Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142824.roa
File:                     AS142824.roa (raw, json)
Hash identifier:          krDTEEV0OwX15Ag6O4foZpm/G6JR8/diEcFp5VE5V3E=
Subject key identifier:   89:83:F3:4C:42:12:76:82:96:91:FE:F7:88:3B:13:81:76:F5:64:B2
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       59BF49EB56F76CBD9EF329DF1FF06C866ED74318
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142824.roa
Signing time:             Fri 22 May 2026 07:32:24 +0000
ROA not before:           Fri 22 May 2026 07:27:24 +0000
ROA not after:            Fri 21 May 2027 07:32:24 +0000
asID:                     142824
IP address blocks:        240a:a0ae::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:bf:49:eb:56:f7:6c:bd:9e:f3:29:df:1f:f0:6c:86:6e:d7:43:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:24 2026 GMT
            Not After : May 21 07:32:24 2027 GMT
        Subject: CN=8983F34C421276829691FEF7883B138176F564B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a0:ed:13:17:89:07:bb:06:0a:46:a9:a2:98:
                    b2:38:65:f6:2b:51:b3:f3:80:00:9c:3b:91:07:8f:
                    ba:ec:67:f2:e3:73:03:1e:7b:7b:b5:f3:0a:c8:af:
                    dc:d0:9b:26:85:36:fb:59:55:1e:28:f9:2d:c1:a4:
                    0c:c2:b4:16:9b:cf:34:dc:cf:f8:35:a1:77:14:97:
                    50:e0:26:28:e7:09:c0:17:15:f9:77:10:7a:2d:d2:
                    fc:36:ea:b1:e9:87:2b:10:4c:f1:cc:74:fe:bb:46:
                    2d:08:61:eb:f0:18:a5:65:75:cf:34:e3:11:06:6e:
                    dc:ef:5f:a9:e4:79:e1:1c:d9:51:ca:46:fd:0e:62:
                    f2:9f:39:f0:96:51:92:72:a5:3b:62:49:4d:ec:ce:
                    c3:0c:e6:83:6f:e3:1c:af:26:e6:b3:2d:e2:99:4c:
                    2e:68:8a:21:40:5e:04:67:dd:2d:80:43:ff:63:5e:
                    0c:e9:45:5d:af:c2:ac:b4:c1:89:73:61:ee:e1:7c:
                    37:f6:e6:21:7c:21:33:15:79:0b:2a:79:11:f0:07:
                    de:a1:14:71:5b:88:56:fa:bb:86:92:1d:48:36:78:
                    ef:78:8e:3c:7c:d5:44:2c:98:3d:13:f7:fe:a7:8f:
                    93:b0:68:e0:98:82:b7:94:f2:ac:0f:6c:9d:8c:57:
                    04:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:83:F3:4C:42:12:76:82:96:91:FE:F7:88:3B:13:81:76:F5:64:B2
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142824.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a0ae::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:52:6d:98:12:7f:5b:8e:54:6c:96:26:85:82:ca:38:7e:19:
         5a:13:67:e1:52:0b:9d:a5:56:b0:9a:8e:a1:e3:b3:77:47:b8:
         4e:c1:57:8a:a1:76:69:d3:5f:34:88:ca:3e:a6:e9:ca:93:74:
         c3:d3:31:04:f1:54:58:f8:ff:05:6e:00:f8:c2:f1:cb:de:ae:
         49:de:8e:40:37:bb:f2:a8:f7:73:9e:b8:fd:e9:01:64:dd:08:
         14:ff:3e:18:79:be:9b:4c:be:ce:30:40:35:7c:96:62:00:41:
         f9:36:38:0d:6f:86:b0:5b:32:43:ad:49:0b:8e:13:93:6c:07:
         f9:9d:1f:c8:13:89:66:47:7b:88:ec:73:a1:58:32:6f:88:8b:
         cf:31:5e:d7:58:ff:ab:e1:fa:2f:59:67:01:f3:e0:04:6e:94:
         4f:9f:c0:4e:a6:08:96:b7:c2:f3:d4:52:e8:0c:3f:b3:42:c5:
         0f:9c:a1:0b:d4:9e:b2:d8:97:33:af:62:c1:a2:ac:0c:fe:65:
         1d:d4:1d:b7:4d:a6:f5:be:ee:d5:f6:f6:89:1c:ad:39:7b:e7:
         87:5f:ea:e9:3c:c8:b0:96:70:f6:84:81:a0:8d:53:8a:3d:75:
         8a:20:d5:1e:37:ce:11:4e:75:a8:47:b9:d7:5f:82:c0:1d:f2:
         9b:5f:70:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----