Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142666.roa
File:                     AS142666.roa (raw, json)
Hash identifier:          myHz+HMfpWR33UMyun/pJikDsPvioeVvkjvi51reV54=
Subject key identifier:   91:C4:68:60:DE:0B:75:E4:C4:8A:9A:CD:81:A9:EA:D6:AB:62:32:7A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3F17F9F2C228EB28FEC76F49B3568077BFB47D26
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142666.roa
Signing time:             Mon 25 May 2026 01:51:23 +0000
ROA not before:           Mon 25 May 2026 01:46:23 +0000
ROA not after:            Mon 24 May 2027 01:51:23 +0000
asID:                     142666
IP address blocks:        240a:a010::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:17:f9:f2:c2:28:eb:28:fe:c7:6f:49:b3:56:80:77:bf:b4:7d:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:23 2026 GMT
            Not After : May 24 01:51:23 2027 GMT
        Subject: CN=91C46860DE0B75E4C48A9ACD81A9EAD6AB62327A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ef:c5:7c:d4:c7:a3:e1:0e:31:1c:71:de:8e:
                    d0:54:5e:a0:b0:04:59:14:cc:0b:bb:11:81:cd:fb:
                    d4:ab:7a:85:55:7e:d0:e2:09:cb:4f:0a:0d:d1:82:
                    a8:15:8b:59:bc:fe:c2:7a:55:5d:c8:5f:55:c8:9c:
                    4e:7c:17:b5:70:87:2e:69:23:50:55:a2:14:fb:9b:
                    67:57:ba:54:e1:24:1f:bb:05:cf:4f:c0:8f:22:b7:
                    98:2e:86:c3:f1:6e:57:ca:c9:36:f8:ce:a0:4f:e5:
                    1d:39:a5:40:ca:7a:e7:08:1a:84:94:98:66:23:c8:
                    e6:b3:4c:87:ca:66:79:d4:ca:bf:96:60:de:b6:29:
                    9b:38:2c:59:2f:02:9f:2a:2c:8d:e8:d1:66:df:98:
                    c5:8a:60:74:d5:30:91:35:13:dd:5d:4b:ae:f2:86:
                    91:f0:16:61:2c:c0:4e:ec:da:bd:28:ac:31:5a:b0:
                    36:63:cd:83:18:3c:52:48:a7:75:03:c4:31:ab:38:
                    ef:bf:d3:ba:42:c1:ab:9e:c3:d7:93:5d:32:f8:4e:
                    81:fc:d4:ae:6d:a7:11:11:6e:e1:16:90:3b:b6:19:
                    ac:e9:6f:f8:23:82:e5:11:b2:3b:c9:41:64:ac:e1:
                    2e:53:89:ff:64:6f:1b:99:66:46:f5:2c:4f:8a:67:
                    a4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C4:68:60:DE:0B:75:E4:C4:8A:9A:CD:81:A9:EA:D6:AB:62:32:7A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142666.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a010::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:64:92:67:d7:45:c0:ea:3c:96:04:3a:fd:54:a7:2a:a9:d4:
         54:c0:15:34:47:ad:a1:1b:1a:64:92:b1:a8:7b:a3:b5:5a:e6:
         9b:bd:46:34:f8:f9:de:5c:59:87:33:c0:7a:f8:4f:bc:06:e7:
         4e:35:67:7f:e5:58:bf:2d:f7:d7:8d:b7:df:cc:eb:fe:d3:89:
         ed:64:41:44:62:0d:46:e0:6d:3c:58:8c:9f:ac:fe:01:e4:19:
         90:c3:a7:71:41:7b:bd:4a:e3:2a:6a:75:fd:d7:63:7b:23:e6:
         67:f9:08:c8:04:57:70:ff:b8:e5:bd:8c:50:cb:c5:c7:5b:8a:
         37:b0:51:19:da:51:2b:29:3b:6e:d2:60:7e:53:76:f2:fe:4b:
         05:c5:1f:bf:2f:0e:b8:ad:08:0f:e1:78:44:97:98:08:01:89:
         d5:18:56:e7:23:a7:a7:af:4a:cf:9c:84:a6:71:b1:e0:bb:ee:
         bd:77:51:28:6b:ae:69:a0:7e:b5:25:fc:9e:0e:a1:04:e6:66:
         32:e0:31:61:51:3b:d6:4c:e7:b3:03:e9:00:05:60:73:a9:17:
         14:a8:b8:dd:58:86:72:14:d0:49:ae:0d:18:b8:a4:c7:98:6b:
         ec:82:8f:91:09:5a:40:be:38:ff:c9:72:1c:22:9c:83:3f:2f:
         7d:ff:3c:28
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUPxf58sIo6yj+x29Js1aAd7+0fSYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTQ2MjNaFw0yNzA1MjQwMTUxMjNaMDMxMTAvBgNV
BAMTKDkxQzQ2ODYwREUwQjc1RTRDNDhBOUFDRDgxQTlFQUQ2QUI2MjMyN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC778V81Mej4Q4xHHHejtBUXqCw
BFkUzAu7EYHN+9SreoVVftDiCctPCg3RgqgVi1m8/sJ6VV3IX1XInE58F7Vwhy5p
I1BVohT7m2dXulThJB+7Bc9PwI8it5guhsPxblfKyTb4zqBP5R05pUDKeucIGoSU
mGYjyOazTIfKZnnUyr+WYN62KZs4LFkvAp8qLI3o0WbfmMWKYHTVMJE1E91dS67y
hpHwFmEswE7s2r0orDFasDZjzYMYPFJIp3UDxDGrOO+/07pCwauew9eTXTL4ToH8
1K5tpxERbuEWkDu2Gazpb/gjguURsjvJQWSs4S5Tif9kbxuZZkb1LE+KZ6RlAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUkcRoYN4LdeTEiprNganq1qtiMnowHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyNjY2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqgEDANBgkqhkiG9w0BAQsFAAOCAQEAX2SS
Z9dFwOo8lgQ6/VSnKqnUVMAVNEetoRsaZJKxqHujtVrmm71GNPj53lxZhzPAevhP
vAbnTjVnf+VYvy33142338zr/tOJ7WRBRGINRuBtPFiMn6z+AeQZkMOncUF7vUrj
Kmp1/ddjeyPmZ/kIyARXcP+45b2MUMvFx1uKN7BRGdpRKyk7btJgflN28v5LBcUf
vy8OuK0ID+F4RJeYCAGJ1RhW5yOnp69Kz5yEpnGx4LvuvXdRKGuuaaB+tSX8ng6h
BOZmMuAxYVE71kznswPpAAVgc6kXFKi43ViGchTQSa4NGLikx5hr7IKPkQlaQL44
/8lyHCKcgz8vff88KA==
-----END CERTIFICATE-----