Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142955.roa
File:                     AS142955.roa (raw, json)
Hash identifier:          PtE3k0C5Hzb33p94yHXS/iTloywlgEUsVj8L4fbas1U=
Subject key identifier:   E2:50:D4:22:3C:CD:EB:3C:88:21:44:9B:49:8C:AF:28:87:E1:ED:2B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       684C5B3F08C89E08C5CE59AE6BB285B40E7FFD47
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142955.roa
Signing time:             Fri 22 May 2026 07:09:15 +0000
ROA not before:           Fri 22 May 2026 07:04:15 +0000
ROA not after:            Fri 21 May 2027 07:09:15 +0000
asID:                     142955
IP address blocks:        240a:a131::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:4c:5b:3f:08:c8:9e:08:c5:ce:59:ae:6b:b2:85:b4:0e:7f:fd:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:04:15 2026 GMT
            Not After : May 21 07:09:15 2027 GMT
        Subject: CN=E250D4223CCDEB3C8821449B498CAF2887E1ED2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ea:e0:fa:89:e7:dc:35:6d:49:88:cb:f5:c6:
                    4c:50:de:8c:da:3e:cd:fc:d3:49:a1:13:d6:df:bc:
                    9e:bc:bb:a7:dc:78:86:a4:d7:dd:57:8d:f0:14:94:
                    c2:77:a1:bf:a1:b9:9e:b8:29:55:79:0d:f2:64:16:
                    9f:27:2b:8f:c2:fb:4b:f2:5e:60:74:f2:f9:1f:58:
                    5d:79:7b:99:6f:75:2d:ae:e1:bb:e7:6a:ba:68:5c:
                    3c:2c:a3:15:8a:0d:73:32:73:a6:35:d5:ee:c0:29:
                    b3:cd:7d:73:b3:fa:17:61:1c:76:30:6e:f2:3a:c3:
                    98:ce:66:34:ef:ad:89:d9:d4:d5:1e:78:4f:01:8e:
                    81:b6:29:a8:55:40:ac:21:31:1a:66:c8:6c:f0:8f:
                    e8:bf:00:39:d0:8b:96:04:f1:fa:0b:25:f3:72:f6:
                    a3:e3:cd:dd:7e:8e:a8:fc:72:21:d7:a7:97:6b:cd:
                    fe:e6:e8:9b:bf:f3:c3:85:4b:d8:b4:c3:ae:0c:ea:
                    87:3e:2f:0f:68:8b:97:9a:8e:6f:e6:14:40:16:67:
                    b2:1a:00:2f:08:fa:0c:60:c2:84:8f:c9:4d:ff:a5:
                    e7:07:95:16:04:8a:c1:de:77:8b:ed:10:9b:5e:3e:
                    e2:04:45:94:2d:56:39:42:43:a7:31:4e:ed:df:25:
                    ec:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:50:D4:22:3C:CD:EB:3C:88:21:44:9B:49:8C:AF:28:87:E1:ED:2B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142955.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a131::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:e5:0c:96:5f:65:71:ca:c1:e3:3f:6a:e3:7c:47:ec:06:2e:
         58:fe:a5:fa:a7:a7:63:cc:01:64:57:07:b8:f2:6b:b1:d5:a9:
         d3:61:12:d0:ab:80:ce:75:5b:09:5e:69:aa:17:85:7f:c2:4a:
         64:67:4f:75:f4:6e:d6:c7:3f:70:d3:f9:2c:c8:c3:a1:40:45:
         0d:51:be:99:32:ad:7f:4f:b6:53:2e:a7:53:c2:82:ee:d5:fa:
         78:d8:12:2f:93:38:9f:48:c2:26:fe:d3:b8:a8:57:fe:0c:55:
         a0:94:7c:6e:32:48:9b:07:8f:f7:6c:72:28:bd:f5:aa:f7:20:
         11:6c:81:04:74:e4:f7:43:76:dc:6d:a9:23:65:43:5b:20:b2:
         42:2a:41:fb:31:77:82:62:d6:dd:73:f8:a2:be:a0:8b:f0:b4:
         cf:cc:90:d9:de:4f:69:cd:4c:e4:2e:93:ab:6b:45:13:e1:f6:
         a8:fe:08:e5:24:f4:48:79:3b:fd:39:5c:2b:e8:c0:bc:62:b3:
         d9:8c:48:ae:9a:44:35:51:ee:76:1c:c5:0c:8f:a2:c5:85:15:
         41:36:2e:8a:e1:b5:62:10:2d:28:16:a6:ba:19:b3:bc:a8:ff:
         77:8f:24:16:c1:06:d2:a0:3b:25:7d:50:58:11:a4:41:04:0d:
         91:53:66:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----