Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142731.roa
File:                     AS142731.roa (raw, json)
Hash identifier:          8PZcIVgpa+WzK8kqc8TfUjUTFoPtusdqnSU8682S224=
Subject key identifier:   86:ED:26:B5:93:29:85:60:9F:83:5C:FE:A5:F1:DB:B5:BB:EA:31:EB
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       22BD96770BFE0E8F32FA52C47CDB6B89D0762D7D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142731.roa
Signing time:             Tue 26 May 2026 06:30:24 +0000
ROA not before:           Tue 26 May 2026 06:25:24 +0000
ROA not after:            Tue 25 May 2027 06:30:24 +0000
asID:                     142731
IP address blocks:        240a:a051::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:bd:96:77:0b:fe:0e:8f:32:fa:52:c4:7c:db:6b:89:d0:76:2d:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:24 2026 GMT
            Not After : May 25 06:30:24 2027 GMT
        Subject: CN=86ED26B5932985609F835CFEA5F1DBB5BBEA31EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6e:ca:35:b3:57:fc:76:b5:dc:83:6f:e0:60:
                    b1:a3:fd:d5:5f:e5:82:c7:64:99:5b:d8:91:e4:3c:
                    a6:3f:85:37:53:70:56:e6:20:c1:4b:87:29:d8:a3:
                    a8:41:a7:a7:3d:f9:d3:cb:d2:0c:18:84:09:41:7e:
                    f0:93:42:a4:c5:16:05:23:5d:e5:15:3d:4e:85:a3:
                    ef:2e:9c:fd:57:60:97:91:cd:51:d7:a5:be:65:48:
                    5b:bd:9d:fd:00:b9:d2:7e:58:66:3e:da:2f:70:42:
                    63:d4:f2:cb:39:14:5f:85:46:cc:ea:42:8d:8f:97:
                    8b:2f:be:2f:7d:00:e1:bd:93:46:4f:29:7a:06:87:
                    93:20:fa:bc:d4:b1:9f:36:9b:36:cc:93:0f:62:a5:
                    4e:c1:58:2d:ff:0c:62:43:59:f1:ae:91:cb:a7:0e:
                    34:f6:cd:e0:fb:f6:8c:8b:c3:fe:18:d1:e4:3a:6b:
                    b0:89:54:9f:16:13:f8:05:ea:52:83:b1:33:fb:1f:
                    c0:a7:e4:7f:83:33:03:2e:e8:d9:69:6d:21:27:4c:
                    6f:e3:60:9f:b9:64:74:d8:bf:2e:ae:3a:de:0d:50:
                    d0:5e:23:3d:31:15:79:11:d7:f9:9a:48:9e:24:b8:
                    3b:f7:e7:8e:ef:84:12:68:93:30:bc:e9:af:a4:38:
                    d2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:ED:26:B5:93:29:85:60:9F:83:5C:FE:A5:F1:DB:B5:BB:EA:31:EB
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a051::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:5a:f3:0f:83:33:b8:4d:29:71:6e:ce:7a:88:8e:59:b2:26:
         9a:99:ac:00:a8:23:61:de:47:33:1a:58:5a:f9:8e:ff:a6:f5:
         a7:d9:d9:37:a2:8c:12:f2:7e:34:ce:4e:3c:3e:c7:f5:8d:39:
         fd:5c:77:64:20:58:89:ac:56:aa:cf:d3:19:43:53:57:c9:7e:
         8b:65:bc:ef:d4:0c:33:51:92:70:58:2c:48:de:cc:32:e8:fd:
         a6:9f:c8:b5:db:e3:a6:67:ff:2c:f7:0d:31:05:58:42:c5:0c:
         69:af:45:37:65:2c:0c:a6:64:f9:70:bd:d5:94:f0:bb:66:59:
         9a:29:92:7e:a2:aa:11:ce:fe:d9:1b:29:f9:80:4b:24:b8:00:
         38:74:4b:2f:aa:59:09:08:61:ad:45:94:4b:88:cd:58:d8:c2:
         51:51:bb:70:14:e8:c9:7f:0a:96:56:9b:81:0a:6a:ae:85:b8:
         3e:92:5f:fd:49:ac:92:ff:b8:ff:88:7c:79:b6:2a:55:3b:b5:
         70:7c:f5:39:cd:fa:88:8b:9e:ee:59:02:aa:5a:52:04:ed:b5:
         18:b9:c7:5a:ff:64:81:76:ed:b1:45:b0:d5:8b:02:ad:75:a0:
         a8:e1:7f:18:f8:60:8b:b8:2b:4c:ae:e0:4b:df:6d:7a:81:2a:
         f5:16:fe:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----