Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142838.roa
File:                     AS142838.roa (raw, json)
Hash identifier:          lKtKVsCpjnmNpPRl4ePH0CJJN4vgx+PYsN557ETSVgQ=
Subject key identifier:   BA:D5:C9:C4:36:42:0A:B5:84:9E:FA:EC:0E:1B:57:B5:68:DA:55:71
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1F709E8AB4BC5E654FE85AB4E9A10577D74A745C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142838.roa
Signing time:             Mon 25 May 2026 01:19:58 +0000
ROA not before:           Mon 25 May 2026 01:14:58 +0000
ROA not after:            Mon 24 May 2027 01:19:58 +0000
asID:                     142838
IP address blocks:        240a:a0bc::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:70:9e:8a:b4:bc:5e:65:4f:e8:5a:b4:e9:a1:05:77:d7:4a:74:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:14:58 2026 GMT
            Not After : May 24 01:19:58 2027 GMT
        Subject: CN=BAD5C9C436420AB5849EFAEC0E1B57B568DA5571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2c:ed:84:54:74:f0:f4:35:80:b7:af:d1:46:
                    28:47:93:da:be:7e:06:97:e2:0c:1d:d1:e7:1a:bf:
                    3a:06:95:6e:ad:42:9b:a4:72:c1:ee:c8:c0:4e:1c:
                    93:5e:99:8b:6f:82:f2:3f:52:66:56:9e:f2:36:a2:
                    05:17:49:1d:f6:a4:a1:63:e4:17:ff:67:f3:6d:24:
                    89:8b:0c:6c:98:82:31:a2:65:0d:98:9c:e7:6f:2d:
                    4c:e3:ff:c9:b1:c4:5a:d6:da:9c:55:75:c3:66:73:
                    3f:31:52:cc:eb:f0:9d:46:5a:12:17:27:5e:4e:9a:
                    c8:fa:12:cd:21:48:cf:49:7e:ed:ba:fb:bd:3d:ce:
                    f7:fb:45:00:be:2e:ec:dd:f3:f1:2f:00:59:c7:89:
                    a9:b8:33:18:36:79:b3:37:ba:96:d9:c3:90:b7:57:
                    97:cf:00:f6:55:82:7f:25:bb:df:6c:8d:d3:09:c0:
                    c8:26:55:c8:b4:af:69:cf:0d:86:81:b2:ed:29:56:
                    29:b7:1e:0e:38:e2:9b:a3:bf:c2:d2:75:3b:f2:bb:
                    a0:e5:56:cb:02:4d:c2:fd:d8:db:9e:98:38:8d:de:
                    8c:a5:f4:56:f3:fc:97:ae:3d:69:58:e7:b9:28:91:
                    c4:e6:46:96:c9:74:52:9c:1a:61:e2:0c:93:9a:14:
                    ee:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D5:C9:C4:36:42:0A:B5:84:9E:FA:EC:0E:1B:57:B5:68:DA:55:71
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a0bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:08:99:2b:2a:15:74:c4:4f:41:93:86:0a:b2:45:b6:22:40:
         2d:d1:37:4b:17:26:f0:34:fa:1a:41:cc:b2:29:bc:d5:de:33:
         3a:b6:a6:2f:64:6b:c5:b3:df:4e:35:cc:43:85:b0:c6:f8:00:
         2f:7b:2c:37:28:cd:0c:be:a0:3f:7e:59:8a:01:3a:93:f7:03:
         a1:70:ab:8c:2b:ae:7f:e4:ed:3e:4f:3f:69:4f:43:08:b5:95:
         a4:9f:68:d9:8f:9c:53:41:57:a2:17:c7:0a:2e:24:5d:bc:3e:
         31:28:b8:46:30:3a:70:6c:f1:11:9d:bb:53:eb:44:0c:2b:be:
         dc:98:85:05:6a:5b:25:76:00:c3:c0:7c:59:34:93:70:d1:f2:
         65:30:83:ec:e6:9e:ea:2c:53:0c:81:53:79:45:06:f6:a4:fb:
         ef:de:bd:95:5a:8b:9a:40:a8:6a:f3:ca:e4:b7:f1:a0:40:1e:
         b1:a5:df:57:81:f1:8c:17:63:c1:8c:d3:82:f1:b6:df:a9:fa:
         0c:41:76:8a:4b:4c:9a:f7:8d:87:37:cc:83:44:45:5b:cf:79:
         f8:e7:6b:24:42:26:c3:19:0d:43:2d:f3:3a:fe:37:ef:67:74:
         1c:c9:97:92:51:a6:cf:32:2a:4c:bf:69:2b:7c:f0:cf:02:a2:
         51:fd:0c:fe
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUH3CeirS8XmVP6Fq06aEFd9dKdFwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTE0NThaFw0yNzA1MjQwMTE5NThaMDMxMTAvBgNV
BAMTKEJBRDVDOUM0MzY0MjBBQjU4NDlFRkFFQzBFMUI1N0I1NjhEQTU1NzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+LO2EVHTw9DWAt6/RRihHk9q+
fgaX4gwd0ecavzoGlW6tQpukcsHuyMBOHJNemYtvgvI/UmZWnvI2ogUXSR32pKFj
5Bf/Z/NtJImLDGyYgjGiZQ2YnOdvLUzj/8mxxFrW2pxVdcNmcz8xUszr8J1GWhIX
J15Omsj6Es0hSM9Jfu26+709zvf7RQC+Luzd8/EvAFnHiam4Mxg2ebM3upbZw5C3
V5fPAPZVgn8lu99sjdMJwMgmVci0r2nPDYaBsu0pVim3Hg444pujv8LSdTvyu6Dl
VssCTcL92NuemDiN3oyl9Fbz/JeuPWlY57kokcTmRpbJdFKcGmHiDJOaFO4NAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUutXJxDZCCrWEnvrsDhtXtWjaVXEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqgvDANBgkqhkiG9w0BAQsFAAOCAQEALwiZ
KyoVdMRPQZOGCrJFtiJALdE3Sxcm8DT6GkHMsim81d4zOramL2RrxbPfTjXMQ4Ww
xvgAL3ssNyjNDL6gP35ZigE6k/cDoXCrjCuuf+TtPk8/aU9DCLWVpJ9o2Y+cU0FX
ohfHCi4kXbw+MSi4RjA6cGzxEZ27U+tEDCu+3JiFBWpbJXYAw8B8WTSTcNHyZTCD
7Oae6ixTDIFTeUUG9qT77969lVqLmkCoavPK5LfxoEAesaXfV4HxjBdjwYzTgvG2
36n6DEF2iktMmveNhzfMg0RFW895+OdrJEImwxkNQy3zOv4372d0HMmXklGmzzIq
TL9pK3zwzwKiUf0M/g==
-----END CERTIFICATE-----