Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142090.roa
File:                     AS142090.roa (raw, json)
Hash identifier:          QCnol9oBHoMUMSkZOjCjfQcwNV3EhuzVWfsYTq9joc4=
Subject key identifier:   31:1D:5C:F7:F3:A6:9E:C1:A4:08:17:FF:8E:C6:44:48:ED:C4:2F:7F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       262950D0840CB9ADDF8D296A67F1DBCAD1F1E66C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142090.roa
Signing time:             Tue 26 May 2026 06:12:50 +0000
ROA not before:           Tue 26 May 2026 06:07:50 +0000
ROA not after:            Tue 25 May 2027 06:12:50 +0000
asID:                     142090
IP address blocks:        2001:253:224::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:29:50:d0:84:0c:b9:ad:df:8d:29:6a:67:f1:db:ca:d1:f1:e6:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:07:50 2026 GMT
            Not After : May 25 06:12:50 2027 GMT
        Subject: CN=311D5CF7F3A69EC1A40817FF8EC64448EDC42F7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:84:4a:52:3d:38:33:23:0c:b3:fa:e2:82:95:
                    6f:15:4c:93:52:b2:fb:7b:55:57:d9:ab:b1:cf:da:
                    0c:28:2b:31:2b:12:d0:21:47:cb:5b:88:43:03:17:
                    51:b5:e5:2d:9d:fb:9c:20:73:bf:62:4a:e4:a6:00:
                    ad:81:c3:ef:33:b7:37:83:d4:5a:7d:b7:75:b1:b1:
                    c0:34:b8:2d:2b:63:64:f8:07:60:79:75:f0:48:3d:
                    af:84:7f:05:ca:a9:e0:2d:a0:b5:15:d4:31:63:0f:
                    43:fa:3a:59:dd:0f:8f:ce:57:f3:71:19:ea:05:0c:
                    4a:eb:76:c6:a9:d7:d5:00:c5:50:1c:10:d8:ac:46:
                    df:fd:eb:f3:8d:d5:41:77:67:d0:dd:4d:ef:61:57:
                    5c:e3:c2:91:6a:29:b0:96:bf:48:77:54:f0:18:44:
                    46:55:70:45:d0:d2:bd:e1:53:14:3e:a0:98:0d:5d:
                    b4:9d:82:d2:01:0e:8c:4a:75:44:a1:56:56:07:be:
                    a1:21:77:cf:af:b6:77:a3:65:3b:14:6d:00:04:ee:
                    9a:22:56:97:4a:24:4e:92:b7:50:ed:59:79:0c:8b:
                    52:6b:09:32:20:91:ec:e8:d7:6a:09:0b:32:4f:c3:
                    f0:d6:37:8d:38:c1:62:0d:fb:9f:f8:3a:ae:d3:cb:
                    04:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1D:5C:F7:F3:A6:9E:C1:A4:08:17:FF:8E:C6:44:48:ED:C4:2F:7F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142090.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:253:224::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:5d:f6:d7:cd:a8:51:55:77:3a:e0:f6:09:08:b3:43:2b:04:
         cb:f0:a5:3a:f0:b2:75:d5:55:47:f9:03:55:68:87:f5:1d:ae:
         a5:49:43:b8:c5:08:93:16:6b:af:2e:71:2c:34:05:f3:8f:57:
         99:3c:b3:38:48:97:dc:47:7b:f7:d3:80:15:6e:c8:b8:00:b1:
         2f:1c:ad:be:33:c8:39:39:3a:10:99:73:fe:3d:36:fd:65:ea:
         c4:57:fd:35:b8:28:bc:18:00:33:8e:35:4a:2e:9e:b0:86:ad:
         e3:67:9c:64:a0:73:02:e6:9d:07:a6:12:8e:65:00:e0:a6:5b:
         4b:17:c2:ef:a8:36:f7:7c:a0:e8:36:9e:9b:dd:33:e7:eb:97:
         60:77:53:2a:fa:a5:e7:ed:19:99:98:fa:e0:85:00:a6:f9:06:
         59:8e:89:fc:79:e9:fb:21:6e:23:36:8f:22:f6:2f:b7:ff:9e:
         75:e2:da:bd:7f:c7:c0:52:bf:44:d5:7d:24:bd:18:21:b5:be:
         88:5a:96:8b:df:1d:c4:37:99:b1:e9:46:6d:47:b6:9d:b7:cd:
         0f:6d:bf:04:a8:ad:54:d9:75:42:44:98:da:cf:2b:ec:ae:17:
         12:27:68:6c:e6:20:2b:a1:c8:7d:19:4a:a4:11:ac:f9:a2:53:
         59:0d:f8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----