Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142831.roa
File:                     AS142831.roa (raw, json)
Hash identifier:          uAI6GViD1UNLczivCH8zzckR10rzbyvqXx9RlR8HNFU=
Subject key identifier:   95:D4:FA:F7:22:7E:63:AE:BF:80:66:1D:E2:AE:77:34:F2:98:B2:D6
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       25BFD3D2F31A43C78267E57C423FD52372C45A0D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142831.roa
Signing time:             Tue 26 May 2026 03:17:12 +0000
ROA not before:           Tue 26 May 2026 03:12:12 +0000
ROA not after:            Tue 25 May 2027 03:17:12 +0000
asID:                     142831
IP address blocks:        240a:a0b5::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:bf:d3:d2:f3:1a:43:c7:82:67:e5:7c:42:3f:d5:23:72:c4:5a:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:12:12 2026 GMT
            Not After : May 25 03:17:12 2027 GMT
        Subject: CN=95D4FAF7227E63AEBF80661DE2AE7734F298B2D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:24:1c:9c:bb:de:9c:48:98:ba:05:24:80:94:
                    a1:de:9e:08:6b:19:30:e9:9d:03:ab:87:a3:ee:33:
                    c2:fe:55:6c:aa:6b:eb:4c:89:49:97:44:81:59:20:
                    8a:b5:b2:c2:81:77:61:b2:8e:9e:0d:e0:8c:cf:4d:
                    24:b6:73:16:1a:10:90:8e:fe:7d:dd:04:4a:6c:f2:
                    a3:a8:eb:66:a0:22:2d:48:01:9f:22:3e:b1:02:94:
                    fe:33:5a:d5:c8:66:ad:21:fb:43:0a:19:a3:8a:9e:
                    72:5f:0a:c2:22:82:66:74:2a:d6:50:ef:de:e1:6f:
                    84:dd:6f:f9:61:55:7d:d5:34:af:e1:da:cc:7a:e7:
                    b2:cf:32:c0:66:51:6d:eb:d0:4b:56:64:aa:ed:28:
                    05:c5:91:34:93:a9:50:1b:39:7c:b9:72:97:35:a1:
                    61:ac:74:32:df:b0:4b:df:45:32:6e:c7:d8:10:f9:
                    ed:4c:04:07:d6:51:fd:ee:c0:47:bf:33:02:41:0b:
                    55:ea:82:17:12:d4:c7:95:00:83:0b:fc:a5:91:32:
                    11:60:d5:db:f1:4c:e2:22:9f:23:76:b1:f9:46:0b:
                    f9:df:5a:b8:47:d3:d9:11:3b:87:93:e5:84:73:3f:
                    cb:97:fc:0f:58:d2:2d:d8:35:74:54:f0:d9:b4:d2:
                    3c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D4:FA:F7:22:7E:63:AE:BF:80:66:1D:E2:AE:77:34:F2:98:B2:D6
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a0b5::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:7f:63:40:a9:c8:0a:99:b7:4a:5a:4f:3b:02:89:2e:5c:7a:
         b6:cd:b6:68:66:50:3d:1f:ea:bd:ba:dd:19:1d:c0:eb:6e:9e:
         5c:4f:4e:fc:20:c6:61:38:df:75:2a:b6:f3:76:3e:fa:9e:61:
         3b:f3:a6:bb:66:51:a7:e5:fa:81:ce:39:2a:e2:d7:63:dd:1b:
         34:c2:9f:63:06:a5:21:3d:5f:46:eb:25:ab:90:67:ab:7f:2d:
         c1:f8:71:45:6f:84:ee:ca:ef:02:69:2b:77:8c:4b:ff:5a:cc:
         d3:3b:52:f5:62:28:c2:2d:62:d0:a0:9e:13:47:a9:d7:7e:95:
         1a:c1:17:d1:06:88:12:3b:c4:3f:c6:e8:e6:80:36:01:81:ee:
         6e:91:b6:4c:e3:b5:52:e1:c0:3f:51:9b:61:db:56:b6:b6:40:
         02:22:2c:62:dc:6b:a7:f6:ce:f2:34:62:6f:20:bb:0a:07:c6:
         c6:39:18:e9:dc:7a:70:18:e6:e6:f1:83:1d:6f:64:a9:3a:3d:
         8d:05:44:bb:61:0d:d7:52:49:1d:f0:5b:fe:21:34:e7:e6:64:
         1a:67:a9:ea:d5:3f:36:30:6e:61:fa:ac:04:a0:9d:bc:61:fb:
         7c:99:26:89:e2:d0:a5:31:94:50:d1:6f:9b:a6:5c:eb:8a:a8:
         5a:16:59:33
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUJb/T0vMaQ8eCZ+V8Qj/VI3LEWg0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMzEyMTJaFw0yNzA1MjUwMzE3MTJaMDMxMTAvBgNV
BAMTKDk1RDRGQUY3MjI3RTYzQUVCRjgwNjYxREUyQUU3NzM0RjI5OEIyRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfJBycu96cSJi6BSSAlKHenghr
GTDpnQOrh6PuM8L+VWyqa+tMiUmXRIFZIIq1ssKBd2Gyjp4N4IzPTSS2cxYaEJCO
/n3dBEps8qOo62agIi1IAZ8iPrEClP4zWtXIZq0h+0MKGaOKnnJfCsIigmZ0KtZQ
797hb4Tdb/lhVX3VNK/h2sx657LPMsBmUW3r0EtWZKrtKAXFkTSTqVAbOXy5cpc1
oWGsdDLfsEvfRTJux9gQ+e1MBAfWUf3uwEe/MwJBC1XqghcS1MeVAIML/KWRMhFg
1dvxTOIinyN2sflGC/nfWrhH09kRO4eT5YRzP8uX/A9Y0i3YNXRU8Nm00jwTAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUldT69yJ+Y66/gGYd4q53NPKYstYwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqgtTANBgkqhkiG9w0BAQsFAAOCAQEAcH9j
QKnICpm3SlpPOwKJLlx6ts22aGZQPR/qvbrdGR3A626eXE9O/CDGYTjfdSq283Y+
+p5hO/Omu2ZRp+X6gc45KuLXY90bNMKfYwalIT1fRuslq5Bnq38twfhxRW+E7srv
Amkrd4xL/1rM0ztS9WIowi1i0KCeE0ep136VGsEX0QaIEjvEP8bo5oA2AYHubpG2
TOO1UuHAP1GbYdtWtrZAAiIsYtxrp/bO8jRibyC7CgfGxjkY6dx6cBjm5vGDHW9k
qTo9jQVEu2EN11JJHfBb/iE05+ZkGmep6tU/NjBuYfqsBKCdvGH7fJkmieLQpTGU
UNFvm6Zc64qoWhZZMw==
-----END CERTIFICATE-----