Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142897.roa
File:                     AS142897.roa (raw, json)
Hash identifier:          WwQEdjFj+EAN2tHJVdtMNiURwHl8Jd8FQdemy4mh92A=
Subject key identifier:   9C:60:4A:50:8C:1A:96:00:B3:14:91:BC:D6:0D:45:E1:D0:1B:C0:5D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0280E6D02B7B01B09C680EF0E7A9A565F311DA8E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142897.roa
Signing time:             Mon 25 May 2026 06:49:11 +0000
ROA not before:           Mon 25 May 2026 06:44:11 +0000
ROA not after:            Mon 24 May 2027 06:49:11 +0000
asID:                     142897
IP address blocks:        240a:a0f7::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:80:e6:d0:2b:7b:01:b0:9c:68:0e:f0:e7:a9:a5:65:f3:11:da:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:44:11 2026 GMT
            Not After : May 24 06:49:11 2027 GMT
        Subject: CN=9C604A508C1A9600B31491BCD60D45E1D01BC05D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b2:3c:5d:1f:d2:6f:32:99:c8:45:2f:5a:90:
                    47:52:91:ad:0a:78:33:ea:8b:ce:13:df:71:6d:c8:
                    e1:1c:7d:9f:8b:86:09:d9:10:04:63:67:4d:d7:27:
                    d3:9e:57:61:ba:56:84:6e:c5:84:7b:cd:d0:17:76:
                    d9:3f:d5:a7:5a:d3:49:54:2e:0b:b6:59:2d:e9:c7:
                    29:14:b9:8a:f7:f0:10:13:c0:2d:6e:62:b9:36:29:
                    10:2e:39:52:e2:9f:70:66:56:a7:aa:f4:36:d5:17:
                    29:26:51:e3:9a:65:ed:53:bd:67:2a:78:92:83:97:
                    20:81:2e:0c:79:58:9f:cf:7f:3a:54:ba:3d:71:95:
                    6a:6d:5a:73:d1:80:10:7c:a7:46:f6:4c:0e:3d:b5:
                    ef:13:b5:79:96:f6:57:e1:20:17:54:5b:29:13:ab:
                    a9:d1:dc:f1:47:89:ca:84:0c:d4:dc:ee:6b:6f:a4:
                    3c:8b:17:2e:ee:26:0b:48:84:b8:c2:93:2e:51:d7:
                    12:a9:32:7c:e1:9f:ee:9d:ea:4f:3d:90:4d:bf:14:
                    47:74:95:59:1d:ea:43:66:1d:14:98:ff:71:58:74:
                    34:93:83:61:61:0e:52:e9:75:42:e6:41:73:5f:59:
                    2b:19:97:7b:71:79:11:1b:77:df:d3:94:fc:bb:30:
                    ae:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:60:4A:50:8C:1A:96:00:B3:14:91:BC:D6:0D:45:E1:D0:1B:C0:5D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142897.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a0f7::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:34:bf:d6:63:21:c3:9a:14:c8:b9:43:57:c8:96:3e:ca:7d:
         c1:f8:5d:c0:d8:2a:09:16:d9:f5:d0:a9:17:4f:82:90:92:ac:
         95:a1:5f:5c:c1:80:b8:58:a2:3b:6c:55:0f:3e:5e:62:58:46:
         cf:26:fa:31:73:df:82:49:84:bb:73:ff:2a:9a:1b:51:e4:fa:
         a8:d3:17:c4:f2:99:b7:de:42:27:41:3f:2d:7c:61:3b:a9:73:
         14:95:46:9e:32:e7:b6:20:3b:0d:87:a6:6f:fe:17:da:ef:b2:
         55:5d:e7:df:63:be:d9:e0:fd:38:fb:34:f1:8c:6c:18:b9:c5:
         92:ec:69:76:b6:f8:8d:75:05:8d:95:69:1e:43:68:36:8b:ed:
         ac:8e:c2:b5:cd:f1:67:2b:d8:7b:c8:53:04:43:26:4b:b5:68:
         9f:c4:60:d9:18:50:de:d5:ea:80:a5:40:a2:ef:7c:6f:0e:b4:
         10:f3:16:61:b4:ab:bd:26:61:97:25:8f:2e:08:af:46:20:bc:
         b8:22:28:5a:d6:ba:2b:de:32:0e:b2:f5:bf:f5:b8:50:5e:ff:
         c7:8f:43:39:c4:3f:f1:28:42:6d:94:0a:e3:d2:d6:83:16:3d:
         3b:8a:9b:df:43:24:d0:49:b8:4b:68:34:6c:da:b7:f2:03:41:
         05:d4:dd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----