Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143979.roa
File:                     AS143979.roa (raw, json)
Hash identifier:          C0N8+JGs9TGU5WD4RIH/TGJdSL+6tTj7PZd5bNUbUek=
Subject key identifier:   F7:4C:23:D3:C6:E7:A4:F5:4A:65:12:39:3C:65:69:10:35:7A:B8:1D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       23C807B2954CF88FDF2CB4DDA3B57CFB38A0368B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143979.roa
Signing time:             Fri 22 May 2026 04:27:14 +0000
ROA not before:           Fri 22 May 2026 04:22:14 +0000
ROA not after:            Fri 21 May 2027 04:27:14 +0000
asID:                     143979
IP address blocks:        240a:a531::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c8:07:b2:95:4c:f8:8f:df:2c:b4:dd:a3:b5:7c:fb:38:a0:36:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:22:14 2026 GMT
            Not After : May 21 04:27:14 2027 GMT
        Subject: CN=F74C23D3C6E7A4F54A6512393C656910357AB81D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:97:90:24:a1:49:23:a5:7b:d0:d9:19:44:03:
                    de:bf:5a:d5:09:46:9b:72:7a:8a:f5:fa:c3:6f:fc:
                    32:dc:73:00:c5:9c:ca:c1:29:13:55:50:bc:03:25:
                    b0:ab:6c:a3:f5:35:a0:76:13:99:dc:c4:dd:61:6a:
                    af:5f:5e:0f:a0:63:49:91:fd:30:bc:bf:4f:62:dc:
                    54:73:a2:fa:09:ae:49:9a:95:82:13:fa:05:30:4e:
                    5a:da:97:3f:d5:f9:cf:46:b8:09:ea:2a:fc:68:f8:
                    2a:d4:e1:4d:2d:47:e2:5a:18:4a:58:56:54:77:9b:
                    00:9a:87:2b:37:16:1b:86:6e:21:00:74:58:17:62:
                    b4:f2:6b:c3:2a:ea:15:ab:f3:e6:fd:8e:84:34:10:
                    85:94:1f:02:9d:fc:6a:89:21:b7:2a:f1:2c:e8:0e:
                    ec:66:48:70:0f:ae:31:17:82:f0:c5:0a:4c:0c:67:
                    e7:a2:f2:86:10:cc:18:51:5b:3e:e8:43:b6:cd:ae:
                    e2:45:bd:f5:a1:80:65:0b:cf:ef:6a:f2:cd:a7:24:
                    03:3f:19:b1:c6:57:81:67:07:d1:ac:69:72:5e:b0:
                    41:67:50:97:e1:b6:d0:00:de:d6:0e:d3:e2:51:5e:
                    a9:ca:38:20:be:3d:86:7d:ee:3e:66:17:64:b8:05:
                    cc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4C:23:D3:C6:E7:A4:F5:4A:65:12:39:3C:65:69:10:35:7A:B8:1D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143979.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a531::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:05:2d:ef:58:22:c9:96:75:b7:fd:06:fb:21:5c:83:b7:da:
         fd:20:8e:b7:7b:9c:f9:23:a3:d4:d6:c6:6e:73:36:17:7f:e5:
         9d:e5:fb:2b:fe:92:42:5a:f7:59:d9:3b:80:b1:d0:bc:54:1c:
         fa:1a:de:e5:60:ae:75:fa:67:33:cc:0a:c1:5f:c5:e9:32:fd:
         ac:68:65:47:e7:71:a4:7c:ab:c1:bc:1b:db:92:99:c8:b9:ef:
         ab:aa:2d:28:9b:c4:cc:97:42:62:95:2c:e8:8a:84:49:1a:20:
         41:38:1a:1f:52:42:7c:de:95:ec:f1:54:21:f0:3a:ea:22:b2:
         fa:b3:e1:8d:50:fe:34:b9:58:30:c5:86:20:01:ac:82:9a:79:
         c7:67:7d:3c:bc:5a:40:cc:1b:2a:20:6b:80:33:bf:a0:01:a6:
         53:37:1a:58:ef:41:03:45:05:10:55:99:a4:a7:37:ec:56:1e:
         2d:6e:93:65:ee:bf:1f:7e:53:20:ae:8e:08:75:87:8e:e9:48:
         fd:bf:54:b0:0f:01:62:ba:8e:ba:80:56:a3:69:2f:83:cb:fe:
         82:ff:93:c3:77:da:fd:35:e0:22:fc:9f:73:d9:b0:7c:3b:98:
         ed:36:35:02:23:1e:28:c0:1b:d5:1a:79:d1:39:bf:3e:04:c2:
         11:4f:33:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----