Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143970.roa
File:                     AS143970.roa (raw, json)
Hash identifier:          ClwuGquUom0gIfjv9wMf7BDaQowKUwYadIhozP7Ci7s=
Subject key identifier:   09:3F:A4:A2:0F:06:94:A6:A7:7F:FE:D9:6F:43:1C:35:F3:18:01:18
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5F3C7E64813C85EC7AE9172C5380393E4735271E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143970.roa
Signing time:             Tue 26 May 2026 02:35:18 +0000
ROA not before:           Tue 26 May 2026 02:30:18 +0000
ROA not after:            Tue 25 May 2027 02:35:18 +0000
asID:                     143970
IP address blocks:        240a:a528::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:3c:7e:64:81:3c:85:ec:7a:e9:17:2c:53:80:39:3e:47:35:27:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:30:18 2026 GMT
            Not After : May 25 02:35:18 2027 GMT
        Subject: CN=093FA4A20F0694A6A77FFED96F431C35F3180118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:72:2f:ef:e2:30:da:b1:7d:43:40:d1:8b:0d:
                    ad:27:78:ef:6a:53:12:fa:79:f2:bd:3d:60:02:05:
                    2e:9a:d5:79:db:d1:a6:86:c9:d3:04:69:1b:ec:32:
                    9b:9c:6b:de:9b:b7:bc:2d:8c:4d:db:dd:35:2f:67:
                    df:90:5b:60:bf:d9:49:a0:bd:18:2c:3e:c0:c8:fe:
                    b7:0a:dd:80:54:c5:fa:72:b1:85:00:30:b3:16:f4:
                    17:24:9f:d8:1f:4f:32:6d:f9:53:27:91:57:b7:91:
                    93:7f:d2:00:2a:b7:46:da:40:6a:29:77:aa:fc:28:
                    12:3a:dc:72:4c:2b:b6:cb:2a:ea:11:ab:2a:49:2b:
                    35:dd:8d:a8:1d:7c:4a:8a:f0:28:a8:e8:66:1f:66:
                    74:9c:e2:60:d5:9d:32:2e:75:35:86:7e:ce:f7:63:
                    15:8a:97:ab:03:91:58:f2:e2:4e:11:1f:c0:83:50:
                    6e:67:e0:59:71:c0:b8:62:fa:5e:7a:5d:8c:ae:bd:
                    92:b3:8b:72:05:6e:e8:ba:41:63:ef:ca:a1:57:c0:
                    01:f5:a4:85:ac:e5:b5:f1:f1:7a:e6:35:b0:93:63:
                    05:d4:4f:6d:28:2c:9e:54:fc:8d:97:f2:6e:aa:32:
                    53:2a:22:90:17:b4:57:25:57:44:12:0d:58:99:60:
                    60:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:3F:A4:A2:0F:06:94:A6:A7:7F:FE:D9:6F:43:1C:35:F3:18:01:18
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143970.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a528::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:6c:42:90:89:62:34:b0:aa:8c:df:04:c9:53:6b:f0:48:20:
         5c:e0:07:09:f9:91:f6:04:2e:44:7e:42:40:d3:88:a3:97:5b:
         cc:6c:84:e0:8a:a5:da:29:c4:ed:1c:86:9c:90:df:bd:86:1e:
         56:65:e1:dc:4a:6b:0c:86:d6:19:e2:09:41:a2:36:3d:71:d6:
         50:f6:b8:34:6c:1c:17:c2:a5:e6:50:63:bf:23:9f:5a:06:8b:
         af:7d:30:b4:a8:09:f4:fd:c6:73:fe:96:28:e5:9a:24:3a:1f:
         3e:26:42:4e:bf:69:a8:01:47:bd:6d:f7:13:31:6c:a1:f3:59:
         0f:16:92:53:4b:95:ae:a6:de:90:fc:80:38:2e:2f:4f:43:9c:
         7f:3b:fc:0e:a5:e9:a4:40:c7:2d:33:ff:5c:6f:6b:e5:15:ea:
         63:9e:32:e0:57:f6:18:c5:9d:d7:54:7f:4c:24:e8:a2:aa:00:
         fa:d4:ad:23:4f:9b:26:06:12:f4:4a:68:af:a8:f8:b4:0d:20:
         91:69:07:49:36:5f:73:79:ef:f9:d6:92:dc:27:7b:b1:72:e3:
         d0:c8:e3:b4:d5:f4:b0:0d:dc:a4:d6:05:17:8f:bd:91:53:87:
         f2:2f:83:2f:77:d1:57:4a:3a:92:5a:47:c5:48:28:ef:9a:bb:
         e5:c8:13:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----