Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143985.roa
File:                     AS143985.roa (raw, json)
Hash identifier:          wRMdt1h+xecFmaPKcnXfSFlNZoP38Jd1jBz81gZXaPo=
Subject key identifier:   F5:37:63:11:2B:A3:5A:1A:13:99:6C:05:6C:CB:57:94:AC:6C:73:CC
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       39790B668BB11B40E7A67845EB4C3354D3CF5BF0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143985.roa
Signing time:             Fri 22 May 2026 07:41:01 +0000
ROA not before:           Fri 22 May 2026 07:36:01 +0000
ROA not after:            Fri 21 May 2027 07:41:01 +0000
asID:                     143985
IP address blocks:        240a:a537::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:79:0b:66:8b:b1:1b:40:e7:a6:78:45:eb:4c:33:54:d3:cf:5b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:36:01 2026 GMT
            Not After : May 21 07:41:01 2027 GMT
        Subject: CN=F53763112BA35A1A13996C056CCB5794AC6C73CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ad:43:78:88:42:79:6a:75:c8:0d:9c:3c:46:
                    3c:f8:c1:92:11:e4:c9:a1:d7:d7:64:4d:9f:2c:60:
                    fe:9b:5e:71:4d:32:5f:03:12:89:f8:50:08:c8:a5:
                    b4:ea:cc:4b:ea:97:47:93:10:51:23:87:28:ba:11:
                    ab:0a:8e:8c:4b:76:d7:c8:50:fb:e8:dd:f4:13:5c:
                    3a:ef:d9:02:8a:17:96:e3:eb:83:94:08:f3:e7:7d:
                    82:6f:c7:08:3f:81:4d:d1:71:ef:95:40:95:b9:e8:
                    c2:d9:62:d5:3b:c2:df:d4:90:1b:34:43:cf:cc:69:
                    07:fe:49:b3:ab:c4:dc:55:1c:83:91:a5:e7:9c:0a:
                    ad:53:96:46:d0:52:cc:44:81:28:5d:c1:11:5b:ee:
                    be:2f:c4:ac:b3:75:2c:a2:7b:03:8d:b9:ea:3c:93:
                    8e:f4:ba:03:df:a5:1c:91:d6:ee:65:e7:c0:d7:0c:
                    78:42:e7:b1:89:d6:4d:f7:b7:d4:70:cc:36:7f:d0:
                    b7:31:36:19:fd:e0:a2:e9:d1:98:7c:ef:44:33:98:
                    6d:4d:89:9f:8a:00:ed:60:55:2b:bd:3d:63:d6:d4:
                    49:12:91:fc:64:cb:1e:de:86:f9:1c:e0:a1:86:a6:
                    be:32:85:26:e3:d1:b8:e4:48:f4:68:2c:c1:0d:63:
                    c5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:37:63:11:2B:A3:5A:1A:13:99:6C:05:6C:CB:57:94:AC:6C:73:CC
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143985.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a537::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:c0:fc:e1:96:b4:4a:35:35:43:0c:dc:56:ff:d7:68:7b:74:
         df:3c:86:fd:d3:52:1a:76:95:5d:3d:9e:9e:15:ea:45:7d:39:
         6a:d9:74:aa:e4:d3:d6:0b:ac:e5:59:ba:58:2a:4b:66:44:5c:
         42:a1:fd:78:e9:3a:4d:5c:fb:c3:2c:bc:61:a6:e9:bf:fc:58:
         8d:c6:34:ee:4d:97:e9:da:df:64:d4:9e:40:9b:80:de:00:63:
         81:42:62:a6:22:6b:57:65:32:33:87:ba:ee:17:2d:11:61:2a:
         a9:6b:d4:d0:c0:da:ed:2d:6c:09:e7:0b:89:70:5e:a3:0f:03:
         33:89:50:82:ec:57:d6:a2:77:71:c0:d1:00:64:53:99:9e:17:
         98:3c:78:72:ec:21:a3:b4:db:65:59:0e:9c:9b:29:4e:a9:82:
         37:aa:fa:75:ab:c2:0a:5a:92:89:72:c1:3e:ed:82:ef:4b:8e:
         b0:1b:e4:c8:72:a5:be:44:1f:4b:47:11:5d:1d:50:30:89:0b:
         43:3b:2b:a7:63:e2:a2:24:88:8c:9d:f2:42:ad:02:9d:8b:2d:
         36:5a:7f:c5:f0:02:66:fd:40:4b:5e:25:28:6f:54:b3:9b:4d:
         07:2d:ee:6e:72:e7:0b:eb:37:61:c3:79:7c:bc:38:a6:4b:be:
         96:65:b6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----