Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142719.roa
File:                     AS142719.roa (raw, json)
Hash identifier:          5PnBX/OkXFIiNd0KugccbHRbx8jaFbw/X9RD1N3KCWE=
Subject key identifier:   07:EA:C4:A4:1E:06:0F:ED:0B:2F:97:BB:9E:DC:95:21:85:D1:AB:2B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6A1DDDF83992994101782477C094E35C68CFA766
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142719.roa
Signing time:             Fri 22 May 2026 02:48:02 +0000
ROA not before:           Fri 22 May 2026 02:43:02 +0000
ROA not after:            Fri 21 May 2027 02:48:02 +0000
asID:                     142719
IP address blocks:        240a:a045::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:1d:dd:f8:39:92:99:41:01:78:24:77:c0:94:e3:5c:68:cf:a7:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:43:02 2026 GMT
            Not After : May 21 02:48:02 2027 GMT
        Subject: CN=07EAC4A41E060FED0B2F97BB9EDC952185D1AB2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:42:ac:b4:3e:90:94:56:5a:fb:f7:ba:13:21:
                    60:88:a5:c7:40:b6:a8:67:d0:5a:5f:91:f3:12:60:
                    39:c5:d2:3b:dc:48:de:91:65:6e:b9:21:70:57:e0:
                    7b:66:4a:f7:5a:4b:fe:eb:e7:c8:31:29:a5:a1:14:
                    d8:1a:ff:e9:87:ed:95:d4:d9:37:47:de:62:b2:03:
                    1e:3a:6d:71:e8:47:6e:16:58:29:f3:82:88:f2:e3:
                    c8:21:40:cd:fb:d3:c3:1a:07:40:fb:11:8f:d0:76:
                    aa:8d:1a:5c:7a:af:ac:8a:c4:99:9a:a4:18:8d:26:
                    8a:2a:d7:73:48:7c:7d:75:6c:7e:3d:7e:8b:bf:ec:
                    02:4d:ec:0e:e6:84:97:b4:8c:27:02:69:dd:c5:ae:
                    d3:09:09:b3:71:20:db:50:fd:1e:0f:34:47:66:a1:
                    21:dc:95:47:3b:96:f9:45:16:b2:1c:af:8c:bd:d3:
                    ec:56:44:9c:37:9c:8b:ad:bc:6b:d6:e1:e1:e7:dc:
                    28:31:28:97:fa:e9:a6:f3:6e:b5:46:dd:a8:a7:21:
                    72:82:8f:87:53:a6:01:fc:68:ab:db:17:cc:b2:5a:
                    91:7e:04:a1:cf:77:93:39:24:f2:ac:09:f5:0c:90:
                    69:ee:4d:01:ed:81:0d:e9:82:e4:fd:0e:3c:9d:26:
                    63:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:EA:C4:A4:1E:06:0F:ED:0B:2F:97:BB:9E:DC:95:21:85:D1:AB:2B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142719.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a045::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:0b:ef:46:2e:d3:93:e5:73:7d:e1:c4:f1:b7:aa:f8:67:fb:
         11:a3:25:19:03:f6:81:a0:75:6c:2f:9a:c9:3e:a6:13:b3:ac:
         18:38:01:5c:6e:06:28:9b:1b:bf:8d:ec:b0:99:71:14:af:0b:
         30:9f:7f:ff:53:b6:bf:b4:f0:2a:00:72:dc:17:e0:d4:a4:3a:
         98:c5:8c:e4:d9:4a:ef:66:dc:89:85:20:df:ef:75:67:9a:0c:
         49:6f:f4:02:c5:ec:75:ce:cb:30:bd:c9:c9:b0:75:48:9b:9f:
         ca:e8:9c:22:70:9a:d2:c3:70:c3:ea:f5:b0:21:70:0a:1b:b4:
         65:89:7d:af:f9:3c:38:0c:d7:95:b4:43:b7:74:53:dc:2d:d6:
         de:cd:82:45:bf:18:a5:35:1a:14:4d:d8:f4:de:c6:2f:fb:48:
         0b:61:d6:c0:d1:1d:8c:13:a3:2a:ab:c4:1b:f2:1e:54:a5:c4:
         e8:14:8c:52:9c:3c:d1:71:e1:82:c9:30:03:02:93:60:53:90:
         f9:05:1c:b1:e5:c9:8f:4c:b3:88:f1:2e:d1:67:96:cf:b4:3f:
         f6:ee:1d:92:c1:4c:8f:2b:8d:35:75:db:6e:63:7d:2d:24:cf:
         af:13:1d:b4:f8:9f:49:e8:e6:b3:76:93:9e:11:f1:ec:05:32:
         1e:40:c6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----