Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142699.roa
File:                     AS142699.roa (raw, json)
Hash identifier:          geu6xifU8xRC2qOI9DjBE8m3JKdbUoECgZEnX09EPao=
Subject key identifier:   F6:69:36:C5:F5:16:7B:39:4B:1E:2C:8B:76:C1:75:F0:27:E0:E4:67
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3EAAB0D8F5E08B0810F2F8B91071B252D6AF57CB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142699.roa
Signing time:             Tue 26 May 2026 06:12:28 +0000
ROA not before:           Tue 26 May 2026 06:07:28 +0000
ROA not after:            Tue 25 May 2027 06:12:28 +0000
asID:                     142699
IP address blocks:        240a:a031::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:aa:b0:d8:f5:e0:8b:08:10:f2:f8:b9:10:71:b2:52:d6:af:57:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:07:28 2026 GMT
            Not After : May 25 06:12:28 2027 GMT
        Subject: CN=F66936C5F5167B394B1E2C8B76C175F027E0E467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:72:7d:f2:42:c8:6a:ad:c3:12:7a:b2:f3:10:
                    42:78:9d:85:c9:85:2a:c6:0d:00:75:e9:dc:47:0c:
                    2c:3e:fc:c2:96:a4:0e:7d:a8:8c:87:6b:a7:73:f1:
                    13:65:1a:94:b9:58:52:38:3c:f0:20:d6:cc:33:33:
                    d2:bc:9c:6d:dc:8b:05:e6:77:a5:3e:92:11:b7:ce:
                    7b:0b:cc:27:74:01:42:2f:13:19:fd:e4:33:f5:ec:
                    88:9b:55:a7:b7:c0:f0:4a:ee:7f:b1:6b:58:11:ab:
                    96:b2:14:a6:e0:01:fd:c6:56:14:48:cf:da:06:37:
                    98:0a:19:bb:ee:3c:87:30:a7:80:20:73:24:50:8e:
                    2a:f0:db:2e:12:6f:a7:cf:07:91:f0:c4:5b:eb:36:
                    e3:65:92:5b:63:c7:ea:08:47:44:07:1a:4f:fd:bd:
                    d5:a9:9a:1b:b0:79:3f:cd:5f:5c:48:76:63:82:2b:
                    92:51:a9:2e:48:0e:c0:31:b2:88:6b:3e:43:97:b6:
                    57:46:d8:5f:f4:97:c7:3b:17:74:ee:4e:75:da:30:
                    19:83:4a:9f:a3:98:1f:b1:0b:99:1a:b0:0c:a0:62:
                    ae:e9:97:ac:2b:92:63:45:f2:ce:b0:88:12:ce:a7:
                    66:1a:38:98:b2:44:b0:72:da:9a:56:2a:75:96:92:
                    1b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:69:36:C5:F5:16:7B:39:4B:1E:2C:8B:76:C1:75:F0:27:E0:E4:67
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142699.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a031::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:b6:20:d7:c9:30:71:39:5f:19:50:5b:3d:61:67:d1:07:61:
         0d:e7:6e:3d:c7:76:a7:6f:d9:a7:8b:06:03:b9:ec:a1:36:36:
         77:c1:94:56:a5:6b:43:de:03:42:f5:8e:d1:f9:ea:aa:85:fe:
         67:6b:10:4f:b1:82:3b:de:04:e6:10:72:dc:99:74:b8:4c:c7:
         7b:9b:21:8f:fe:f8:75:74:f2:fa:a9:c9:e5:43:b9:09:4b:52:
         05:69:51:49:d1:4a:09:6a:e1:8a:6a:cc:8a:13:9d:c3:69:c2:
         22:d4:0d:94:0f:f9:a5:3a:8a:fb:b8:f7:92:9a:0f:3d:e9:58:
         92:dc:97:8a:2d:f9:98:24:ac:ea:0b:74:d6:9d:01:c7:7f:e9:
         6d:98:dd:f1:14:74:f0:cc:39:21:71:f9:a1:d3:41:27:1d:1d:
         35:4d:c1:ee:45:03:43:c3:de:42:f1:7b:f0:40:55:a4:0b:29:
         6f:02:e5:36:f5:45:16:f0:3e:26:c6:c0:8d:b9:74:99:d1:54:
         84:f7:08:2a:65:7c:e6:ff:f4:1b:db:07:b3:1c:7f:a6:c3:0b:
         98:7f:ef:fe:c8:c3:39:3c:a1:1e:52:54:66:bb:5b:df:00:eb:
         9d:80:a1:1d:8e:2d:ba:a3:01:b7:94:79:72:5f:31:60:10:25:
         be:6c:f3:0b
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUPqqw2PXgiwgQ8vi5EHGyUtavV8swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjA3MjhaFw0yNzA1MjUwNjEyMjhaMDMxMTAvBgNV
BAMTKEY2NjkzNkM1RjUxNjdCMzk0QjFFMkM4Qjc2QzE3NUYwMjdFMEU0NjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIcn3yQshqrcMSerLzEEJ4nYXJ
hSrGDQB16dxHDCw+/MKWpA59qIyHa6dz8RNlGpS5WFI4PPAg1swzM9K8nG3ciwXm
d6U+khG3znsLzCd0AUIvExn95DP17IibVae3wPBK7n+xa1gRq5ayFKbgAf3GVhRI
z9oGN5gKGbvuPIcwp4AgcyRQjirw2y4Sb6fPB5HwxFvrNuNlkltjx+oIR0QHGk/9
vdWpmhuweT/NX1xIdmOCK5JRqS5IDsAxsohrPkOXtldG2F/0l8c7F3TuTnXaMBmD
Sp+jmB+xC5kasAygYq7pl6wrkmNF8s6wiBLOp2YaOJiyRLBy2ppWKnWWkhuFAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU9mk2xfUWezlLHiyLdsF18Cfg5GcwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyNjk5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqgMTANBgkqhkiG9w0BAQsFAAOCAQEAWbYg
18kwcTlfGVBbPWFn0QdhDeduPcd2p2/Zp4sGA7nsoTY2d8GUVqVrQ94DQvWO0fnq
qoX+Z2sQT7GCO94E5hBy3Jl0uEzHe5shj/74dXTy+qnJ5UO5CUtSBWlRSdFKCWrh
imrMihOdw2nCItQNlA/5pTqK+7j3kpoPPelYktyXii35mCSs6gt01p0Bx3/pbZjd
8RR08Mw5IXH5odNBJx0dNU3B7kUDQ8PeQvF78EBVpAspbwLlNvVFFvA+JsbAjbl0
mdFUhPcIKmV85v/0G9sHsxx/psMLmH/v/sjDOTyhHlJUZrtb3wDrnYChHY4tuqMB
t5R5cl8xYBAlvmzzCw==
-----END CERTIFICATE-----