Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142739.roa
File:                     AS142739.roa (raw, json)
Hash identifier:          pBym2cqBdqu7K+2CI8K2CZqhnhLiMK6UY/NMtQREWlM=
Subject key identifier:   0B:F6:D4:3A:64:88:21:E7:CE:5A:0A:84:8D:9C:AE:0F:33:85:2C:B5
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       50C1EC8AC5469FDCEE43FE3FC14C49BE36A606A0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142739.roa
Signing time:             Tue 26 May 2026 01:13:13 +0000
ROA not before:           Tue 26 May 2026 01:08:13 +0000
ROA not after:            Tue 25 May 2027 01:13:13 +0000
asID:                     142739
IP address blocks:        240a:a059::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:c1:ec:8a:c5:46:9f:dc:ee:43:fe:3f:c1:4c:49:be:36:a6:06:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:08:13 2026 GMT
            Not After : May 25 01:13:13 2027 GMT
        Subject: CN=0BF6D43A648821E7CE5A0A848D9CAE0F33852CB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:94:1e:d7:c4:1b:79:ca:9a:23:e7:c2:5a:c0:
                    8f:4f:7a:bc:49:f9:21:c1:5d:7d:cf:a4:8e:14:80:
                    0f:86:27:b4:79:58:d7:6d:31:48:9c:0f:e9:d0:9a:
                    79:0d:a0:79:fb:eb:b6:36:53:bd:c1:0e:9d:f1:b7:
                    2e:5d:62:18:3e:4b:71:da:f8:4e:ae:c7:e4:e6:6d:
                    f8:12:16:41:51:f0:9b:44:28:fc:71:85:88:dc:4c:
                    74:0c:7c:34:be:e6:b5:06:6d:83:df:6e:4e:c4:c8:
                    c1:7b:48:38:1a:28:9d:15:07:ef:0c:67:d1:1f:32:
                    e3:0a:cb:d0:20:26:6f:d8:79:ec:94:f0:8d:0d:e1:
                    f3:3e:7c:d2:27:51:a5:c0:32:4c:f4:66:22:fe:d2:
                    98:28:83:66:03:55:95:05:3c:d5:1c:25:9f:83:2e:
                    ca:36:07:5e:ab:2c:81:2b:90:4a:9f:11:20:60:ec:
                    65:1b:b1:13:0a:7b:8f:cc:23:fc:55:c2:ef:36:2b:
                    dc:5c:87:bc:42:27:40:32:f4:dc:19:9f:81:30:f3:
                    a0:13:47:26:8c:16:1a:31:fd:9f:6c:09:9a:5e:1d:
                    17:c2:a7:ad:65:8d:97:3f:fc:12:a9:c1:6d:b8:d1:
                    a7:eb:80:32:77:51:11:ee:9f:aa:04:bc:2c:40:f1:
                    0e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F6:D4:3A:64:88:21:E7:CE:5A:0A:84:8D:9C:AE:0F:33:85:2C:B5
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a059::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:20:80:9b:09:45:51:b4:17:3a:2f:be:01:29:6d:69:00:51:
         76:2e:d6:7e:46:5e:7a:ce:fe:4d:ef:04:90:c5:2c:87:b7:00:
         0f:bd:ab:f2:b1:10:d0:ce:a4:57:93:e1:f3:b0:be:09:4f:8c:
         51:b1:d2:53:dd:f8:2a:38:61:40:1e:d0:21:1f:fa:32:3d:bb:
         0e:84:29:80:2d:c6:dc:25:fc:1d:b0:4d:cd:a4:70:e3:5e:5d:
         8b:6e:47:82:5e:d2:4d:90:28:bf:8f:d6:ee:5c:80:2e:6f:55:
         13:b1:d2:44:6b:5f:00:25:f9:66:0f:37:ed:db:a3:72:1b:4e:
         7b:47:34:7e:d8:ed:74:a4:6d:00:01:bd:04:91:1f:09:7f:1a:
         cb:35:1c:60:17:46:75:65:75:7d:c4:9b:15:17:78:64:74:b8:
         c7:99:4a:a7:61:b2:94:9e:36:14:7e:d4:f8:6d:8f:9f:b1:fb:
         42:bf:fe:00:7f:a0:06:ce:70:bf:32:1c:4b:93:1c:5e:41:ad:
         dc:a0:0d:54:a6:ca:f3:b0:ba:36:eb:cb:1e:94:46:7a:90:0f:
         4a:07:a7:26:7f:60:c1:92:09:12:b8:05:ba:7a:b3:3b:ca:57:
         f9:ab:d2:4b:43:72:c8:24:ab:cd:d9:bb:08:fc:28:db:b4:90:
         f2:34:da:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----