Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142765.roa
File:                     AS142765.roa (raw, json)
Hash identifier:          V6BXkK3JoFS5qPTMVUdYr+ahnPk/Dl9DDNErBPkbYNI=
Subject key identifier:   AE:0A:56:2E:C7:78:E1:29:10:31:62:D3:00:CF:9B:35:F0:7D:9E:30
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4FC1A141B21ED717320EDA05D07FCC50824B6D4B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142765.roa
Signing time:             Fri 22 May 2026 06:05:38 +0000
ROA not before:           Fri 22 May 2026 06:00:38 +0000
ROA not after:            Fri 21 May 2027 06:05:38 +0000
asID:                     142765
IP address blocks:        240a:a073::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:c1:a1:41:b2:1e:d7:17:32:0e:da:05:d0:7f:cc:50:82:4b:6d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:00:38 2026 GMT
            Not After : May 21 06:05:38 2027 GMT
        Subject: CN=AE0A562EC778E129103162D300CF9B35F07D9E30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a8:db:0e:8b:89:6d:2c:84:fc:02:27:67:08:
                    08:13:6e:b5:19:d0:df:6f:aa:40:36:86:25:4d:a7:
                    c7:ee:7b:bd:29:dd:10:d3:47:78:03:a0:a5:fb:e6:
                    e1:b6:eb:51:b1:ca:b4:e2:21:16:c7:2c:70:92:a7:
                    ad:c5:29:40:8b:b9:6a:83:e3:2d:e5:2a:83:71:0f:
                    19:33:3e:ad:67:b9:0d:92:24:cd:64:70:4f:40:b3:
                    40:c4:4f:61:21:46:e9:ac:8c:d0:b9:94:b2:be:39:
                    37:e0:35:a5:7a:57:75:50:5d:a6:32:3d:96:da:a8:
                    11:7a:37:77:f7:fb:4b:61:29:40:5f:55:87:92:35:
                    39:42:71:ca:99:4b:1e:5b:f4:15:c6:74:3f:e9:12:
                    5e:9d:19:0a:58:c1:8e:2e:b6:86:41:45:cb:a0:fc:
                    b8:58:70:1a:a3:82:f8:8f:a1:31:fd:e8:47:ad:23:
                    65:9a:6b:c8:02:b0:5d:b7:4f:90:f8:50:f8:4c:cc:
                    20:c5:4a:22:4f:c3:b2:15:77:c1:34:4b:aa:1c:fc:
                    e6:03:c7:71:c5:95:3d:4a:ee:80:94:88:d5:5c:27:
                    4b:c5:34:57:16:f4:2a:a3:77:b6:66:3c:d4:6b:7b:
                    41:4e:fc:00:86:ba:85:ef:5b:6d:c7:04:0f:dc:7c:
                    db:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:0A:56:2E:C7:78:E1:29:10:31:62:D3:00:CF:9B:35:F0:7D:9E:30
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142765.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a073::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:d3:1c:b6:8f:1d:ff:07:ae:38:93:f1:7b:f4:ef:f3:85:ae:
         59:d3:ac:8d:a4:0f:6a:20:c9:d9:98:b0:c2:df:a4:2d:e0:1e:
         23:f7:3d:f5:10:85:d8:10:1e:d8:22:54:8e:30:a7:aa:20:e5:
         e3:dd:c9:7f:13:2b:88:60:89:4d:5e:b0:69:11:6d:13:6f:40:
         52:5e:57:e4:90:25:2a:7a:c2:18:89:5d:5c:8b:2d:9b:e3:fd:
         66:7c:8f:3d:5f:e2:36:42:8a:48:fb:a5:dc:64:01:4b:b7:ad:
         79:25:a8:a2:ab:3e:17:3d:eb:70:82:97:f8:03:33:b9:10:86:
         a3:12:80:e2:25:e8:ec:11:0a:89:ee:a3:db:84:58:a8:56:c6:
         b9:c2:83:0f:d2:5b:69:d8:3c:ca:47:45:3b:75:37:ac:05:b8:
         1b:bb:6b:5a:cf:ca:36:ac:83:66:8f:53:47:e3:1f:4a:83:b0:
         87:d1:a0:c2:6f:46:f2:4f:ad:66:2d:14:35:c3:d1:fb:82:ae:
         6f:3e:bb:77:31:14:5b:fd:a1:fb:ec:dc:b0:2f:69:f7:04:e3:
         4a:b8:ca:9d:00:71:b7:6c:bf:7f:73:36:34:cd:81:6e:dc:eb:
         b3:f7:00:96:a3:54:29:5f:04:aa:d6:d3:28:c8:dc:ef:a1:0c:
         19:d1:d4:77
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUT8GhQbIe1xcyDtoF0H/MUIJLbUswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjAwMzhaFw0yNzA1MjEwNjA1MzhaMDMxMTAvBgNV
BAMTKEFFMEE1NjJFQzc3OEUxMjkxMDMxNjJEMzAwQ0Y5QjM1RjA3RDlFMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWqNsOi4ltLIT8AidnCAgTbrUZ
0N9vqkA2hiVNp8fue70p3RDTR3gDoKX75uG261GxyrTiIRbHLHCSp63FKUCLuWqD
4y3lKoNxDxkzPq1nuQ2SJM1kcE9As0DET2EhRumsjNC5lLK+OTfgNaV6V3VQXaYy
PZbaqBF6N3f3+0thKUBfVYeSNTlCccqZSx5b9BXGdD/pEl6dGQpYwY4utoZBRcug
/LhYcBqjgviPoTH96EetI2Waa8gCsF23T5D4UPhMzCDFSiJPw7IVd8E0S6oc/OYD
x3HFlT1K7oCUiNVcJ0vFNFcW9Cqjd7ZmPNRre0FO/ACGuoXvW23HBA/cfNuDAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUrgpWLsd44SkQMWLTAM+bNfB9njAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyNzY1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqgczANBgkqhkiG9w0BAQsFAAOCAQEAONMc
to8d/weuOJPxe/Tv84WuWdOsjaQPaiDJ2Ziwwt+kLeAeI/c99RCF2BAe2CJUjjCn
qiDl493JfxMriGCJTV6waRFtE29AUl5X5JAlKnrCGIldXIstm+P9ZnyPPV/iNkKK
SPul3GQBS7eteSWooqs+Fz3rcIKX+AMzuRCGoxKA4iXo7BEKie6j24RYqFbGucKD
D9Jbadg8ykdFO3U3rAW4G7trWs/KNqyDZo9TR+MfSoOwh9Ggwm9G8k+tZi0UNcPR
+4Kubz67dzEUW/2h++zcsC9p9wTjSrjKnQBxt2y/f3M2NM2Bbtzrs/cAlqNUKV8E
qtbTKMjc76EMGdHUdw==
-----END CERTIFICATE-----