Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142876.roa
File:                     AS142876.roa (raw, json)
Hash identifier:          eLYsu0XyroS6EzUo4MJFSa/BEXSuJn/96TgcjTK2MAk=
Subject key identifier:   83:94:3C:D9:00:1A:13:55:3F:AF:1E:16:35:66:D7:48:00:9A:13:12
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6F023DEC75F84066A78D14014173C2CE50D4746A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142876.roa
Signing time:             Tue 26 May 2026 01:12:59 +0000
ROA not before:           Tue 26 May 2026 01:07:59 +0000
ROA not after:            Tue 25 May 2027 01:12:59 +0000
asID:                     142876
IP address blocks:        240a:a0e2::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:02:3d:ec:75:f8:40:66:a7:8d:14:01:41:73:c2:ce:50:d4:74:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:07:59 2026 GMT
            Not After : May 25 01:12:59 2027 GMT
        Subject: CN=83943CD9001A13553FAF1E163566D748009A1312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b0:b2:7b:48:8c:31:d2:b4:79:29:41:39:46:
                    fe:4f:04:1d:75:6d:43:62:1f:f7:2c:2a:23:76:33:
                    41:f1:53:28:ce:09:62:40:e4:fa:9a:b1:94:c8:79:
                    d3:84:a1:18:75:73:a5:1c:97:e8:33:29:cd:74:e8:
                    32:42:ec:25:41:ca:78:94:db:04:17:c2:4c:eb:80:
                    b1:24:39:d0:79:7a:e4:91:50:bc:a8:d3:88:b4:1d:
                    22:b4:79:8a:08:d9:54:df:e8:f5:35:11:60:f4:ff:
                    21:0e:da:57:1a:eb:b9:17:07:da:12:d4:c1:d4:23:
                    cf:42:fc:46:13:ec:af:4c:ff:50:9d:0e:43:8b:8d:
                    e7:52:03:bf:24:62:d1:f8:95:a7:fa:af:76:bf:72:
                    06:60:2d:b4:5f:2a:d1:47:f2:5b:0e:a8:d8:ef:c7:
                    f9:2c:d2:04:5f:6f:73:43:2a:2c:fe:87:96:98:c0:
                    db:52:68:27:56:f5:2e:b8:c0:d3:5a:b5:30:5d:e2:
                    40:75:91:0b:fc:45:c4:be:a4:69:f2:e0:3e:c2:48:
                    ae:01:66:70:ba:57:b9:bb:84:d3:48:95:e2:9b:81:
                    83:6e:c7:6b:70:5f:91:c8:1e:69:52:5d:d8:25:7d:
                    97:75:e4:0f:49:d6:d4:cd:33:a9:b7:02:43:fc:20:
                    7d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:94:3C:D9:00:1A:13:55:3F:AF:1E:16:35:66:D7:48:00:9A:13:12
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142876.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a0e2::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:4e:2b:47:24:c6:f9:13:96:46:87:76:27:c9:ae:4e:34:71:
         f5:4b:4e:79:de:97:ea:65:5d:d8:ed:4c:b5:7f:cb:96:e4:08:
         3a:f4:06:83:91:06:90:89:92:31:80:d5:25:1e:ee:b2:ce:ca:
         be:d4:72:ca:ca:7a:91:1d:08:36:ba:76:2c:14:65:44:65:b5:
         7d:11:88:b3:7a:6f:e6:87:7e:c6:42:e9:07:e5:ba:ef:57:82:
         e2:f2:76:9e:4c:02:0f:41:ea:e9:81:73:77:72:22:83:11:ef:
         22:1e:e0:e2:12:b9:c6:64:39:54:9b:4b:a0:2b:48:68:da:47:
         f8:d7:fa:f3:c2:50:a8:8b:c7:3c:aa:a2:49:cd:00:c8:a0:90:
         aa:75:49:e0:7d:3a:f0:de:4d:b0:99:f3:e6:35:67:13:ad:9f:
         d3:c7:8a:a7:39:82:b9:3f:58:e6:3f:88:6e:83:70:3c:8a:29:
         29:03:b2:19:b3:86:32:87:53:93:fd:0a:a4:79:f2:06:3c:d3:
         be:69:5f:08:b7:00:ce:19:db:33:51:be:78:9b:69:59:af:6c:
         fe:7e:27:d0:33:30:19:a3:87:e5:a5:77:13:3c:e2:56:94:b9:
         5b:fe:e6:e2:39:af:c4:0b:ce:2c:ec:d2:46:6f:38:95:a8:13:
         1d:f1:58:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----