Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142756.roa
File:                     AS142756.roa (raw, json)
Hash identifier:          suBF3iSrkkDugDbsZU+/ORgk+QwoivGTQ1aczaLiQ7o=
Subject key identifier:   F8:B7:5F:04:CC:15:BD:1C:BD:2F:68:E9:E3:CE:37:C6:1A:0D:25:F2
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       441B281189E317CF97F6524F705788C3BFB83A23
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142756.roa
Signing time:             Mon 25 May 2026 01:20:29 +0000
ROA not before:           Mon 25 May 2026 01:15:29 +0000
ROA not after:            Mon 24 May 2027 01:20:29 +0000
asID:                     142756
IP address blocks:        240a:a06a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:1b:28:11:89:e3:17:cf:97:f6:52:4f:70:57:88:c3:bf:b8:3a:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:15:29 2026 GMT
            Not After : May 24 01:20:29 2027 GMT
        Subject: CN=F8B75F04CC15BD1CBD2F68E9E3CE37C61A0D25F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:30:9a:60:95:e1:ee:d3:d3:ee:1d:dc:2e:b6:
                    07:06:40:f9:c3:2a:5c:7b:a7:c1:1d:04:eb:cb:1b:
                    c0:32:61:f8:f5:03:0b:3d:52:fe:ab:af:ff:7f:12:
                    a5:51:d2:f8:75:ca:88:4b:aa:e4:64:83:39:89:6d:
                    98:91:1b:93:15:62:56:01:85:af:49:fb:e6:63:ab:
                    79:a5:ab:24:2d:bf:95:5a:2a:e7:76:80:21:ce:14:
                    0d:2b:10:d6:72:6c:a1:35:8e:b9:ac:66:73:13:ea:
                    86:0f:c3:4f:e3:27:6f:4c:50:4c:f3:cd:0c:79:2c:
                    8a:bd:15:20:c5:71:d0:f3:02:af:6a:81:0d:62:75:
                    37:13:ed:b1:88:ec:c0:bb:6c:3b:69:87:ed:97:df:
                    64:ee:08:56:62:59:d8:b0:4d:ee:80:f8:6a:b7:bd:
                    91:fd:7c:43:e7:4b:3c:20:ff:3c:41:1b:0f:a4:b9:
                    1e:03:97:56:97:ed:39:b6:b9:15:c6:6d:97:96:07:
                    e5:c6:b5:4c:0b:fa:0f:8f:f7:09:5e:4a:e4:d7:93:
                    e6:da:bf:03:d2:da:39:53:be:ce:74:ac:14:ff:6f:
                    1a:86:8c:82:02:d3:40:00:d9:6b:fc:7a:cd:96:6a:
                    e7:c4:88:6a:2c:3d:c9:f2:12:5b:cc:cf:7c:77:9e:
                    f1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B7:5F:04:CC:15:BD:1C:BD:2F:68:E9:E3:CE:37:C6:1A:0D:25:F2
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142756.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a06a::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:95:d9:46:e2:bc:35:31:4e:cd:54:2c:70:e9:a1:67:44:a2:
         cd:55:74:e8:b6:ff:86:b7:05:c3:92:b0:62:39:05:81:7b:6c:
         6e:34:d0:ae:da:2e:b4:e7:d3:0c:f9:0b:5b:d3:5e:71:cb:28:
         8a:4e:a5:d5:28:6c:1a:03:4b:f7:fe:8b:31:d5:b2:d8:40:fb:
         f5:0a:6c:6b:3f:c3:f6:fd:e1:e1:ef:ec:0a:91:a3:aa:88:dd:
         a3:bf:99:04:06:de:f5:10:f5:f8:79:e5:16:33:27:11:2e:4f:
         6f:99:49:9d:ec:e2:cc:2d:37:e2:c4:e9:7f:9f:6b:51:aa:6f:
         45:58:09:2c:f2:3a:95:f1:d6:4c:0c:01:1a:f8:f5:71:a4:5c:
         b0:f1:42:f0:fe:f5:c8:5f:1e:52:ac:7f:7f:3f:6f:1e:a7:8d:
         d7:36:6a:7d:25:9c:90:97:4c:49:e6:90:f8:49:36:87:3a:65:
         60:a2:3f:bc:74:70:1c:b7:e5:a4:c6:92:67:4b:65:ec:32:e7:
         6c:34:cb:d4:b4:0e:16:1f:b9:c2:e9:1c:c0:63:94:f5:a2:39:
         cb:64:b2:35:7e:cc:8b:ab:36:19:16:f2:48:b1:c3:28:ca:ec:
         7a:33:99:8e:72:e5:23:d2:fe:5d:93:49:84:d3:6f:89:23:fb:
         e4:50:fa:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----