Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142677.roa
File:                     AS142677.roa (raw, json)
Hash identifier:          lQZ3KjxmwQHt030MsxkMI95q9ouG0+qV5DTK6qrHLr8=
Subject key identifier:   A1:F9:CE:0E:66:1B:A7:E3:51:C8:EE:0A:B4:53:C9:75:33:04:3E:5B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       27103D318DAFD0E66023A2D40A43A09A93511B07
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142677.roa
Signing time:             Mon 25 May 2026 03:19:46 +0000
ROA not before:           Mon 25 May 2026 03:14:46 +0000
ROA not after:            Mon 24 May 2027 03:19:46 +0000
asID:                     142677
IP address blocks:        240a:a01b::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:10:3d:31:8d:af:d0:e6:60:23:a2:d4:0a:43:a0:9a:93:51:1b:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:46 2026 GMT
            Not After : May 24 03:19:46 2027 GMT
        Subject: CN=A1F9CE0E661BA7E351C8EE0AB453C97533043E5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:62:a6:f5:38:92:d3:9d:06:9a:b8:40:8f:f8:
                    66:46:b3:48:7b:68:5c:16:fa:13:c4:de:a5:d8:1d:
                    de:fe:bd:b4:33:7c:a7:f4:c9:d6:e4:32:ad:91:79:
                    f8:68:73:cb:fe:77:7a:a2:00:2c:fb:68:e2:0e:36:
                    4e:4a:43:17:09:35:52:93:68:c0:9c:93:d6:3b:08:
                    ee:d6:35:fd:82:5b:8e:7b:33:1f:26:eb:db:87:65:
                    4f:9e:02:bb:7a:cb:bf:f3:86:b2:a5:c1:e1:8d:c7:
                    23:65:de:fc:0e:5a:09:54:11:03:ea:4c:41:1d:00:
                    f7:50:3a:bc:40:26:12:da:25:0f:07:91:dc:3a:da:
                    72:15:44:26:d2:c8:69:c5:29:7e:a4:6c:ca:a9:07:
                    da:63:24:f1:83:c9:0c:bc:db:f8:46:57:c4:f4:0c:
                    f2:35:9f:61:e5:91:21:35:33:df:c3:89:c4:93:d0:
                    91:fc:bd:2a:56:7e:a1:22:df:b4:f7:6b:0e:88:a0:
                    3a:cc:b8:fb:3d:b6:ab:8b:06:d0:db:87:dc:40:e0:
                    dc:5a:2b:3d:e5:f5:74:8f:ec:33:04:14:3d:4c:4f:
                    8c:8f:06:ae:c4:c1:c7:66:f8:6d:63:4c:64:ef:35:
                    35:bc:6b:a7:fb:23:2f:5c:46:d0:60:de:b1:6a:10:
                    27:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F9:CE:0E:66:1B:A7:E3:51:C8:EE:0A:B4:53:C9:75:33:04:3E:5B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142677.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a01b::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:12:bc:c5:2a:6a:a7:9d:d2:f5:88:85:95:74:d8:3a:39:74:
         23:e2:08:86:6d:c7:0e:b3:61:e3:da:3e:31:4e:9b:5f:fb:01:
         ab:12:d1:73:92:4c:52:75:aa:65:63:dc:3a:11:f2:e1:70:0d:
         61:fe:d1:23:e1:a4:d0:9c:14:5c:8c:ea:94:9d:41:ab:6a:b6:
         6e:20:df:ae:f8:b5:67:aa:45:eb:a3:d4:9e:ae:a9:44:f2:6e:
         4f:4c:7f:f2:fa:35:49:79:1e:84:87:0b:c6:ac:78:69:89:c2:
         26:1d:0e:cf:e9:9f:23:32:97:37:f4:9b:6e:e3:49:a2:90:9f:
         34:73:67:8f:9c:88:5d:e6:6e:d4:2f:ff:1e:43:7c:b3:1d:27:
         79:e6:e3:e7:bb:ec:23:e4:4f:1c:8e:e0:02:01:25:bb:cf:e4:
         ec:e4:79:11:64:2e:60:02:a6:71:27:50:79:f0:5c:40:ce:90:
         9f:de:73:6c:0a:22:f8:34:a9:91:04:4e:87:26:93:17:10:2f:
         a8:86:3d:11:af:ff:90:bc:43:e2:29:29:ec:35:1a:f7:60:4a:
         5f:84:f3:b8:be:33:64:06:0c:4c:fc:41:4b:ef:3d:31:91:c3:
         e6:ec:e7:ea:be:94:d9:8f:85:13:a1:10:13:77:41:9d:1b:47:
         65:ee:4e:a6
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUJxA9MY2v0OZgI6LUCkOgmpNRGwcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMzE0NDZaFw0yNzA1MjQwMzE5NDZaMDMxMTAvBgNV
BAMTKEExRjlDRTBFNjYxQkE3RTM1MUM4RUUwQUI0NTNDOTc1MzMwNDNFNUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeYqb1OJLTnQaauECP+GZGs0h7
aFwW+hPE3qXYHd7+vbQzfKf0ydbkMq2Refhoc8v+d3qiACz7aOIONk5KQxcJNVKT
aMCck9Y7CO7WNf2CW457Mx8m69uHZU+eArt6y7/zhrKlweGNxyNl3vwOWglUEQPq
TEEdAPdQOrxAJhLaJQ8Hkdw62nIVRCbSyGnFKX6kbMqpB9pjJPGDyQy82/hGV8T0
DPI1n2HlkSE1M9/DicST0JH8vSpWfqEi37T3aw6IoDrMuPs9tquLBtDbh9xA4Nxa
Kz3l9XSP7DMEFD1MT4yPBq7Ewcdm+G1jTGTvNTW8a6f7Iy9cRtBg3rFqECfrAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUofnODmYbp+NRyO4KtFPJdTMEPlswHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyNjc3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqgGzANBgkqhkiG9w0BAQsFAAOCAQEAMRK8
xSpqp53S9YiFlXTYOjl0I+IIhm3HDrNh49o+MU6bX/sBqxLRc5JMUnWqZWPcOhHy
4XANYf7RI+Gk0JwUXIzqlJ1Bq2q2biDfrvi1Z6pF66PUnq6pRPJuT0x/8vo1SXke
hIcLxqx4aYnCJh0Oz+mfIzKXN/SbbuNJopCfNHNnj5yIXeZu1C//HkN8sx0neebj
57vsI+RPHI7gAgElu8/k7OR5EWQuYAKmcSdQefBcQM6Qn95zbAoi+DSpkQROhyaT
FxAvqIY9Ea//kLxD4ikp7DUa92BKX4TzuL4zZAYMTPxBS+89MZHD5uzn6r6U2Y+F
E6EQE3dBnRtHZe5Opg==
-----END CERTIFICATE-----