Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142711.roa
File:                     AS142711.roa (raw, json)
Hash identifier:          lR7ZTXp+miTOTvWrZBf3ehzAqvVIb29uDCSrdw8J8gk=
Subject key identifier:   AF:72:58:E6:00:77:DE:27:56:13:9E:EE:FA:5B:DF:C1:71:18:99:B8
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7BBD554D58A1E65C1EECC21727DFD4E5D2600FE8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142711.roa
Signing time:             Mon 25 May 2026 06:28:17 +0000
ROA not before:           Mon 25 May 2026 06:23:17 +0000
ROA not after:            Mon 24 May 2027 06:28:17 +0000
asID:                     142711
IP address blocks:        240a:a03d::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:bd:55:4d:58:a1:e6:5c:1e:ec:c2:17:27:df:d4:e5:d2:60:0f:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:17 2026 GMT
            Not After : May 24 06:28:17 2027 GMT
        Subject: CN=AF7258E60077DE2756139EEEFA5BDFC1711899B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fe:69:fe:5e:f6:05:77:9c:3b:3e:ed:ce:76:
                    76:24:a0:c6:79:f8:d6:9a:84:ae:17:71:2b:b4:c7:
                    71:95:27:fd:91:3b:91:4a:cc:8f:c3:ab:4c:6b:5f:
                    07:dd:cb:0d:04:c9:6e:a1:63:4f:ec:b0:91:6a:0b:
                    19:75:5c:97:a1:48:89:6f:17:f3:0f:00:e2:a6:c1:
                    26:b2:06:82:92:3f:be:29:75:cc:3e:7c:48:50:a7:
                    4b:86:ae:37:2a:70:3d:62:f2:7c:8a:d6:ea:bb:0e:
                    73:fe:11:67:cb:38:24:df:c8:67:d4:31:11:4e:a0:
                    a1:c7:92:cb:f8:21:ac:ee:6c:dd:95:f8:b2:a7:17:
                    46:29:a0:6d:52:e3:0f:7a:d2:a4:ac:d6:94:c9:30:
                    46:38:d9:35:3f:ee:62:b4:21:61:50:2d:27:f2:5a:
                    93:60:07:c8:e7:55:41:9b:a1:bc:49:fd:7b:31:98:
                    c4:21:e4:1c:d8:bb:25:37:91:b0:9b:33:05:59:76:
                    1c:a5:35:3d:d2:41:3b:1e:98:6c:e8:12:c2:ec:b0:
                    48:2d:57:cd:84:76:3e:ae:0e:3f:f9:47:1d:da:33:
                    46:2c:4f:22:86:8d:f7:49:8b:77:da:a5:ef:00:b6:
                    a0:66:41:73:0f:c4:f0:98:eb:42:f8:6a:a2:5d:5b:
                    85:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:72:58:E6:00:77:DE:27:56:13:9E:EE:FA:5B:DF:C1:71:18:99:B8
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142711.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a03d::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:d3:18:7e:5b:75:63:ac:d8:10:5a:f6:ac:9e:45:0d:f6:f6:
         01:78:a4:29:9d:9f:cf:82:f2:27:db:82:c8:2b:d3:ff:d1:fb:
         d2:91:4c:25:69:ab:ee:56:10:57:9e:7c:b8:10:84:ef:0c:98:
         18:50:d6:94:db:8e:f8:e1:00:09:4f:a8:2b:51:6b:fc:91:b7:
         ce:f9:11:f9:1b:ba:6a:22:00:5e:de:c5:e0:8d:cd:a8:88:45:
         15:b8:fd:cc:94:db:8c:d9:de:fe:af:76:49:76:ad:16:52:f6:
         a2:ce:3e:0b:d4:a4:2a:91:2b:32:d9:2a:27:3c:51:4a:7f:43:
         4b:82:9b:09:b0:5e:fa:22:a4:23:81:af:7f:b6:aa:ea:b7:04:
         2f:4d:c5:c8:a5:39:b1:97:54:55:f2:4f:a1:8c:5b:4a:b9:2b:
         d0:a1:c8:49:c8:7d:02:85:30:48:46:11:2c:8d:91:2e:14:31:
         fd:13:e9:99:7a:7f:01:21:e4:9f:33:78:61:6f:56:c1:ad:6f:
         1d:4b:2a:7d:99:e4:62:6f:7d:b2:f5:9f:07:b7:de:2e:66:39:
         65:bd:6c:77:f6:05:61:63:8f:ae:63:cf:38:df:7b:d1:88:79:
         20:24:ff:0e:37:a1:93:d4:41:07:5d:ea:4a:80:a0:00:54:3c:
         68:a2:a6:57
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUe71VTVih5lwe7MIXJ9/U5dJgD+gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjIzMTdaFw0yNzA1MjQwNjI4MTdaMDMxMTAvBgNV
BAMTKEFGNzI1OEU2MDA3N0RFMjc1NjEzOUVFRUZBNUJERkMxNzExODk5QjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb/mn+XvYFd5w7Pu3OdnYkoMZ5
+NaahK4XcSu0x3GVJ/2RO5FKzI/Dq0xrXwfdyw0EyW6hY0/ssJFqCxl1XJehSIlv
F/MPAOKmwSayBoKSP74pdcw+fEhQp0uGrjcqcD1i8nyK1uq7DnP+EWfLOCTfyGfU
MRFOoKHHksv4IazubN2V+LKnF0YpoG1S4w960qSs1pTJMEY42TU/7mK0IWFQLSfy
WpNgB8jnVUGbobxJ/XsxmMQh5BzYuyU3kbCbMwVZdhylNT3SQTsemGzoEsLssEgt
V82Edj6uDj/5Rx3aM0YsTyKGjfdJi3fape8AtqBmQXMPxPCY60L4aqJdW4URAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUr3JY5gB33idWE57u+lvfwXEYmbgwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyNzExLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqgPTANBgkqhkiG9w0BAQsFAAOCAQEAK9MY
flt1Y6zYEFr2rJ5FDfb2AXikKZ2fz4LyJ9uCyCvT/9H70pFMJWmr7lYQV558uBCE
7wyYGFDWlNuO+OEACU+oK1Fr/JG3zvkR+Ru6aiIAXt7F4I3NqIhFFbj9zJTbjNne
/q92SXatFlL2os4+C9SkKpErMtkqJzxRSn9DS4KbCbBe+iKkI4Gvf7aq6rcEL03F
yKU5sZdUVfJPoYxbSrkr0KHISch9AoUwSEYRLI2RLhQx/RPpmXp/ASHknzN4YW9W
wa1vHUsqfZnkYm99svWfB7feLmY5Zb1sd/YFYWOPrmPPON970Yh5ICT/Djehk9RB
B13qSoCgAFQ8aKKmVw==
-----END CERTIFICATE-----