Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142687.roa
File:                     AS142687.roa (raw, json)
Hash identifier:          avKkE3OVBrBXjeH+MwICEHEWyoLrgZT09z6I4nJeKXs=
Subject key identifier:   BD:49:DB:D7:B7:AC:C8:F0:ED:7D:65:7C:11:A8:00:5D:1F:65:F2:92
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5A6CA4D881C4858AE0E61F9C02700CF610C07309
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142687.roa
Signing time:             Mon 25 May 2026 01:20:25 +0000
ROA not before:           Mon 25 May 2026 01:15:25 +0000
ROA not after:            Mon 24 May 2027 01:20:25 +0000
asID:                     142687
IP address blocks:        240a:a025::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:6c:a4:d8:81:c4:85:8a:e0:e6:1f:9c:02:70:0c:f6:10:c0:73:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:15:25 2026 GMT
            Not After : May 24 01:20:25 2027 GMT
        Subject: CN=BD49DBD7B7ACC8F0ED7D657C11A8005D1F65F292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:87:3c:1d:62:fe:be:9e:a8:eb:16:2b:9d:16:
                    3e:ba:d3:17:e3:78:33:ac:ad:13:e5:46:e4:33:bd:
                    c3:6e:f3:cf:33:aa:ec:b0:88:f1:5b:0f:d3:10:ec:
                    ee:92:a0:fe:e7:0d:4b:0b:e0:43:d5:d6:9b:dc:30:
                    71:58:68:58:ac:84:9d:fb:c3:96:1d:9f:90:05:9a:
                    48:55:21:2b:9c:3d:f0:d6:24:55:cc:0e:03:44:53:
                    92:63:91:6b:18:8c:9a:d4:90:85:29:bb:bf:ff:b9:
                    ab:fc:bf:22:72:db:63:c2:7b:59:9f:24:39:c2:1f:
                    d2:ce:a8:c7:ad:c8:b1:d8:59:d4:e9:62:c6:55:0c:
                    c4:58:c0:aa:90:de:40:32:0c:29:a6:a4:67:11:88:
                    86:64:18:76:94:ac:41:4b:42:fb:a7:52:d2:ac:6f:
                    00:43:45:10:ab:01:fb:27:93:24:b1:a3:8c:d1:18:
                    61:2c:83:84:45:6d:c1:b5:8b:8e:a5:91:ab:5c:ce:
                    c1:2a:f4:bd:45:21:b4:5f:2c:d5:d9:aa:71:ba:1a:
                    3a:8a:93:74:15:30:b4:0d:e1:b6:f1:e6:38:1d:ec:
                    68:30:34:cf:10:b3:53:80:11:5c:1e:c5:99:0e:a8:
                    e8:84:6d:a5:8e:26:0f:e0:0d:ce:d6:00:2b:5b:d3:
                    19:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:49:DB:D7:B7:AC:C8:F0:ED:7D:65:7C:11:A8:00:5D:1F:65:F2:92
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142687.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a025::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:92:0a:05:84:a4:55:57:ed:60:62:88:41:81:ff:54:c4:65:
         43:ca:fb:d6:78:da:61:e7:f5:96:b8:53:31:a8:0b:ff:5d:05:
         99:da:24:e2:e1:33:b3:de:0a:95:cd:6d:5f:05:20:1d:d1:4d:
         82:77:3f:33:09:a4:8b:58:f2:05:70:a8:f8:7d:af:ca:e8:7f:
         e1:bf:b9:76:6a:45:00:f1:22:16:85:11:cb:2e:c9:51:3f:23:
         2a:71:43:23:3b:ca:0f:4f:8c:05:0d:f0:66:b8:7b:02:5c:9b:
         7f:e7:95:3d:d3:f5:88:94:ed:7a:0e:a4:81:6f:fd:70:6f:4a:
         8b:9f:80:ef:05:13:d5:a9:34:49:fa:16:09:90:8d:45:ee:98:
         5a:d4:78:10:73:ec:b4:9b:b0:bc:98:57:2c:bc:5d:ef:82:88:
         7f:ef:ec:f4:83:14:4d:7f:e5:6a:10:73:cd:85:e7:60:8e:32:
         a5:f2:a1:fc:5f:38:da:bf:49:43:56:f0:ab:b5:cc:be:7a:e7:
         6b:63:77:46:9f:d5:86:e0:ad:66:44:87:78:54:30:fe:f1:10:
         34:af:20:ae:de:cb:8d:8d:3f:ba:d2:ef:d3:61:48:86:67:0c:
         dc:02:e5:6b:48:d5:36:f7:b1:4f:14:61:fc:0c:e6:50:66:a5:
         bf:ae:16:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----