Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142878.roa
File:                     AS142878.roa (raw, json)
Hash identifier:          faYOyWDSRzmrxhl2mT1KZcuGSdGVJ82aKZlHkjZ9kEQ=
Subject key identifier:   85:13:8A:D5:59:8A:5D:22:62:E8:2D:BD:BD:CA:CE:B5:79:2A:96:BD
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       37E0401DF9AA29F89D19D99694A63DA6FB191652
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142878.roa
Signing time:             Fri 22 May 2026 07:32:32 +0000
ROA not before:           Fri 22 May 2026 07:27:32 +0000
ROA not after:            Fri 21 May 2027 07:32:32 +0000
asID:                     142878
IP address blocks:        240a:a0e4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:e0:40:1d:f9:aa:29:f8:9d:19:d9:96:94:a6:3d:a6:fb:19:16:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:32 2026 GMT
            Not After : May 21 07:32:32 2027 GMT
        Subject: CN=85138AD5598A5D2262E82DBDBDCACEB5792A96BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b9:cc:99:88:05:61:a5:92:dd:4b:24:7e:7c:
                    33:10:e9:44:4a:bd:bf:b2:f5:e0:b1:09:2d:e9:bc:
                    e4:46:4e:fb:78:17:9f:c3:ec:c1:d3:c8:a6:bf:c1:
                    71:cd:c2:ae:ec:a0:bf:74:0c:b0:45:0c:aa:65:32:
                    60:0e:a8:2a:78:96:c2:b9:45:11:68:e6:14:e9:8b:
                    51:f2:1b:e9:d3:2f:44:85:bc:56:2f:20:40:f5:00:
                    f0:5b:11:ce:4e:36:60:21:e6:a1:12:54:53:c2:79:
                    13:ab:4a:1a:65:ed:ee:87:03:d5:bf:bb:d3:be:b6:
                    91:9d:e5:ff:c0:2b:b4:8e:c7:d0:13:ad:c7:26:3b:
                    d3:07:b6:09:a3:3c:a8:c3:e0:32:1a:72:23:56:0c:
                    93:7c:60:01:8b:42:63:dc:0f:26:5a:95:98:f8:62:
                    5f:07:86:cc:53:46:06:d6:c8:7b:43:76:72:4d:a7:
                    4b:e9:2e:d9:35:9d:20:1b:03:03:56:a1:fc:7d:80:
                    8e:f9:36:48:06:e3:7b:aa:83:06:d9:c7:a5:e7:1b:
                    28:44:22:02:2f:d4:c4:2a:8b:39:cd:81:8a:ed:2b:
                    37:35:74:8a:a1:28:f7:65:1c:b0:10:5b:69:65:8a:
                    c5:3b:8b:ec:30:08:41:95:1c:41:60:48:d3:b0:c3:
                    7a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:13:8A:D5:59:8A:5D:22:62:E8:2D:BD:BD:CA:CE:B5:79:2A:96:BD
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142878.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a0e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:27:10:ea:ac:f9:f2:f0:ad:db:d4:96:a7:5f:b9:4b:52:ec:
         a2:3e:28:63:87:80:a1:69:af:69:91:af:43:90:86:27:a4:7b:
         99:d6:4f:db:97:df:c4:47:97:4a:34:7b:48:46:0d:15:dc:f4:
         39:60:48:83:96:8e:eb:0e:35:bb:32:bf:aa:86:fe:97:eb:f1:
         bf:bb:37:f6:dd:13:01:76:82:0a:66:1b:75:0c:5b:f3:50:fd:
         49:fc:d1:3b:6a:64:52:fb:db:59:85:cc:4e:58:e2:dc:c7:5d:
         d9:b6:5b:68:51:cb:4f:48:b1:38:c8:3e:a7:4f:17:bc:15:86:
         05:74:2a:64:80:0b:b3:12:37:e4:40:6f:30:5f:b3:e2:af:71:
         a1:d7:70:9b:d0:10:c4:e3:79:46:3e:7d:f5:87:94:a2:bd:90:
         3b:f6:06:46:3c:60:41:77:e2:9f:49:1e:88:29:b2:30:95:72:
         b9:fc:f4:a0:e9:2e:49:f7:1b:62:3d:c9:f2:f3:01:18:7f:b2:
         af:e3:bf:ca:5e:d3:9b:55:44:d2:35:54:f7:f3:75:ea:a1:bc:
         48:b9:65:e4:81:c8:9e:06:5b:f6:54:2a:74:98:45:a1:47:fd:
         68:c9:cf:b8:f8:17:31:30:a3:6d:6d:39:b2:c2:b9:7c:84:86:
         be:4b:f8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----