Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143964.roa
File:                     AS143964.roa (raw, json)
Hash identifier:          7ECYeMay6qQX3/6STkBA+Kp5uqC8Y8XbHU+U3zkAmrQ=
Subject key identifier:   C1:BC:1E:A0:83:60:B8:B6:CD:E3:0F:08:D0:68:0A:8D:2C:84:EC:12
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       798CEC1236978F0D0897CF3094B3C179033ACD8D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143964.roa
Signing time:             Mon 25 May 2026 03:19:11 +0000
ROA not before:           Mon 25 May 2026 03:14:11 +0000
ROA not after:            Mon 24 May 2027 03:19:11 +0000
asID:                     143964
IP address blocks:        240a:a522::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:8c:ec:12:36:97:8f:0d:08:97:cf:30:94:b3:c1:79:03:3a:cd:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:11 2026 GMT
            Not After : May 24 03:19:11 2027 GMT
        Subject: CN=C1BC1EA08360B8B6CDE30F08D0680A8D2C84EC12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c0:10:87:8f:2a:67:03:dc:59:dc:07:2c:db:
                    19:e7:3f:b5:98:86:f0:f3:35:03:6c:57:2a:b2:01:
                    1d:24:67:de:3f:49:74:cd:1d:5d:cd:7f:6c:9a:49:
                    3f:f8:1a:f6:b5:e1:72:fb:29:54:60:d9:a6:9b:aa:
                    8f:1b:0e:fc:b1:ab:cd:df:62:90:cd:3f:a1:7c:03:
                    ca:c4:a7:a7:18:52:9a:9c:63:f8:12:21:99:f6:76:
                    e0:01:74:b4:bc:37:25:5e:a8:7b:69:86:23:d5:d6:
                    9e:2e:b5:b5:ac:6f:10:11:ab:4c:cd:37:ce:14:b6:
                    48:42:be:60:32:b9:d4:62:62:76:0b:23:dd:b3:e4:
                    5d:a5:38:6a:3e:e0:c2:ab:23:ae:86:8c:ee:f1:99:
                    a9:c8:89:0b:2d:fb:0a:02:e7:d1:15:2c:ee:57:b7:
                    db:71:ee:54:83:62:08:d5:e0:fa:ac:35:e7:44:be:
                    17:1c:ce:b9:55:be:08:96:ad:fa:46:f3:9a:ff:f2:
                    60:c1:1f:97:5b:d5:a6:2c:4f:a7:e0:7b:69:f0:6b:
                    cf:ed:b9:a3:5a:8e:32:6e:b9:76:af:f2:34:8b:db:
                    08:fe:ef:ae:1e:2f:e2:10:ff:92:fb:a5:fc:7b:5a:
                    df:49:9c:2c:c7:0e:55:0f:9b:e9:b7:77:9b:cc:3a:
                    56:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:BC:1E:A0:83:60:B8:B6:CD:E3:0F:08:D0:68:0A:8D:2C:84:EC:12
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143964.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a522::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:e7:a5:aa:ea:9d:7c:36:1f:77:c0:b5:b3:04:63:a7:9b:5c:
         be:39:ff:ab:c0:fc:5c:2a:f2:d5:f5:48:f2:51:ff:5a:d7:36:
         2b:5d:c0:64:a7:25:da:bd:d1:5b:03:3a:66:ca:4c:bf:ad:51:
         12:2f:4e:e9:9e:c7:01:10:05:16:c5:93:7f:88:05:25:7a:ef:
         f6:dc:1f:71:c1:4b:ca:f5:8b:dc:0b:04:4f:a8:f2:03:6c:23:
         b9:0b:4f:f2:b1:21:ba:32:60:ab:03:aa:df:0b:0f:a3:b3:8f:
         d4:ba:6a:52:11:d1:4c:03:ca:90:58:e6:25:b2:46:95:11:75:
         68:a7:32:d7:1d:10:39:d3:02:b2:5c:62:96:56:cc:87:af:45:
         f5:cc:07:eb:8a:ac:d5:52:72:63:25:81:df:29:ec:71:29:57:
         33:36:a3:be:40:06:9f:36:0b:af:30:ac:52:2d:ef:74:1f:d5:
         9d:08:86:25:73:f5:a4:9c:54:07:9a:d9:c4:51:11:9c:59:3a:
         d9:ea:8b:1e:1a:ae:43:42:58:df:bf:af:e9:79:1f:fe:07:0c:
         74:47:7a:54:58:49:fc:2d:d1:8e:a6:f1:2d:e3:59:c7:a2:31:
         4b:0c:32:48:7d:d3:60:de:07:ee:3f:c8:67:c2:f1:01:e7:7f:
         45:d9:16:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----