Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142678.roa
File:                     AS142678.roa (raw, json)
Hash identifier:          DklV8HQlghLffVlffinCYtW39SmMK90CMnJyRS/7XEc=
Subject key identifier:   13:3F:8E:2C:DD:7A:FB:DE:03:C9:E0:AE:DE:49:30:5E:D3:4B:D3:5A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0BE2C898840B40A96B205768F497C27825A63824
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142678.roa
Signing time:             Tue 26 May 2026 06:12:50 +0000
ROA not before:           Tue 26 May 2026 06:07:50 +0000
ROA not after:            Tue 25 May 2027 06:12:50 +0000
asID:                     142678
IP address blocks:        240a:a01c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:e2:c8:98:84:0b:40:a9:6b:20:57:68:f4:97:c2:78:25:a6:38:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:07:50 2026 GMT
            Not After : May 25 06:12:50 2027 GMT
        Subject: CN=133F8E2CDD7AFBDE03C9E0AEDE49305ED34BD35A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9d:85:05:36:57:f1:9d:12:c0:db:8d:26:49:
                    f8:f0:45:4c:e8:0c:56:f5:14:8f:94:ce:5f:74:04:
                    99:af:95:38:90:dc:06:c2:27:45:32:6b:d7:18:69:
                    0c:b1:5d:61:4e:21:05:99:ca:49:93:ef:ca:6d:2a:
                    b4:18:25:ad:1e:9c:c7:28:86:8c:63:d5:1e:b1:f5:
                    0f:91:3d:66:6c:0d:70:e3:1b:16:68:d2:43:e7:94:
                    b0:a4:a3:c3:59:9b:ab:ef:d4:ce:8f:b5:04:2d:a4:
                    f7:ee:8b:77:dd:ca:82:aa:01:d1:03:d0:c6:af:c1:
                    c8:2d:3d:cb:04:c9:89:f3:d1:39:f3:ac:0b:c6:13:
                    11:cd:54:55:5e:db:5d:b2:82:2f:85:46:e8:d1:75:
                    cd:73:d8:a1:e0:31:86:68:e1:4c:da:8e:90:b5:06:
                    8c:3e:44:7f:32:50:bf:78:ba:6d:96:ce:81:99:b5:
                    1c:87:a6:e3:fa:e4:72:e5:d0:5a:1c:30:37:3e:ce:
                    dc:50:f3:94:b9:72:0d:72:f9:2b:f9:ae:ba:87:ff:
                    56:23:dd:bc:f4:ec:57:26:0d:5a:3d:1a:38:6c:ef:
                    8c:88:65:aa:97:68:53:f6:97:e3:d1:37:cf:82:26:
                    03:17:b3:a4:83:ad:0b:a0:1c:a8:dc:86:62:51:de:
                    54:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:3F:8E:2C:DD:7A:FB:DE:03:C9:E0:AE:DE:49:30:5E:D3:4B:D3:5A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142678.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a01c::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:df:b5:f8:b4:83:22:82:a1:be:f8:ec:47:8d:61:6c:d9:29:
         78:2e:56:ab:91:d8:15:87:cc:e4:2c:7b:ad:5f:f6:8c:c4:fb:
         38:5f:8d:80:94:0c:da:9c:fa:d5:9a:09:77:a6:ff:07:0c:d0:
         6c:f1:98:31:98:27:d6:bc:5c:3d:9c:44:7d:0f:28:ed:8b:52:
         a1:33:3a:f5:e6:be:ea:4a:08:9f:b6:62:33:96:4e:4d:28:3a:
         60:99:4b:57:fa:47:0e:8e:29:cc:78:b4:67:76:c4:78:ef:75:
         19:e4:1e:3c:4a:c4:63:60:ea:3f:b5:8b:66:7b:01:0a:cd:86:
         b7:78:ee:6f:c3:29:f5:fd:52:a9:0a:eb:a9:aa:e6:58:4c:20:
         b5:1e:41:2d:92:c1:a4:b4:50:fa:d3:88:4a:c9:90:4a:1c:28:
         83:70:b5:92:14:87:57:73:d5:b0:d7:8d:50:ba:78:8c:e1:c6:
         3e:d2:d0:c7:4e:ef:d2:68:2a:92:31:2a:a5:8c:f8:5e:50:20:
         48:2e:5e:3d:6c:45:13:4b:af:be:e3:7d:09:80:e8:e7:eb:1b:
         57:48:63:5a:fe:b1:0b:60:30:9b:78:fe:a2:5c:aa:f0:ef:6e:
         ff:df:15:dd:c1:06:1a:39:17:76:83:84:2f:2b:cf:66:36:a3:
         56:d4:db:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----