Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142922.roa
File:                     AS142922.roa (raw, json)
Hash identifier:          cFpXUnEopLblnaFFPXoOZTt4ASm6KFhRvLzRJDIQnm0=
Subject key identifier:   00:0F:7A:C2:65:DF:F7:0D:3D:88:51:43:A5:9D:EE:DE:80:43:05:F9
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6630F5A387641405FD29EC197113ECF736A21B90
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142922.roa
Signing time:             Fri 22 May 2026 06:46:07 +0000
ROA not before:           Fri 22 May 2026 06:41:07 +0000
ROA not after:            Fri 21 May 2027 06:46:07 +0000
asID:                     142922
IP address blocks:        240a:a110::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:30:f5:a3:87:64:14:05:fd:29:ec:19:71:13:ec:f7:36:a2:1b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:07 2026 GMT
            Not After : May 21 06:46:07 2027 GMT
        Subject: CN=000F7AC265DFF70D3D885143A59DEEDE804305F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:db:2e:84:f8:9d:54:52:a4:d8:2f:5a:27:b7:
                    82:1b:44:4a:39:28:fe:83:fb:12:b1:dd:99:d6:36:
                    c7:e4:46:d6:cc:10:d8:1e:23:a7:f0:24:0d:8b:88:
                    08:a5:b8:75:b8:19:5d:e3:1a:59:4f:25:40:39:f3:
                    3c:02:27:b2:01:96:80:0d:2e:d1:d4:71:ac:10:a8:
                    12:c9:26:9b:d0:9a:8d:34:dd:b9:e6:7f:71:c7:05:
                    ec:1d:9a:0b:a1:8b:56:8c:e0:e6:a2:6e:b8:32:a8:
                    32:0b:d4:e2:6a:03:1b:e4:77:10:fa:29:f4:e2:c8:
                    6d:ab:6f:26:67:f4:34:15:88:91:77:e3:c6:90:9b:
                    53:fe:1c:3c:27:92:0d:53:2c:5d:f8:94:c5:04:c1:
                    bb:67:c5:31:60:f9:a4:00:89:14:e7:1c:bc:18:82:
                    5c:44:6b:47:5c:50:39:15:b3:49:74:a4:ab:84:70:
                    f5:52:be:bc:8b:0f:6b:c2:33:f1:b8:79:06:8d:e4:
                    4d:96:ce:bd:df:92:60:7a:0b:a6:a5:15:b8:a1:33:
                    86:5f:54:af:3d:27:c0:a6:64:1a:54:e8:54:89:ee:
                    d7:ef:14:c7:13:32:84:e7:e9:5e:8f:28:64:26:7e:
                    c0:dc:b6:4f:3c:b6:eb:b2:47:14:e0:f2:9c:e7:56:
                    4c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0F:7A:C2:65:DF:F7:0D:3D:88:51:43:A5:9D:EE:DE:80:43:05:F9
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142922.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a110::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:d1:a5:2c:b3:ce:b1:bd:94:df:38:9d:12:0f:ca:df:61:5f:
         53:66:66:c4:f1:fa:00:99:34:89:3d:72:cb:84:7d:30:17:83:
         fd:ad:1e:9f:5e:f2:0e:88:ff:90:67:65:a9:74:8e:46:ac:87:
         7d:cb:39:8d:fe:ff:7c:f3:ff:51:6f:db:ad:aa:a8:7c:fe:6c:
         ac:6e:54:08:9f:61:29:d2:94:b2:fd:89:cb:f5:40:3e:0b:2c:
         1d:b9:fd:34:74:5b:76:b0:76:33:d7:a3:ac:53:0a:3f:86:77:
         31:a1:80:d2:23:04:57:1c:3a:8f:47:e3:50:34:9a:71:97:6a:
         32:6a:18:a6:26:fe:e4:f6:46:f8:40:fc:dc:14:a6:ea:60:88:
         26:11:bc:0e:2f:37:58:f2:87:fe:14:53:9c:10:3c:82:ab:fb:
         60:66:0b:56:93:e4:4e:bc:e9:0c:39:9c:c6:e4:8e:1b:20:5e:
         2c:01:a2:a5:00:a5:bd:db:d8:5c:b7:02:9a:4b:ee:d8:4d:80:
         fa:1b:77:b3:f4:8f:ee:be:39:de:15:49:92:5e:1c:98:24:2e:
         d4:99:4e:8d:31:c6:9a:fb:99:77:b2:8c:be:75:9a:79:e3:25:
         40:e3:bc:cc:bf:b4:e5:ee:69:f1:93:5c:bf:19:94:f3:c0:e6:
         60:ff:38:e6
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUZjD1o4dkFAX9KewZcRPs9zaiG5AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjQxMDdaFw0yNzA1MjEwNjQ2MDdaMDMxMTAvBgNV
BAMTKDAwMEY3QUMyNjVERkY3MEQzRDg4NTE0M0E1OURFRURFODA0MzA1RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS2y6E+J1UUqTYL1ont4IbREo5
KP6D+xKx3ZnWNsfkRtbMENgeI6fwJA2LiAiluHW4GV3jGllPJUA58zwCJ7IBloAN
LtHUcawQqBLJJpvQmo003bnmf3HHBewdmguhi1aM4OaibrgyqDIL1OJqAxvkdxD6
KfTiyG2rbyZn9DQViJF348aQm1P+HDwnkg1TLF34lMUEwbtnxTFg+aQAiRTnHLwY
glxEa0dcUDkVs0l0pKuEcPVSvryLD2vCM/G4eQaN5E2Wzr3fkmB6C6alFbihM4Zf
VK89J8CmZBpU6FSJ7tfvFMcTMoTn6V6PKGQmfsDctk88tuuyRxTg8pznVkzhAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUAA96wmXf9w09iFFDpZ3u3oBDBfkwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyOTIyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqhEDANBgkqhkiG9w0BAQsFAAOCAQEAO9Gl
LLPOsb2U3zidEg/K32FfU2ZmxPH6AJk0iT1yy4R9MBeD/a0en17yDoj/kGdlqXSO
RqyHfcs5jf7/fPP/UW/braqofP5srG5UCJ9hKdKUsv2Jy/VAPgssHbn9NHRbdrB2
M9ejrFMKP4Z3MaGA0iMEVxw6j0fjUDSacZdqMmoYpib+5PZG+ED83BSm6mCIJhG8
Di83WPKH/hRTnBA8gqv7YGYLVpPkTrzpDDmcxuSOGyBeLAGipQClvdvYXLcCmkvu
2E2A+ht3s/SP7r453hVJkl4cmCQu1JlOjTHGmvuZd7KMvnWaeeMlQOO8zL+05e5p
8ZNcvxmU88DmYP845g==
-----END CERTIFICATE-----