6MYnmKdadsXVwwHxy6ZEn6IFD+uupwJspkRgbNcBxxX0qXFQ
AXv+SEYKyxbDTb1bo4N1YC6CVpnYMU5uPaFxjCX7wiRm9HBB68sBDqkzuafDOin9
J4Ecs3IFb6DxLMQSIJjKtOvvUR82PybasskYJ6Gkme9XCqI/H2HudD7WkAtYTtJF
ZoSuMWEpsyGOPgVZADxmZyFZ0cJOAZzPIvdcXSloP31gIeDC/aC4TVFLP6i/AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUG6H6+MUGjA4Pq2fFm2SsC4R6M58wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzOTUwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqlFDANBgkqhkiG9w0BAQsFAAOCAQEABmIs
js4qpLAibdbIBBQ2hLJsbk1/drhXCFReELnKs/ZjUynAA/GP7e73IKkR2cRpttmw
lcTu4nUWgJks2AUNuOGLWQi6ppdpfHuKc8DQBA+IcWlWEyUM3n9oP/aL6lW2iOnx
jqcBdc43d65ln9XW3hdKxktV2Gt/DOqw8tPi6cbOga9NdMaN7Tz2zuZar5UldLSD
TWVFJlRrT4bBAFGux5LoX9ZO/2dfhYcubxyLje97uKSf2KK08k2XJ31qa76zfQBu
NJfoVT2whmatXhq/14Umpq6S2mg42GedlRk/3VQRWW+KqmSeiQyhULT4nkiAWgWk
faNTa/wOp/DsChBZfw==
-----END CERTIFICATE-----