Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142960.roa
File:                     AS142960.roa (raw, json)
Hash identifier:          F8Yu5AJm0hKc53udlBnAK5X4rDXRez3SEP74f1ftgao=
Subject key identifier:   84:BE:22:B5:E3:F6:46:DF:2F:77:4E:76:C9:C6:1C:2B:B0:AA:7A:78
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       462058AECCE88BC2C61C5261CAB03598730E41A9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142960.roa
Signing time:             Tue 26 May 2026 03:16:52 +0000
ROA not before:           Tue 26 May 2026 03:11:52 +0000
ROA not after:            Tue 25 May 2027 03:16:52 +0000
asID:                     142960
IP address blocks:        240a:a136::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:20:58:ae:cc:e8:8b:c2:c6:1c:52:61:ca:b0:35:98:73:0e:41:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:11:52 2026 GMT
            Not After : May 25 03:16:52 2027 GMT
        Subject: CN=84BE22B5E3F646DF2F774E76C9C61C2BB0AA7A78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b2:b3:39:3c:64:d5:66:13:7a:7e:cd:ec:88:
                    dc:be:eb:1c:87:fb:87:db:90:1a:fd:1d:fc:e9:d8:
                    55:b8:11:fa:32:98:e0:b4:ae:be:c3:b1:b8:b2:44:
                    38:c9:1d:44:f3:2d:c1:4a:b0:f4:02:01:83:45:f2:
                    ff:61:96:3c:f8:b6:09:b3:e3:f3:42:ce:c9:35:a7:
                    f5:6a:fb:58:e5:a5:26:b0:71:20:f2:85:d3:ae:50:
                    9e:49:23:8f:d1:c6:a7:d0:21:73:78:5a:c8:cc:8a:
                    97:1a:d1:1c:1a:4b:63:45:3f:db:33:0e:34:7c:d1:
                    57:54:a4:18:e4:62:8b:6f:fe:5a:03:20:04:23:22:
                    3f:95:b8:9d:e1:5b:61:4c:6c:81:fa:f6:cf:ae:28:
                    fb:cb:bf:69:f8:ee:0c:69:46:bf:e1:5c:0d:41:18:
                    7f:bd:5a:cd:aa:ca:8b:24:19:88:a3:23:5a:f4:1e:
                    26:c2:86:8c:88:c4:e3:7f:b3:14:b2:ad:0a:e1:5b:
                    12:40:16:26:a7:23:7b:b6:f6:f6:27:51:f7:af:cb:
                    dc:ad:61:fe:f7:bd:bf:ff:69:ce:c0:0d:27:6a:70:
                    58:94:fa:38:49:4f:0f:8b:5c:76:57:70:02:16:bb:
                    d1:96:74:74:ab:19:96:ae:1b:90:a1:d8:4d:4e:59:
                    9e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:BE:22:B5:E3:F6:46:DF:2F:77:4E:76:C9:C6:1C:2B:B0:AA:7A:78
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142960.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a136::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:06:71:c5:37:25:19:79:ae:17:fe:ce:cb:d2:e2:5e:77:a0:
         fb:bf:40:a3:b8:b5:dd:24:e3:d5:2b:12:48:e4:2a:06:9a:c9:
         ad:3b:66:d9:da:1b:67:43:87:a5:05:27:0e:a7:c4:fe:99:4f:
         d2:85:4f:32:8b:49:d8:b2:d3:c2:af:ac:e6:e3:73:a6:04:8b:
         b7:b6:1e:11:93:12:cd:88:3e:77:3d:09:33:e2:b9:f2:0f:96:
         70:11:0e:49:9b:cc:fb:de:01:c5:be:24:d3:e7:a9:c6:ed:fb:
         ed:f3:73:84:b4:33:3d:e2:8f:d9:dc:f0:ea:4f:f9:ec:ce:bd:
         54:7a:bc:69:5f:84:d8:84:3e:ec:fa:55:e1:87:0f:55:9b:c6:
         13:72:f3:d7:d7:6b:ee:98:df:e9:ab:a5:99:5c:9a:ba:a2:5d:
         e8:1e:5c:71:df:24:12:eb:93:9f:c0:bd:63:d5:01:a2:b9:f8:
         b6:34:7f:66:d5:13:cb:29:6d:1b:11:3d:b5:e3:4b:a0:b5:68:
         92:b9:83:c8:8a:c9:10:fb:3c:bd:11:ff:76:7a:e0:d4:22:05:
         02:24:dc:3f:03:1b:78:e4:fb:07:3e:e7:4b:76:dc:ca:1f:32:
         d2:ff:6f:d6:d3:1b:47:3e:da:a5:ad:5d:1f:68:35:b6:f9:6b:
         7c:20:33:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----