Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142927.roa
File:                     AS142927.roa (raw, json)
Hash identifier:          fQgTW6kKrIbVTO1eWH281M65EB+hKbUrfxX2DFtMuTg=
Subject key identifier:   BE:DF:29:D4:13:8E:FD:D6:3E:19:1C:58:D4:AD:D8:D3:3A:91:D2:8D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5ADE01555F234C4DBD88B4AC059BDD6976DEDC28
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142927.roa
Signing time:             Mon 25 May 2026 01:38:04 +0000
ROA not before:           Mon 25 May 2026 01:33:04 +0000
ROA not after:            Mon 24 May 2027 01:38:04 +0000
asID:                     142927
IP address blocks:        240a:a115::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:de:01:55:5f:23:4c:4d:bd:88:b4:ac:05:9b:dd:69:76:de:dc:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:04 2026 GMT
            Not After : May 24 01:38:04 2027 GMT
        Subject: CN=BEDF29D4138EFDD63E191C58D4ADD8D33A91D28D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:02:05:00:61:fe:25:59:f9:14:c5:e3:9c:c6:
                    4b:6a:95:4a:86:89:cb:ef:4d:47:b4:80:7c:13:6b:
                    c7:99:70:eb:89:2d:18:b3:06:77:5b:8e:85:74:34:
                    c6:bd:c9:d6:93:95:81:ea:18:8e:86:6c:bf:2f:54:
                    f2:3b:b8:44:87:98:f5:95:ab:5a:20:93:a1:0f:b6:
                    0d:af:9a:90:2f:65:84:92:a0:e0:82:31:63:91:97:
                    75:d6:e2:19:9f:58:66:b7:df:53:80:13:79:df:d7:
                    66:c1:17:ca:a3:3b:ea:17:b5:84:3d:78:27:e6:25:
                    dc:3b:69:7b:da:23:1d:1a:de:1b:fb:9b:4c:f7:12:
                    54:2b:1b:d0:0c:d7:e9:e5:73:8b:3f:e4:7e:cc:ac:
                    01:02:7b:1f:c7:13:8e:9d:41:f6:ed:99:08:52:96:
                    40:7c:49:ef:a5:0a:0f:5f:d8:d9:05:4b:ae:4f:3b:
                    15:1d:e4:66:8b:e0:b0:32:be:02:a0:25:44:7c:3f:
                    17:14:93:4d:d0:58:f1:2d:d9:b3:eb:97:47:d7:c9:
                    3d:42:6f:83:51:db:85:40:90:bc:9b:e1:05:23:90:
                    51:7d:fd:83:04:c6:7e:00:f4:e8:7d:ec:02:f4:da:
                    f3:44:b0:f9:fe:4b:11:8f:69:c7:07:55:94:c1:94:
                    bb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:DF:29:D4:13:8E:FD:D6:3E:19:1C:58:D4:AD:D8:D3:3A:91:D2:8D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142927.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a115::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:53:bc:b4:b8:c3:da:38:4b:70:d5:ee:da:a7:80:eb:e5:34:
         5b:ba:36:4c:a5:98:8d:f5:f3:06:89:22:7e:6c:73:75:a2:4c:
         1a:96:2f:bf:eb:dc:27:30:ea:e1:5a:c7:56:5b:e6:19:81:0e:
         6e:cf:31:8f:f5:b0:d7:46:c1:d5:6f:f9:d2:74:2a:a5:72:3a:
         f6:05:44:f4:05:b3:71:f5:83:1f:08:4a:44:b9:6d:36:b4:73:
         3a:30:db:69:4d:28:db:26:4e:57:1c:97:91:ea:27:e0:f5:8a:
         c5:7f:76:4d:92:99:06:a5:2a:b4:fb:3e:c4:82:6b:bc:19:9a:
         82:bd:11:8b:94:43:8b:6e:ef:7d:81:98:b3:c4:00:18:ab:f9:
         89:24:64:ce:84:10:20:29:29:a5:83:09:60:5e:c2:a2:bb:cc:
         56:1a:20:6e:6e:3d:a8:9b:cc:a1:bc:7c:6c:ed:52:ba:04:6e:
         47:0c:7f:b4:e2:fe:6c:82:da:e6:5a:d6:b5:ca:8a:1e:b2:e5:
         5c:4f:f6:9c:01:dc:7c:f4:e2:76:e8:1f:b2:1e:08:a2:d2:6f:
         70:c8:0f:20:6f:11:7e:cb:9f:c9:e2:56:09:50:43:89:13:e4:
         ba:54:a0:aa:14:7a:66:77:dd:b9:d6:9d:a1:ba:fb:17:c3:89:
         b2:fd:18:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----