Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142793.roa
File:                     AS142793.roa (raw, json)
Hash identifier:          7euvGc6E6v7dRl6BP2h/VZlUQcWGK82vLvZ1ufzxJXI=
Subject key identifier:   8D:9B:59:E7:6C:95:B6:D6:FC:C2:57:C3:84:31:EF:C9:20:66:40:23
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5C5446EE26317B32E53A14981E7F7AC24B7A8A98
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142793.roa
Signing time:             Tue 26 May 2026 08:52:55 +0000
ROA not before:           Tue 26 May 2026 08:47:55 +0000
ROA not after:            Tue 25 May 2027 08:52:55 +0000
asID:                     142793
IP address blocks:        240a:a08f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:54:46:ee:26:31:7b:32:e5:3a:14:98:1e:7f:7a:c2:4b:7a:8a:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 08:47:55 2026 GMT
            Not After : May 25 08:52:55 2027 GMT
        Subject: CN=8D9B59E76C95B6D6FCC257C38431EFC920664023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:43:79:83:6b:fb:3e:93:6c:61:4e:86:86:6c:
                    76:df:18:d8:24:c3:64:74:4b:0e:60:57:db:0c:e3:
                    17:2f:51:93:b4:fd:85:e0:72:e1:b9:f8:cd:70:3f:
                    95:4f:f6:db:1a:d4:c8:13:f7:76:f9:88:2f:9e:16:
                    e3:70:b9:48:e6:68:58:62:33:ba:a4:5b:ed:12:b9:
                    7d:ff:9e:70:7b:4c:2c:a2:e3:5d:b2:4c:a8:05:dd:
                    35:e3:dc:8f:c0:fc:d9:d9:46:dd:a5:5c:23:fb:98:
                    8f:84:f4:6b:12:9c:76:1e:46:13:e2:8b:ad:e8:4f:
                    4c:54:f0:59:7b:e7:a8:7a:9d:6a:d9:3e:bc:a2:78:
                    72:03:6e:07:2a:ed:ad:1a:c9:78:5c:6e:fa:5f:dc:
                    01:b9:4c:11:09:41:7f:48:7c:9f:4d:e8:3c:26:39:
                    12:9c:ef:42:da:9d:d0:71:0d:14:94:e7:57:ff:13:
                    d2:c2:33:6b:5f:3c:9e:a8:1b:14:4e:e2:d6:ce:18:
                    09:9e:5c:46:1c:f3:52:44:e2:44:c1:c6:5e:06:56:
                    a1:ae:15:5c:72:08:4f:2f:d8:e4:98:37:cf:16:30:
                    36:68:84:c8:a6:ab:f2:54:08:9f:9e:d2:e3:cc:38:
                    35:ec:6d:31:0d:80:b5:10:01:52:b0:9f:b1:55:e4:
                    06:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9B:59:E7:6C:95:B6:D6:FC:C2:57:C3:84:31:EF:C9:20:66:40:23
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142793.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a08f::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:5d:ab:03:cf:72:b4:2e:80:cb:7e:a9:5f:4b:6a:8f:d0:9a:
         73:bf:66:05:9a:43:94:55:c4:6c:24:7c:bb:dd:ad:4f:af:34:
         5e:28:d1:8f:3a:f3:cb:a7:35:63:a9:c5:f6:a4:0f:59:dc:a0:
         fd:a3:8b:26:48:53:aa:7b:aa:ef:30:f6:22:df:c6:82:7d:90:
         ff:24:f4:a3:f7:90:64:78:6a:d4:ab:c2:59:a1:71:1e:13:5e:
         5a:7b:d3:28:52:fa:18:db:69:da:cd:49:04:7b:ed:b0:4b:0d:
         aa:86:58:03:ca:6f:a7:46:10:57:27:58:b2:c0:0a:d4:52:23:
         de:46:fa:60:c2:eb:ce:1c:26:a2:fe:57:fc:8b:ac:26:6a:f6:
         86:d2:09:50:22:c4:e1:3c:9e:ff:d2:bc:80:3d:f5:80:7b:86:
         1f:e7:79:a7:b3:f9:b0:d5:7f:a9:ef:dc:cd:14:cf:d9:9e:ac:
         be:3c:c2:9b:6c:27:1d:9f:3e:8e:3b:76:31:94:d9:10:00:57:
         71:91:13:c8:8f:f9:2c:7e:2d:8d:3a:f7:91:bc:97:bb:8b:b1:
         87:33:4e:17:64:d8:07:66:a5:4e:d5:1c:aa:70:b8:36:8a:d7:
         49:d2:38:4d:79:a9:3c:9d:e8:d4:f8:6a:12:01:6e:cc:f4:ad:
         a7:fb:9e:5b
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUXFRG7iYxezLlOhSYHn96wkt6ipgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwODQ3NTVaFw0yNzA1MjUwODUyNTVaMDMxMTAvBgNV
BAMTKDhEOUI1OUU3NkM5NUI2RDZGQ0MyNTdDMzg0MzFFRkM5MjA2NjQwMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzQ3mDa/s+k2xhToaGbHbfGNgk
w2R0Sw5gV9sM4xcvUZO0/YXgcuG5+M1wP5VP9tsa1MgT93b5iC+eFuNwuUjmaFhi
M7qkW+0SuX3/nnB7TCyi412yTKgF3TXj3I/A/NnZRt2lXCP7mI+E9GsSnHYeRhPi
i63oT0xU8Fl756h6nWrZPryieHIDbgcq7a0ayXhcbvpf3AG5TBEJQX9IfJ9N6Dwm
ORKc70LandBxDRSU51f/E9LCM2tfPJ6oGxRO4tbOGAmeXEYc81JE4kTBxl4GVqGu
FVxyCE8v2OSYN88WMDZohMimq/JUCJ+e0uPMODXsbTENgLUQAVKwn7FV5AZ3AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUjZtZ52yVttb8wlfDhDHvySBmQCMwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyNzkzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqgjzANBgkqhkiG9w0BAQsFAAOCAQEAkF2r
A89ytC6Ay36pX0tqj9Cac79mBZpDlFXEbCR8u92tT680XijRjzrzy6c1Y6nF9qQP
Wdyg/aOLJkhTqnuq7zD2It/Ggn2Q/yT0o/eQZHhq1KvCWaFxHhNeWnvTKFL6GNtp
2s1JBHvtsEsNqoZYA8pvp0YQVydYssAK1FIj3kb6YMLrzhwmov5X/IusJmr2htIJ
UCLE4Tye/9K8gD31gHuGH+d5p7P5sNV/qe/czRTP2Z6svjzCm2wnHZ8+jjt2MZTZ
EABXcZETyI/5LH4tjTr3kbyXu4uxhzNOF2TYB2alTtUcqnC4NorXSdI4TXmpPJ3o
1PhqEgFuzPStp/ueWw==
-----END CERTIFICATE-----