Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142707.roa
File:                     AS142707.roa (raw, json)
Hash identifier:          aKXzfy7vUifNXDKZJ4N/IrpFEodqnt2Lj1dX7A97dUc=
Subject key identifier:   48:AE:F8:A0:56:7B:41:33:5F:E7:A9:A6:89:83:F0:C0:15:EE:6A:84
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       56FC364E8E49D87760146D7C9F15002A12C8339F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142707.roa
Signing time:             Fri 22 May 2026 04:27:14 +0000
ROA not before:           Fri 22 May 2026 04:22:14 +0000
ROA not after:            Fri 21 May 2027 04:27:14 +0000
asID:                     142707
IP address blocks:        240a:a039::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:fc:36:4e:8e:49:d8:77:60:14:6d:7c:9f:15:00:2a:12:c8:33:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:22:14 2026 GMT
            Not After : May 21 04:27:14 2027 GMT
        Subject: CN=48AEF8A0567B41335FE7A9A68983F0C015EE6A84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ba:fc:78:df:94:cf:b7:66:d4:9f:93:c5:dc:
                    b4:a3:58:02:9b:58:43:cf:f1:64:49:87:a6:79:81:
                    fa:d8:5c:88:33:a5:c4:65:06:33:50:d5:33:b6:f9:
                    dd:c5:14:60:a2:31:ae:84:b5:04:65:ae:d0:36:52:
                    c6:ef:8d:75:cb:61:4c:2b:ba:e1:f4:b6:0a:a6:9c:
                    3f:33:20:5b:f9:18:cf:2b:84:13:83:db:ea:6a:de:
                    87:97:70:fc:20:43:ac:12:76:3b:1d:7a:d3:e3:48:
                    c9:41:7a:a5:b8:ff:04:34:a7:90:1f:af:6f:b8:93:
                    b6:9d:4c:ac:ac:30:02:f6:76:68:e2:ed:be:93:21:
                    a4:0f:65:d8:e5:dc:5b:e8:c4:c1:61:1a:9c:ea:eb:
                    a5:9c:10:d8:bb:a8:e0:7a:f7:b0:65:84:ee:af:a1:
                    31:7c:74:0e:0b:74:9e:38:9c:18:11:43:01:6b:38:
                    00:ea:5a:15:41:68:e4:5f:ad:ea:b6:0c:bc:5e:41:
                    9f:39:0d:a5:ce:27:e6:9e:15:c5:39:41:f5:e5:76:
                    ee:43:9b:f7:ef:aa:b1:62:de:b2:90:e2:ee:8b:6c:
                    3d:9c:c0:4e:90:1b:84:c0:96:f9:71:d2:41:9b:08:
                    ec:b6:d4:a8:2d:cd:b3:16:e9:96:95:08:9f:12:86:
                    94:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:AE:F8:A0:56:7B:41:33:5F:E7:A9:A6:89:83:F0:C0:15:EE:6A:84
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142707.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a039::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:21:e7:57:e0:e5:f9:03:4e:d3:74:78:44:bd:85:51:93:ad:
         03:6f:bf:47:3c:22:4b:0f:b7:1d:c9:1d:0c:f1:34:ec:a5:6a:
         07:0b:6c:9a:9b:6b:5b:64:e5:bf:69:c2:6b:fc:a9:9d:37:6d:
         6e:4d:73:7c:6c:71:5e:2a:bf:f3:c5:ee:bd:ef:ed:f1:50:1b:
         af:14:8f:3e:97:ac:b9:42:42:3e:7d:50:67:bd:a4:49:88:f7:
         a5:bd:81:75:13:1e:e8:87:e9:df:7c:df:1b:95:13:ba:00:26:
         56:79:a4:8f:42:c2:ac:a0:fe:6b:5d:50:78:33:8e:f4:a4:2d:
         d2:58:b9:13:3c:58:21:a1:d1:2a:c5:0e:e3:81:a5:76:60:db:
         dc:6e:eb:42:74:70:6b:69:d4:97:fc:cf:d3:d6:b5:f9:8c:87:
         75:aa:1d:29:c7:fa:fe:5f:08:b7:a2:d0:d3:da:e6:6b:c0:c3:
         22:0b:9c:21:8e:9c:4b:46:24:c0:71:16:ec:07:b5:29:64:d0:
         c8:d8:25:49:73:26:4a:c3:53:bd:e7:87:ff:14:60:10:4b:8a:
         ae:45:3f:b2:96:f2:21:8f:bf:d6:10:7b:c8:ed:3f:e5:cd:5d:
         c4:80:28:f5:27:6e:d0:f7:41:85:68:47:75:44:a9:d9:e8:67:
         f1:f3:1d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----