Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142727.roa
File:                     AS142727.roa (raw, json)
Hash identifier:          X4/LfEQG4jKlUpMzO4UotmNfZtfJHAJKPLOYTf0G6IE=
Subject key identifier:   71:5D:AC:9D:71:6D:29:BD:B5:E0:F8:96:82:AC:CD:0E:62:4F:3D:13
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1027FE17BB0E0A9F297675C3E37C01FF9071AE13
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142727.roa
Signing time:             Tue 26 May 2026 06:30:40 +0000
ROA not before:           Tue 26 May 2026 06:25:40 +0000
ROA not after:            Tue 25 May 2027 06:30:40 +0000
asID:                     142727
IP address blocks:        240a:a04d::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:27:fe:17:bb:0e:0a:9f:29:76:75:c3:e3:7c:01:ff:90:71:ae:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:40 2026 GMT
            Not After : May 25 06:30:40 2027 GMT
        Subject: CN=715DAC9D716D29BDB5E0F89682ACCD0E624F3D13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c8:a8:d7:4d:84:74:f3:3a:75:e0:76:d6:45:
                    06:e4:74:1d:ee:8d:f4:e9:0f:ef:c6:43:df:cf:6e:
                    d0:66:a4:d0:24:1b:2f:04:d8:46:67:de:fe:ac:ce:
                    6e:25:cb:c4:bd:56:22:5a:28:e5:02:2d:b5:aa:cf:
                    4c:a6:44:ed:26:9e:a6:6d:20:70:be:56:d7:5f:29:
                    69:27:5e:0b:1c:9a:b8:24:d3:d0:f6:28:47:61:3d:
                    a3:d8:f2:82:1b:5e:aa:41:d4:32:2c:2c:fd:47:9c:
                    74:a8:3b:bb:2a:a5:87:11:f4:62:7b:6d:a8:d0:4f:
                    92:e3:7d:cf:e7:bf:43:db:03:52:8d:ae:85:b0:b8:
                    d0:ae:ab:c2:ab:6a:09:3d:c7:7a:b2:47:fe:e1:00:
                    4b:79:23:d3:bd:41:19:eb:5f:ab:a8:0e:03:3b:2a:
                    40:f4:84:65:64:ae:b6:0e:63:7a:89:fb:98:4c:0a:
                    73:38:af:47:36:f2:93:7f:71:45:4f:54:ca:4a:c1:
                    e4:b9:c4:2d:45:21:62:ef:67:7e:c3:b1:39:71:8a:
                    15:c8:7f:76:b3:83:e5:f7:87:8e:f8:23:fb:ab:14:
                    60:fa:e2:f9:c7:ec:a9:9d:bf:90:43:0a:9b:ef:d6:
                    a2:93:d1:1a:61:26:84:7c:7b:d6:8e:ce:00:eb:83:
                    26:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:5D:AC:9D:71:6D:29:BD:B5:E0:F8:96:82:AC:CD:0E:62:4F:3D:13
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142727.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a04d::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:70:41:89:e5:2d:cf:b6:51:bb:49:19:ec:83:c6:9d:f0:50:
         e6:64:26:be:7b:1b:db:3a:fc:13:b7:02:1c:e8:48:c0:73:ac:
         6d:cd:9e:83:b1:c6:b2:1b:59:af:87:28:9d:14:5a:a6:7c:c4:
         6c:d3:ea:86:b9:fb:e6:cd:b3:ac:97:b7:a0:f1:dc:70:b5:96:
         d3:13:0b:39:da:84:36:e2:64:da:dc:6f:38:14:15:51:d8:cc:
         4f:60:88:9f:f8:a8:07:0a:94:b8:7c:10:06:2b:c6:b3:63:3e:
         c2:2f:4c:39:c3:0c:0f:0c:0a:92:d2:a4:8f:30:ad:7f:36:56:
         b2:51:69:18:63:20:d1:8f:c9:aa:d1:df:0f:d0:c4:86:57:21:
         c2:dd:5d:ab:54:c9:6d:20:d8:05:00:e6:8f:87:ee:dd:74:47:
         85:d0:24:da:24:13:4c:18:87:71:d2:82:b0:77:c7:4c:cf:1b:
         c9:5c:66:ee:57:11:66:95:c0:3d:41:ae:66:41:56:55:f7:d9:
         8d:42:cf:6e:5e:1c:f7:4a:78:08:51:17:9b:c8:82:3f:4d:8b:
         8c:5f:30:93:37:55:77:b0:6c:d4:e5:39:57:f0:78:d6:fd:39:
         c7:a7:21:f2:a9:2f:f1:28:dd:88:a4:1f:d0:f4:14:10:d8:70:
         37:cb:d2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----