Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142667.roa
File:                     AS142667.roa (raw, json)
Hash identifier:          YaiwkZp2bn76oqSdNFvetY4L9PZkv/eofdVvkAx1Rtc=
Subject key identifier:   F0:7F:81:62:EB:60:34:81:3F:35:DF:DD:28:E9:6F:72:24:DA:CF:FF
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       60E8F367E3C287E01E607562752807667798ACBE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142667.roa
Signing time:             Fri 22 May 2026 01:50:43 +0000
ROA not before:           Fri 22 May 2026 01:45:43 +0000
ROA not after:            Fri 21 May 2027 01:50:43 +0000
asID:                     142667
IP address blocks:        240a:a011::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e8:f3:67:e3:c2:87:e0:1e:60:75:62:75:28:07:66:77:98:ac:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:43 2026 GMT
            Not After : May 21 01:50:43 2027 GMT
        Subject: CN=F07F8162EB6034813F35DFDD28E96F7224DACFFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0d:9b:ab:b2:c0:32:23:2b:51:15:3b:72:77:
                    36:be:71:9e:9d:8e:0a:0c:0a:aa:49:8a:e8:34:41:
                    2e:50:c4:8f:fc:24:81:58:3c:c5:d0:87:4b:c9:f1:
                    ee:16:1b:bc:e2:76:cb:4d:c7:96:3c:41:bb:b8:9f:
                    a3:c9:95:ac:73:47:f5:94:31:98:df:89:68:6c:b4:
                    e9:96:93:65:d9:d6:2b:40:e6:31:01:38:a7:7c:91:
                    7b:25:8d:4c:44:e9:6a:72:a9:84:de:8b:46:84:b9:
                    ed:88:45:59:14:bb:2c:11:84:36:c5:82:f4:f8:b8:
                    b9:0b:5a:d2:a9:bb:02:86:a6:84:ac:e4:5c:4d:21:
                    e2:53:01:86:c9:8e:6d:04:c0:1a:fd:df:27:c1:ec:
                    2a:5a:52:b9:b9:06:f5:08:8e:7f:c6:13:24:ff:c6:
                    fd:7d:9a:23:a5:60:60:b9:c2:f1:13:ce:a5:ec:1c:
                    1c:92:51:bc:08:e8:ed:d1:f8:8b:c5:ef:1f:15:6d:
                    04:04:5d:68:ee:f6:51:5e:30:99:40:6d:f4:26:92:
                    47:d0:65:b3:8c:85:64:70:fb:ed:9b:89:7d:ef:e5:
                    27:0a:19:a8:24:37:12:3e:09:87:cf:56:99:b7:2d:
                    9c:2d:9a:c7:99:84:e6:0d:b9:b7:f3:39:b4:f2:03:
                    52:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:7F:81:62:EB:60:34:81:3F:35:DF:DD:28:E9:6F:72:24:DA:CF:FF
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142667.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a011::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:13:da:d0:10:b3:37:b5:c8:6f:36:c5:8b:f5:71:c0:8f:64:
         b3:e0:e3:ea:55:5e:2f:03:bc:70:27:af:1b:1f:8d:9f:49:f6:
         2a:34:52:d4:dc:b2:51:15:62:02:f9:de:ba:c6:93:bb:f8:70:
         52:41:2e:be:1a:05:4c:c9:a8:e9:57:eb:73:7f:d8:33:b2:26:
         de:18:69:33:b9:e4:93:3e:77:22:25:2e:4c:b4:75:c9:34:ab:
         61:9a:7d:1a:d2:3b:65:7f:79:5a:fb:85:d6:03:9e:c3:31:3b:
         77:fb:7a:61:50:e0:fc:0d:84:0b:97:1f:65:de:a7:74:3d:37:
         ef:82:12:c4:a4:47:61:10:54:c1:95:8f:be:43:a8:f1:54:aa:
         bd:d0:3c:bc:3b:85:66:fc:36:75:94:a6:cf:3b:60:7c:bc:43:
         24:8d:07:b0:b2:99:ed:22:21:22:8c:86:b0:30:a7:86:fe:6d:
         65:69:0f:3d:8a:42:d3:7f:8e:5a:ef:4a:ca:5b:06:0e:e0:45:
         e5:b2:49:9c:22:1f:e3:e7:bb:19:d0:90:65:81:67:18:7c:e7:
         e5:86:cb:b1:1b:6b:ec:68:b4:b3:f6:b1:4a:fb:4d:50:d7:ea:
         cd:f6:28:b6:7e:2f:67:66:b7:02:e9:05:28:5d:7e:50:23:a4:
         e4:43:97:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----