Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142821.roa
File:                     AS142821.roa (raw, json)
Hash identifier:          zhTGloL2sPn4PJdtl6iZcw2gmZaL0+Ae3ex05ZTSM6I=
Subject key identifier:   97:14:F2:11:57:32:B8:E9:08:BB:6C:ED:52:12:F6:51:87:1A:06:78
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0B4499BB240E939C84E1ABFE4AD13758A16B6FCE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142821.roa
Signing time:             Fri 22 May 2026 07:09:04 +0000
ROA not before:           Fri 22 May 2026 07:04:04 +0000
ROA not after:            Fri 21 May 2027 07:09:04 +0000
asID:                     142821
IP address blocks:        240a:a0ab::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:44:99:bb:24:0e:93:9c:84:e1:ab:fe:4a:d1:37:58:a1:6b:6f:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:04:04 2026 GMT
            Not After : May 21 07:09:04 2027 GMT
        Subject: CN=9714F2115732B8E908BB6CED5212F651871A0678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2b:db:d4:c4:17:87:64:50:4b:75:4b:4e:83:
                    ee:9b:44:5b:a4:2e:44:cc:fa:dd:72:ed:50:f0:cb:
                    2f:68:c2:d7:43:2d:84:00:c5:43:6f:45:f6:85:ec:
                    17:6c:94:48:61:fc:c4:b1:05:5d:8b:57:93:5e:72:
                    94:f7:1b:24:16:12:f9:e3:56:fb:a5:a0:db:2a:92:
                    18:15:b6:d2:46:a2:dc:73:ec:28:a5:60:5a:b2:f8:
                    cc:2d:22:18:85:48:db:77:ab:f7:66:c9:cc:c3:87:
                    16:e3:35:49:1e:62:07:29:12:5f:e6:21:89:cf:1f:
                    b1:58:c9:1a:ad:ba:29:eb:58:6c:9c:ec:58:19:f9:
                    56:3e:79:c0:23:b6:17:cc:cd:e2:d5:28:dd:bb:f0:
                    46:1b:20:15:9a:fc:5b:1f:bf:43:15:51:df:8c:68:
                    71:dd:c1:c5:da:a5:86:ad:84:70:bd:3e:da:93:e2:
                    59:33:1e:75:1e:76:9f:c0:97:98:36:7b:06:16:16:
                    58:8f:e7:6d:a9:3e:2e:f6:a2:e1:06:d5:1e:8f:1b:
                    a6:f0:a1:ec:f7:dd:5e:46:f0:bf:26:90:21:13:4e:
                    c4:f6:7e:c8:42:15:48:64:8c:af:c8:4c:37:f3:36:
                    6f:e1:d2:57:1e:20:a2:58:a0:36:d8:01:24:04:e0:
                    8e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:14:F2:11:57:32:B8:E9:08:BB:6C:ED:52:12:F6:51:87:1A:06:78
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142821.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a0ab::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:57:af:bc:dd:bc:95:71:87:da:ef:f5:d7:0f:71:91:18:77:
         90:32:5f:dc:c8:77:70:af:fa:04:51:2c:04:a1:aa:bb:33:1f:
         6e:94:b4:e2:15:fa:bf:b3:46:88:ee:f7:b2:04:2a:83:0f:b2:
         0c:2c:0a:2d:f4:0c:8f:24:a1:cf:ca:2d:7d:d2:81:95:b4:bc:
         43:92:1f:13:62:77:29:8f:64:db:f6:4a:91:6f:24:6c:39:6f:
         fb:0a:d3:97:97:00:95:c0:1b:9b:ee:62:ef:8d:28:5b:69:6d:
         bc:3b:d0:f3:ee:1f:eb:de:b3:b5:47:21:e2:3c:d4:8d:34:3c:
         c5:ac:c2:f1:ca:62:01:79:5a:4c:3e:30:ac:73:13:eb:53:fa:
         20:11:70:fb:58:95:ef:81:51:1d:7d:b9:31:f2:bc:c9:46:48:
         ea:ea:d7:a2:b9:45:88:50:15:b2:aa:3b:c9:5d:61:91:ae:b7:
         60:b9:30:fb:b2:e2:78:d3:49:47:9e:95:cf:5f:ad:85:a6:fb:
         9d:8a:b0:9a:5d:d3:72:2c:4f:9a:fe:0a:8b:ae:01:7d:aa:d1:
         7f:64:c1:6f:b5:ef:01:7c:5e:8f:f8:e8:bb:0f:8f:9d:32:8a:
         41:45:32:bf:91:0e:b3:fb:3b:1a:c9:97:d3:56:7a:70:7d:a6:
         1b:ea:fd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----