Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142918.roa
File:                     AS142918.roa (raw, json)
Hash identifier:          vXUZDA9bpphukKzOwsOgcVbFKQmPHchWjoZ+OmM1Yks=
Subject key identifier:   9C:D4:85:0D:1E:0E:A9:DF:78:5A:7C:36:41:F9:85:B8:52:7C:2A:D2
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       530CC330BBD34AC3AF9BAED9FC317AEA3A4FF6CD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142918.roa
Signing time:             Fri 22 May 2026 04:26:44 +0000
ROA not before:           Fri 22 May 2026 04:21:44 +0000
ROA not after:            Fri 21 May 2027 04:26:44 +0000
asID:                     142918
IP address blocks:        240a:a10c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:0c:c3:30:bb:d3:4a:c3:af:9b:ae:d9:fc:31:7a:ea:3a:4f:f6:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:21:44 2026 GMT
            Not After : May 21 04:26:44 2027 GMT
        Subject: CN=9CD4850D1E0EA9DF785A7C3641F985B8527C2AD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fa:d9:6e:e6:e1:a5:97:67:69:b1:d2:36:90:
                    fd:60:54:84:47:0c:70:29:b3:4c:74:55:e1:08:76:
                    27:22:b4:b3:7c:7e:7c:39:2a:4c:e7:0a:b0:1e:97:
                    37:62:0b:20:66:01:9c:6c:36:b1:93:af:81:d1:1e:
                    2b:c6:a0:6d:29:e1:e9:8e:c9:49:6d:74:c0:86:74:
                    0a:0c:90:90:4c:ff:91:b8:e9:69:39:80:94:e3:1c:
                    3c:dd:6a:b9:b9:3a:f5:75:55:97:d2:2a:2e:7a:11:
                    2d:f6:b5:9f:be:d8:a6:01:f0:6f:da:c7:68:48:06:
                    ab:6d:9c:03:0b:3f:21:17:55:73:f9:4c:8d:d0:35:
                    cb:b2:b9:b7:3b:01:04:9b:2e:f6:60:60:4d:09:7c:
                    a7:9f:d2:50:a8:93:14:31:b5:8e:8f:8a:c6:ae:4b:
                    db:7b:e7:f3:ce:d3:20:ec:85:22:71:8d:2e:0a:9e:
                    87:fe:ad:0e:53:77:b6:26:11:4a:15:11:f8:c6:f9:
                    f6:35:f6:90:b7:e9:4d:57:59:e3:d4:6d:66:4a:81:
                    fd:ba:0d:1a:2f:da:f4:fa:06:73:8c:d8:c8:df:c6:
                    93:92:34:8a:be:fd:d7:65:ba:f9:aa:c9:7b:8d:d7:
                    5e:ca:9c:cb:80:8c:73:ce:9b:72:4c:05:f5:99:f2:
                    a3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D4:85:0D:1E:0E:A9:DF:78:5A:7C:36:41:F9:85:B8:52:7C:2A:D2
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142918.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a10c::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:50:00:80:20:61:ef:61:2f:a5:fd:9c:9b:ec:fb:ae:97:5f:
         0a:2a:0f:96:f8:68:27:30:f4:dd:b1:aa:f4:98:a7:58:96:22:
         97:86:e5:50:ff:3e:69:63:19:90:f9:dc:e2:be:26:56:5a:99:
         c8:74:13:89:91:61:0b:3c:bd:61:a3:3b:7f:e3:7b:cd:4a:d6:
         1f:f6:9c:c7:b6:7e:b8:8f:00:64:88:d0:90:50:3e:04:86:77:
         8e:6b:d3:3f:b8:6b:60:32:4d:43:8b:8d:3d:2e:8d:fc:23:cb:
         d9:4d:fc:0c:46:90:4e:7b:39:8d:a8:db:4f:01:a5:6b:54:19:
         06:4b:b7:6b:a5:e0:24:7b:ff:3b:e4:78:1e:12:be:02:fc:48:
         23:67:ff:d7:c8:6b:7d:73:83:8a:73:3b:ca:e5:0f:70:fa:64:
         03:82:c7:3e:8c:2b:35:35:5e:1a:ff:cd:bf:9d:38:3d:7b:ed:
         b1:dc:b0:80:9d:53:50:13:c2:f6:44:98:57:87:66:04:e3:cf:
         6b:09:11:1d:fe:5f:ce:df:44:40:6a:37:2b:80:5f:12:7e:14:
         9e:32:0f:df:38:3a:a3:67:f3:a7:7c:55:41:5a:a9:53:24:26:
         a2:ba:e1:57:76:9f:e9:e3:73:fa:db:fd:0d:07:ab:cf:e7:76:
         4f:76:38:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----