Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143954.roa
File:                     AS143954.roa (raw, json)
Hash identifier:          B0aZ/pllktb6kStWxmHBcQ8xKnfCPkBiDfEXDxvSUAk=
Subject key identifier:   95:51:EC:A0:0A:14:A8:2A:C0:ED:5C:03:1C:76:1A:C0:E5:A9:B3:88
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       15393AE82E74412F79A874D230D038E77DDE0B25
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143954.roa
Signing time:             Mon 25 May 2026 01:20:23 +0000
ROA not before:           Mon 25 May 2026 01:15:23 +0000
ROA not after:            Mon 24 May 2027 01:20:23 +0000
asID:                     143954
IP address blocks:        240a:a518::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:39:3a:e8:2e:74:41:2f:79:a8:74:d2:30:d0:38:e7:7d:de:0b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:15:23 2026 GMT
            Not After : May 24 01:20:23 2027 GMT
        Subject: CN=9551ECA00A14A82AC0ED5C031C761AC0E5A9B388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:35:6c:fd:ff:32:bb:28:95:b5:6d:7f:34:1e:
                    74:22:a9:cb:bb:c5:1a:85:35:7c:6c:7c:c8:60:19:
                    2c:df:75:99:9c:7c:57:23:68:c4:12:d0:d4:54:c4:
                    26:a9:5e:b8:3e:08:9f:83:d6:1b:9c:07:21:02:d6:
                    d9:67:28:78:54:f0:a9:04:ed:15:5c:e5:0b:52:9d:
                    22:d4:cf:cd:9a:d6:48:2d:7c:7f:c8:e4:f9:da:7e:
                    9d:39:6b:c3:1b:78:9d:6c:81:f3:39:2b:a9:0a:b3:
                    2c:24:24:8b:a6:33:42:9c:94:9e:ad:cf:8a:ab:b8:
                    aa:92:5c:7c:13:bf:9a:91:26:ec:3e:80:a6:2d:45:
                    e1:56:7d:19:99:11:06:7f:03:fe:f3:73:73:d5:88:
                    ba:17:2b:3c:2a:2c:48:e1:4a:22:09:eb:3d:e7:cc:
                    7c:1c:e2:76:6f:52:dd:19:06:bd:47:37:00:3a:ee:
                    c1:cf:6d:2e:3e:f8:f0:de:1a:24:11:45:bd:97:db:
                    e4:d4:9a:5c:42:af:60:2b:47:2f:7d:5e:dc:67:5f:
                    3b:be:33:18:df:4e:12:f6:00:a8:55:b4:c4:a8:d7:
                    bc:41:08:ad:4a:ff:3e:94:50:08:24:c5:4c:8c:c6:
                    d9:72:28:f6:aa:57:42:cf:47:92:07:df:1e:ad:de:
                    5c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:51:EC:A0:0A:14:A8:2A:C0:ED:5C:03:1C:76:1A:C0:E5:A9:B3:88
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143954.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a518::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:18:aa:b9:59:49:a7:12:98:de:75:14:e9:08:64:23:ef:95:
         14:aa:16:18:73:27:5b:e6:5a:1a:a1:46:fd:2a:60:a7:4f:ab:
         a0:17:c5:c5:c2:d9:03:88:de:c3:0e:bc:48:b7:fc:4d:d5:88:
         de:8a:85:b7:ed:dc:6a:72:dd:14:0f:58:ce:e2:0f:ee:5c:2b:
         af:3b:5c:b8:fc:fd:0d:ae:9c:c1:64:e0:8e:7e:c9:7f:84:60:
         6b:79:ec:69:ee:57:8f:c8:8e:71:a9:18:78:fe:12:1d:3f:06:
         34:f4:df:d7:19:5d:cb:56:d7:f9:e1:2b:81:1a:66:f0:40:e2:
         6e:c9:d2:80:0b:cf:23:53:89:a9:8f:1c:92:83:98:8d:a1:9c:
         f9:c7:5d:4e:75:9e:d1:dc:e5:90:31:60:4e:b8:ed:21:dc:5e:
         df:f4:92:67:c1:1b:64:8f:62:ef:0b:49:82:c8:bf:a5:78:fe:
         e5:41:7d:e9:c7:d0:77:53:e3:b4:c9:01:f1:7e:49:b5:8a:44:
         1e:6b:85:3b:69:32:44:bf:7b:3a:66:5b:18:0c:f8:0d:22:08:
         e6:5d:51:1d:da:56:49:85:1c:a0:ac:6d:d1:cf:f5:89:17:04:
         11:5b:81:32:d4:7e:77:55:6d:03:ee:d1:4c:f7:fa:4c:13:5e:
         cf:24:ec:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----