Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142712.roa
File:                     AS142712.roa (raw, json)
Hash identifier:          FGJha7rmsVGpV0BWI1aVxao/lQUGQb0iAWZfpeEUaXs=
Subject key identifier:   EF:FE:5A:8C:76:F1:9A:C1:1A:45:47:37:82:E8:44:AD:D0:7F:BA:74
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       238985BBCA27918E0DD1193A990DA12EFFCB47F3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142712.roa
Signing time:             Fri 22 May 2026 06:58:50 +0000
ROA not before:           Fri 22 May 2026 06:53:50 +0000
ROA not after:            Fri 21 May 2027 06:58:50 +0000
asID:                     142712
IP address blocks:        240a:a03e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:89:85:bb:ca:27:91:8e:0d:d1:19:3a:99:0d:a1:2e:ff:cb:47:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:50 2026 GMT
            Not After : May 21 06:58:50 2027 GMT
        Subject: CN=EFFE5A8C76F19AC11A45473782E844ADD07FBA74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:42:8f:3e:62:79:32:07:e5:35:bd:2d:24:ff:
                    e3:9a:2c:51:53:40:08:5a:79:0b:3e:cb:bc:b5:15:
                    55:5b:30:1f:e3:ce:f3:de:29:8b:f9:eb:34:10:8a:
                    56:86:d0:ae:a5:42:7c:c6:ad:b6:80:a1:a2:4e:e1:
                    d8:97:0e:fb:0c:0f:67:4e:e6:be:59:3a:07:69:a0:
                    8e:59:e6:5f:7c:dc:b6:5f:c4:af:62:72:ac:48:c8:
                    8d:42:04:88:0a:b2:ac:9c:8c:82:97:18:d9:59:e2:
                    0f:9c:b9:16:4d:9c:8c:81:62:95:fb:af:2d:20:0c:
                    25:f9:bd:3a:da:98:0d:0d:62:fc:74:18:f5:e5:20:
                    43:c5:f4:22:57:e5:bc:f0:a3:57:ec:8b:08:50:ac:
                    10:c8:b3:a6:e3:d6:2b:74:30:e3:fc:b5:64:ea:35:
                    7e:99:e3:a2:11:80:ce:f6:e8:67:f8:e9:43:6d:14:
                    b4:47:98:f3:74:61:04:be:8b:ae:b1:42:ff:24:96:
                    83:d2:d2:f9:d0:28:f2:b9:c7:d7:98:94:6d:eb:c9:
                    31:17:91:f6:5b:a1:31:ff:67:42:52:a8:90:5d:9d:
                    39:87:a1:48:ff:05:e6:52:db:5c:fa:6b:af:66:b8:
                    55:88:91:8c:55:c0:4b:c8:69:39:65:54:67:4c:6c:
                    02:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:FE:5A:8C:76:F1:9A:C1:1A:45:47:37:82:E8:44:AD:D0:7F:BA:74
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142712.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a03e::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:e5:38:91:2e:4d:5d:23:3b:a3:6a:22:98:39:ca:43:24:e3:
         d3:7d:8f:7d:a1:93:8c:84:bc:4b:ce:ca:6a:72:6a:a3:18:1a:
         64:c2:93:df:89:99:b6:39:c3:ae:f6:b6:19:8f:3a:03:f9:5a:
         66:64:01:ac:f4:1c:07:64:c8:66:74:2f:f5:55:d0:ea:c8:20:
         63:b0:0c:69:4e:81:71:89:cc:bb:7d:bf:a1:65:8e:2a:59:d7:
         52:70:5f:b6:5f:96:2c:43:08:05:d8:38:d5:98:e5:01:43:50:
         df:46:00:f9:89:c8:7f:6e:85:ac:05:f2:11:c6:ad:b7:ac:96:
         4a:e6:be:0a:93:0b:4a:aa:c8:ab:cb:7f:4b:44:d1:40:48:bc:
         3f:d0:b5:7c:15:ff:28:53:16:71:3b:5c:bf:b6:cf:95:f0:29:
         21:83:3e:4d:2a:b0:6b:76:89:c5:b9:be:76:dd:c4:e0:1d:6c:
         e1:a4:57:99:87:49:c4:9d:a1:9e:d7:74:f4:1f:d2:38:50:08:
         a9:a9:62:5a:50:2f:31:8f:65:52:6e:ac:34:79:16:0a:dd:7b:
         28:b7:4a:97:7a:2a:68:ce:cc:14:06:a3:d3:4a:1d:92:42:8a:
         99:39:fe:c8:21:43:27:77:3f:39:08:70:f1:97:2d:6f:53:b0:
         78:17:9b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----