Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143998.roa
File:                     AS143998.roa (raw, json)
Hash identifier:          6RDYXa9lhKJGTpdv7W9V4c7hEQ9hzwsBfcVQP18+xqM=
Subject key identifier:   B7:43:17:6D:23:0E:78:C8:48:C1:15:B1:FE:5B:FF:4F:90:96:15:15
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       585F63914BDA9DEE83B3E43929840417A93462A9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143998.roa
Signing time:             Fri 22 May 2026 07:32:29 +0000
ROA not before:           Fri 22 May 2026 07:27:29 +0000
ROA not after:            Fri 21 May 2027 07:32:29 +0000
asID:                     143998
IP address blocks:        240a:a544::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:5f:63:91:4b:da:9d:ee:83:b3:e4:39:29:84:04:17:a9:34:62:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:29 2026 GMT
            Not After : May 21 07:32:29 2027 GMT
        Subject: CN=B743176D230E78C848C115B1FE5BFF4F90961515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:0b:19:89:c7:82:32:98:58:e5:ef:ab:a8:d8:
                    9e:c6:9a:94:ff:c0:fd:05:98:38:06:04:b0:25:46:
                    a6:45:98:9d:e9:d7:78:98:f3:ea:04:3b:20:bd:b6:
                    d6:83:cd:40:38:a4:23:bd:20:fa:b7:8a:5f:bf:8c:
                    16:d5:49:1b:9a:60:0a:b6:88:f8:06:b8:35:36:9a:
                    92:d3:e0:14:e2:ac:c4:3e:06:13:0f:ee:17:96:ec:
                    2a:32:fb:4a:4c:cf:8e:12:3b:14:ff:e3:d9:8c:15:
                    7a:1b:c4:61:bb:5a:a4:db:a5:e9:7d:76:0d:41:e1:
                    62:22:a5:19:e9:ad:50:d8:0e:35:ff:8b:0a:88:c7:
                    af:ac:4d:b8:49:50:9d:2a:67:58:3c:53:f3:3c:52:
                    65:21:7e:44:7a:5c:a5:bf:c3:bb:57:d2:05:18:f4:
                    ef:1f:44:9a:18:eb:68:db:ee:20:ae:c6:db:33:c3:
                    7b:a7:d9:e3:f7:69:61:3e:b6:21:7a:16:32:5d:66:
                    aa:09:11:83:ac:d3:c8:d3:da:87:47:ab:48:9b:fd:
                    8e:e6:55:49:c7:92:f5:68:f4:89:23:c3:16:62:60:
                    22:b7:e8:1f:fe:76:5f:ae:8b:76:93:1e:75:e5:c4:
                    ca:25:06:b0:d3:e6:a3:d4:b2:89:fe:24:eb:f9:c1:
                    c4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:43:17:6D:23:0E:78:C8:48:C1:15:B1:FE:5B:FF:4F:90:96:15:15
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143998.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a544::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:81:8e:f1:df:21:76:f7:2f:ab:01:15:ab:09:fc:e8:f0:e3:
         24:1b:24:38:e5:c4:ae:41:ae:47:ec:88:cd:4d:0b:43:e4:03:
         a5:7e:40:98:0f:40:c2:9a:78:30:4b:a8:aa:71:af:9f:a7:13:
         a3:9b:21:1c:87:bf:6b:4e:ab:75:44:5f:53:a3:06:6b:af:63:
         21:a3:14:06:3f:9b:4c:b6:95:2e:a9:11:51:05:23:c4:d9:ca:
         35:f6:63:c9:8e:f5:40:36:20:26:d5:1c:70:90:84:bf:d3:58:
         43:d3:9c:da:47:da:06:65:36:08:50:45:d5:f7:5a:ed:19:19:
         7f:8c:79:c6:0f:37:6b:b9:67:32:d4:d1:d0:06:68:44:fe:4e:
         57:03:54:a0:cd:09:41:36:c1:1e:ae:9e:ad:e7:44:14:6b:1c:
         6b:88:ed:84:60:88:ae:16:88:de:53:5d:84:c1:32:ea:2a:06:
         e8:d3:fb:48:1c:c5:e1:87:61:e6:36:2a:e8:17:58:32:dc:3d:
         bf:1e:1c:a4:92:b5:b1:a3:52:28:e9:f8:0d:f7:38:8b:1a:ea:
         4e:4c:7d:65:e1:b8:e2:1e:1b:41:27:c0:59:9d:1c:af:2b:ec:
         9b:7c:50:51:c4:5d:2a:44:e6:64:c1:2d:e2:c2:3a:e6:8b:7b:
         a7:25:f6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----