Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142700.roa
File:                     AS142700.roa (raw, json)
Hash identifier:          RoFpbnYTeNFQ+D6ANRZwlcAf90/4MfLr3f1ulHJYnKg=
Subject key identifier:   F3:CA:3B:FC:FF:FB:C6:F7:3E:F2:BF:B6:40:77:91:01:92:02:95:41
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0F5CFE12B5BC1C9B7000013A8CB398143CB29FDE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142700.roa
Signing time:             Tue 26 May 2026 03:17:01 +0000
ROA not before:           Tue 26 May 2026 03:12:01 +0000
ROA not after:            Tue 25 May 2027 03:17:01 +0000
asID:                     142700
IP address blocks:        240a:a032::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:5c:fe:12:b5:bc:1c:9b:70:00:01:3a:8c:b3:98:14:3c:b2:9f:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:12:01 2026 GMT
            Not After : May 25 03:17:01 2027 GMT
        Subject: CN=F3CA3BFCFFFBC6F73EF2BFB64077910192029541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:82:28:75:9f:02:f0:06:06:ff:4a:02:e1:dc:
                    6c:e1:2c:78:f2:3e:5c:82:74:17:e6:99:33:80:a7:
                    f6:31:5d:a6:e7:5c:2f:4a:89:3d:ff:ed:22:86:b5:
                    77:50:49:62:b5:6a:0f:f4:54:99:b3:a4:46:3e:01:
                    de:ec:c6:36:55:92:97:99:12:5e:e6:cd:7e:ac:84:
                    f0:40:8d:5d:fa:26:c9:83:9c:74:39:fb:8f:ef:8c:
                    1e:1a:d4:10:c4:f2:8a:43:79:9a:d9:e9:bd:61:32:
                    ef:cb:87:cc:8e:32:e8:f3:9b:aa:32:55:0b:cb:ac:
                    59:59:f3:62:fd:22:be:74:5f:28:df:dc:6b:aa:e1:
                    f1:c8:4f:c1:ed:f0:68:31:8e:78:40:c8:da:e3:9f:
                    c2:eb:72:95:79:9e:32:77:33:cd:e7:50:27:f1:7c:
                    40:ae:07:57:22:0c:f3:39:6a:75:c8:c0:26:84:62:
                    2f:3f:79:e6:2f:9a:30:8e:24:8c:4d:cf:01:7a:7e:
                    ca:b2:57:5d:dc:46:35:7d:d9:b0:07:49:ef:37:36:
                    c4:34:23:ab:47:70:37:dc:d5:67:c1:b0:ac:c6:7c:
                    1d:89:d7:57:46:08:54:6a:1e:a1:5e:09:6c:d6:54:
                    30:81:b0:c9:56:dc:1b:e3:dc:24:43:d5:f4:e2:af:
                    79:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CA:3B:FC:FF:FB:C6:F7:3E:F2:BF:B6:40:77:91:01:92:02:95:41
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142700.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a032::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:69:05:da:4a:ec:0c:c8:d8:1a:b4:0d:a8:45:f5:b5:05:cc:
         c9:b2:fc:d8:64:7b:6e:2d:de:53:0d:ac:76:e4:44:d6:b5:ea:
         26:b1:4a:39:ad:da:a1:ff:b0:12:c2:7d:fd:92:40:a0:d8:d7:
         b6:99:ca:3b:6b:75:99:a5:2d:15:26:6a:38:96:ac:8c:49:16:
         9b:0c:78:d5:df:36:de:c2:f9:23:05:40:71:b6:5e:c1:5c:b9:
         1f:89:92:f5:40:41:7f:6b:d8:51:04:11:6c:e5:2b:e1:91:f8:
         98:54:cd:2b:aa:9e:cf:78:46:3e:f1:0b:9d:84:e5:c8:61:02:
         2f:b4:86:cb:26:1b:fe:31:c7:18:b3:9a:38:53:e6:b5:26:d8:
         be:60:4f:c1:f7:20:d8:75:20:09:53:67:50:fd:94:40:ea:fe:
         33:6c:76:34:71:ff:5c:30:d5:f2:0e:f4:b7:fa:d8:dd:42:4a:
         4d:86:85:99:51:0e:e3:5c:d5:ea:3f:22:9f:12:b4:51:b5:ed:
         7b:c1:d2:82:f4:32:eb:1d:f4:e5:16:5d:f9:75:6f:44:31:10:
         06:1b:04:ed:68:89:e5:42:0b:9e:bd:b4:fe:57:53:9f:24:ee:
         5e:33:42:ef:da:a4:f8:b1:c5:61:fb:34:e3:03:89:36:f8:d4:
         75:84:f1:74
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUD1z+ErW8HJtwAAE6jLOYFDyyn94wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMzEyMDFaFw0yNzA1MjUwMzE3MDFaMDMxMTAvBgNV
BAMTKEYzQ0EzQkZDRkZGQkM2RjczRUYyQkZCNjQwNzc5MTAxOTIwMjk1NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXgih1nwLwBgb/SgLh3GzhLHjy
PlyCdBfmmTOAp/YxXabnXC9KiT3/7SKGtXdQSWK1ag/0VJmzpEY+Ad7sxjZVkpeZ
El7mzX6shPBAjV36JsmDnHQ5+4/vjB4a1BDE8opDeZrZ6b1hMu/Lh8yOMujzm6oy
VQvLrFlZ82L9Ir50Xyjf3Guq4fHIT8Ht8GgxjnhAyNrjn8LrcpV5njJ3M83nUCfx
fECuB1ciDPM5anXIwCaEYi8/eeYvmjCOJIxNzwF6fsqyV13cRjV92bAHSe83NsQ0
I6tHcDfc1WfBsKzGfB2J11dGCFRqHqFeCWzWVDCBsMlW3Bvj3CRD1fTir3nLAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU88o7/P/7xvc+8r+2QHeRAZIClUEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyNzAwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqgMjANBgkqhkiG9w0BAQsFAAOCAQEALGkF
2krsDMjYGrQNqEX1tQXMybL82GR7bi3eUw2sduRE1rXqJrFKOa3aof+wEsJ9/ZJA
oNjXtpnKO2t1maUtFSZqOJasjEkWmwx41d823sL5IwVAcbZewVy5H4mS9UBBf2vY
UQQRbOUr4ZH4mFTNK6qez3hGPvELnYTlyGECL7SGyyYb/jHHGLOaOFPmtSbYvmBP
wfcg2HUgCVNnUP2UQOr+M2x2NHH/XDDV8g70t/rY3UJKTYaFmVEO41zV6j8inxK0
UbXte8HSgvQy6x305RZd+XVvRDEQBhsE7WiJ5UILnr20/ldTnyTuXjNC79qk+LHF
Yfs04wOJNvjUdYTxdA==
-----END CERTIFICATE-----