Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143957.roa
File:                     AS143957.roa (raw, json)
Hash identifier:          VqmyTtWV2sr01ba6RYJJEngiOTFy25dRP/gcLSpOvmM=
Subject key identifier:   B1:74:28:5D:A9:28:29:E4:FE:4A:2C:B7:04:EF:D3:67:19:2C:67:CA
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       74E49B936843A6A7183438FB02C8A2EC437D5DE8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143957.roa
Signing time:             Tue 26 May 2026 08:52:47 +0000
ROA not before:           Tue 26 May 2026 08:47:47 +0000
ROA not after:            Tue 25 May 2027 08:52:47 +0000
asID:                     143957
IP address blocks:        240a:a51b::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:e4:9b:93:68:43:a6:a7:18:34:38:fb:02:c8:a2:ec:43:7d:5d:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 08:47:47 2026 GMT
            Not After : May 25 08:52:47 2027 GMT
        Subject: CN=B174285DA92829E4FE4A2CB704EFD367192C67CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:eb:85:e4:db:93:52:64:f6:52:24:97:f7:58:
                    73:37:fe:bc:85:9f:f5:88:38:6d:6f:5a:2c:76:65:
                    56:22:66:42:5b:bd:f7:a5:fb:d2:2a:49:8b:8c:d1:
                    3d:14:4e:e4:6a:03:70:56:71:4a:16:d8:9b:e6:84:
                    d8:3d:fc:58:27:ae:dc:9c:2b:95:d0:0b:e4:d2:4b:
                    f2:44:67:47:80:54:f3:de:fa:44:9e:ca:17:db:1a:
                    b2:3e:9d:18:0a:22:7d:74:7f:ef:0e:28:31:4a:d0:
                    8e:47:0d:fb:f6:18:57:c5:c8:5d:bb:53:cc:c4:cb:
                    32:75:62:62:76:93:86:9f:09:d1:a2:5a:bd:e9:b7:
                    00:d1:00:f4:97:3c:3c:5b:8f:f0:81:88:fc:32:e6:
                    be:12:5a:93:aa:4d:7c:a6:b0:e5:60:c2:0f:fc:cd:
                    0d:9d:18:99:08:60:1d:d3:6d:d7:66:76:0a:07:74:
                    03:fc:98:7d:bf:fc:ee:4c:dc:d8:51:9a:06:8d:cb:
                    8b:1e:83:c0:13:3c:9b:94:6c:08:80:26:bf:aa:9a:
                    b1:c9:f0:91:dd:ea:95:6b:e0:44:a4:5f:a3:7b:24:
                    ef:1f:62:e4:cf:3a:8c:ca:89:c5:58:d9:0b:45:29:
                    c4:a4:71:3c:b9:18:11:15:f2:aa:71:8d:a9:f2:75:
                    01:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:74:28:5D:A9:28:29:E4:FE:4A:2C:B7:04:EF:D3:67:19:2C:67:CA
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143957.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a51b::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:d7:b5:44:d6:97:2b:7c:7c:05:bb:fc:dc:73:49:47:09:07:
         4b:55:25:2b:97:f3:2f:b1:b7:09:9f:9d:aa:7d:05:6e:49:55:
         2f:f0:09:35:90:e9:62:fb:3c:38:b5:e2:6c:8a:64:cb:ce:fb:
         5d:3a:2b:d5:c8:0a:c1:b9:bd:7d:d0:33:94:88:5d:6c:aa:e9:
         bc:59:d5:32:dd:5c:32:84:d0:3f:b4:82:14:e4:67:35:55:53:
         56:f9:a3:69:ac:52:eb:67:9d:25:8b:79:fc:d7:12:c3:be:bd:
         00:c9:1e:2f:2b:9d:44:62:77:5d:11:56:5d:13:2b:89:3b:60:
         be:e2:8d:9e:dd:6c:c7:ae:87:0f:e0:da:dc:cf:7e:90:5d:73:
         01:c2:d9:b1:45:6f:8e:b2:43:c2:4a:98:15:98:c5:77:bb:5c:
         7b:8e:88:84:c6:39:e7:55:dc:fa:c5:7c:14:c7:3a:e3:10:18:
         93:c9:26:df:8c:93:1a:15:d5:b5:05:c1:b1:d0:d1:b6:97:1a:
         40:fb:c1:6e:1c:30:a0:ec:51:2e:67:a3:e9:40:1e:ec:36:45:
         73:dc:48:19:ae:62:f1:28:37:4b:9a:6e:78:58:80:2d:68:a9:
         b8:a5:7b:53:98:95:00:db:6f:75:fb:e8:9d:2a:7b:81:05:4c:
         0a:6d:de:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----