Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142788.roa
File:                     AS142788.roa (raw, json)
Hash identifier:          icq9ZXaR3t/yfSZlF86lluaY64p/wGzctXodjVwZm/k=
Subject key identifier:   09:D7:0F:03:CB:4E:32:14:96:D7:16:43:B6:A5:E3:4F:64:7B:1A:7C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1FE4F1561C8A95BFBBE0EC62D5D7EF996CDD187A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142788.roa
Signing time:             Tue 26 May 2026 02:35:11 +0000
ROA not before:           Tue 26 May 2026 02:30:11 +0000
ROA not after:            Tue 25 May 2027 02:35:11 +0000
asID:                     142788
IP address blocks:        240a:a08a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:e4:f1:56:1c:8a:95:bf:bb:e0:ec:62:d5:d7:ef:99:6c:dd:18:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:30:11 2026 GMT
            Not After : May 25 02:35:11 2027 GMT
        Subject: CN=09D70F03CB4E321496D71643B6A5E34F647B1A7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6c:5a:d7:ae:82:12:17:23:83:73:50:f1:7e:
                    d8:b7:d6:e6:32:a3:a4:6f:f5:d9:c8:5a:73:1d:4f:
                    26:5a:f9:48:d7:70:e0:37:e4:4f:f3:56:78:9d:24:
                    be:62:2a:d9:6d:bc:58:d9:2f:29:7f:b6:a2:bc:41:
                    ab:27:03:41:ff:06:87:72:44:ef:57:0c:a2:55:2a:
                    eb:4e:f5:f0:81:1e:02:bb:f6:7d:71:53:e3:f3:39:
                    7f:28:26:05:0a:42:e5:b4:f3:dc:ff:3f:7c:00:57:
                    ee:24:55:d4:e2:0d:7b:25:fb:d4:28:7b:87:7d:bb:
                    ee:40:9f:dc:00:86:b1:d7:f5:c6:bd:36:44:ee:1d:
                    e3:e2:94:8e:6b:5c:0b:9f:82:25:5d:26:24:0b:9d:
                    d0:3f:c0:d1:d3:d2:7e:7c:33:0c:c3:77:7d:ca:1e:
                    36:09:29:12:d8:e8:4d:55:05:19:be:a5:fb:b0:d6:
                    ac:8b:b2:32:01:5f:1b:8a:be:8f:a5:98:88:a9:d4:
                    40:5c:48:65:ca:07:c5:23:cd:43:32:93:17:3d:90:
                    8a:ba:be:8e:4c:b7:4f:13:a4:e0:88:0c:30:09:25:
                    78:eb:5e:df:8a:b8:00:73:89:b7:b0:ea:5d:18:94:
                    1f:68:73:cf:3e:58:56:87:97:e6:ae:6f:e3:7e:fc:
                    ec:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D7:0F:03:CB:4E:32:14:96:D7:16:43:B6:A5:E3:4F:64:7B:1A:7C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142788.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a08a::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:da:af:37:95:93:90:2f:c2:20:d5:79:7f:5e:82:39:26:a6:
         cf:fa:90:ab:1f:db:cc:3c:a1:d9:cd:d6:ea:8b:55:79:46:01:
         d1:85:df:fd:b3:77:a7:3e:43:f4:fc:d8:bd:35:ab:8f:3c:79:
         f1:cd:e6:f1:2e:40:9c:fd:1e:5f:ed:20:9d:bd:a3:04:a0:13:
         68:62:bd:33:d6:36:01:ca:f1:bc:25:f9:46:83:99:b5:64:75:
         a3:12:88:99:02:b6:3c:ff:1a:f2:11:16:3a:b4:28:cd:26:a9:
         52:09:c7:ff:7f:89:93:27:c2:38:3c:be:89:90:24:bc:2a:5e:
         28:a9:a8:d3:28:86:90:9b:70:a5:cb:c8:fb:80:91:e1:71:ca:
         3c:1d:40:56:9d:b4:11:2f:fe:6d:e6:df:36:ac:f6:ca:96:7e:
         98:b6:26:83:2c:b7:86:90:d1:a5:57:17:c7:00:73:68:1e:42:
         30:55:60:ae:d1:90:94:8f:de:1a:2a:6d:89:44:ff:21:e0:31:
         aa:53:17:0e:46:89:ea:44:07:a5:b8:84:a0:ae:db:8b:bd:7d:
         b4:d6:d8:6e:a8:e0:3f:63:27:ac:ef:86:a8:a6:e7:52:1f:58:
         e4:e5:a9:b7:65:01:4c:e2:78:1c:8b:d1:84:19:af:16:65:b9:
         ff:48:df:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----