Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142658.roa
File:                     AS142658.roa (raw, json)
Hash identifier:          fYsfQS6PO1xPEUa/Sn62i/5ORBUiqj5Ludi12KrmVqQ=
Subject key identifier:   5D:1F:91:57:E1:D1:0D:B5:3E:29:C3:C4:89:5D:B3:3F:1D:87:B7:37
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       226FE1ED3CCEEB4CA0231EAC32C6E7C22C751C00
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142658.roa
Signing time:             Tue 26 May 2026 02:35:24 +0000
ROA not before:           Tue 26 May 2026 02:30:24 +0000
ROA not after:            Tue 25 May 2027 02:35:24 +0000
asID:                     142658
IP address blocks:        240a:a008::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:6f:e1:ed:3c:ce:eb:4c:a0:23:1e:ac:32:c6:e7:c2:2c:75:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:30:24 2026 GMT
            Not After : May 25 02:35:24 2027 GMT
        Subject: CN=5D1F9157E1D10DB53E29C3C4895DB33F1D87B737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:dd:4d:a2:21:dc:7b:92:ca:0c:0a:48:dc:4f:
                    59:6f:4f:5f:7e:2a:ba:c7:88:22:6e:75:8a:8f:22:
                    98:eb:ee:13:21:7e:41:42:4e:11:d5:e4:a3:77:c6:
                    6d:6f:f2:32:83:15:c4:f2:85:b4:85:6c:0b:71:f0:
                    b5:5d:2f:2c:e2:c8:1b:b4:43:b4:24:f0:92:51:2a:
                    e2:e6:6f:ed:a0:f4:ae:e9:d0:d0:a0:d0:a1:d3:c4:
                    0a:c7:4e:de:10:9b:a4:3c:56:d8:4f:bf:a3:96:7a:
                    3b:2c:78:f2:64:b4:45:fe:b6:4a:82:9b:2f:9b:3b:
                    c6:42:1b:6c:99:ba:76:53:0f:50:92:78:89:42:8a:
                    ec:8b:f7:08:f9:f4:59:cf:3d:ed:eb:1c:d1:95:85:
                    05:08:86:49:f3:24:84:56:c4:fc:5c:6e:a6:76:6f:
                    6c:87:4e:d2:6e:cd:48:2c:dc:3c:55:c1:c1:23:74:
                    0f:c1:43:93:18:b1:b5:41:39:61:b3:7f:0f:33:f1:
                    80:0c:c6:d1:64:7f:d7:a1:ca:80:23:b2:bc:1a:88:
                    b3:cf:03:61:3e:3b:ae:4d:86:c3:75:a5:aa:b7:7d:
                    e9:76:2c:23:9b:e2:37:d5:7e:61:fa:ae:ab:13:49:
                    b7:3b:4b:c4:99:14:54:7c:aa:6d:da:df:c7:66:b8:
                    0b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:1F:91:57:E1:D1:0D:B5:3E:29:C3:C4:89:5D:B3:3F:1D:87:B7:37
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142658.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a008::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:43:7b:bc:89:09:12:70:5c:97:c6:ca:e3:a7:e3:34:16:fe:
         b0:9f:67:a9:89:a4:44:05:26:fe:93:d2:f0:7d:38:92:4c:f9:
         22:49:02:35:0f:0e:23:d1:de:d1:03:00:e8:44:5d:96:d7:49:
         f0:18:b3:27:31:1d:73:01:f4:97:3b:6f:34:5f:9c:e7:dc:3a:
         9c:73:f2:7a:cf:8b:af:34:7a:5c:e7:70:93:3a:c9:6d:a1:ad:
         65:6b:0f:8c:f0:de:81:50:62:5b:71:63:c8:ed:8c:69:8b:93:
         54:fe:92:67:01:a4:e8:18:84:88:fa:4e:0d:86:29:f2:45:64:
         27:1c:61:a5:90:2b:1c:30:8f:87:f9:f2:72:98:73:7f:42:0f:
         fa:db:41:6a:f6:c2:3b:f3:b7:eb:f3:cd:47:42:bc:ef:99:04:
         86:1b:68:79:91:0a:86:d1:8a:0b:42:1b:47:fa:42:2d:78:1e:
         7b:0a:7e:a5:7f:2d:d0:dd:19:3e:bc:7e:c1:a1:18:16:32:21:
         09:0b:d7:db:ca:b0:b1:cc:9b:5b:b4:8f:13:7e:27:ed:cf:0c:
         6e:ce:2b:de:fd:bb:5e:dc:0d:ff:df:d6:d3:fc:85:eb:e3:0b:
         ee:0b:15:78:a1:62:72:e6:f7:46:0d:19:8c:49:3e:cb:fd:6e:
         84:0d:cc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----