Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142979.roa
File:                     AS142979.roa (raw, json)
Hash identifier:          nyasijvcgD/25R4aysIjOjMoV7fo+z6Ja5rBhMprJMk=
Subject key identifier:   E9:81:5B:33:90:E1:C9:96:77:B7:37:89:B8:EE:3B:9D:8F:7A:20:FE
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       28EE76A67A8E98EB0A4246C4EF407AC1C6F07022
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142979.roa
Signing time:             Fri 22 May 2026 07:24:47 +0000
ROA not before:           Fri 22 May 2026 07:19:47 +0000
ROA not after:            Fri 21 May 2027 07:24:47 +0000
asID:                     142979
IP address blocks:        240a:a149::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ee:76:a6:7a:8e:98:eb:0a:42:46:c4:ef:40:7a:c1:c6:f0:70:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:19:47 2026 GMT
            Not After : May 21 07:24:47 2027 GMT
        Subject: CN=E9815B3390E1C99677B73789B8EE3B9D8F7A20FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b7:5a:0a:ae:ce:47:d9:f7:bf:84:97:e8:63:
                    3d:3c:05:33:58:8e:c3:ef:d9:06:41:92:a3:a3:94:
                    0c:91:98:94:e4:fa:b4:d7:0b:dc:8c:f1:cf:70:7b:
                    95:13:99:37:c4:9f:db:38:41:c4:cf:3e:67:db:30:
                    2c:20:f9:71:82:52:7a:44:4e:d4:ba:8a:d4:4d:a4:
                    df:e1:d2:2b:91:bf:8f:39:5f:d7:7f:ae:2a:58:f5:
                    0c:d1:86:1c:88:53:e4:36:03:df:19:36:ce:b6:0c:
                    20:80:61:70:a4:37:f3:98:ff:b4:93:9e:34:6f:e2:
                    ae:7d:3e:28:0f:9f:5f:10:56:17:76:44:92:b3:4e:
                    46:31:4b:cc:ad:57:53:be:99:b2:e8:e3:cc:56:f8:
                    84:a5:b2:b0:b9:da:1c:e8:4d:79:e3:7e:ba:0d:2c:
                    eb:b6:8c:40:47:95:2c:dc:54:3d:22:8d:81:a5:42:
                    91:17:d1:4e:8e:f0:88:50:6d:5d:8d:29:9b:ed:ce:
                    bd:17:a0:c7:55:1e:7e:93:ef:3e:b6:f7:e9:0d:ee:
                    ac:ac:85:a4:d5:20:cb:fc:6a:da:90:fa:6c:1f:97:
                    e3:73:54:8b:59:ca:03:3b:76:11:40:78:c1:64:a5:
                    89:b4:c7:58:68:83:c8:b9:86:cb:11:8a:b4:80:2a:
                    30:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:81:5B:33:90:E1:C9:96:77:B7:37:89:B8:EE:3B:9D:8F:7A:20:FE
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142979.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a149::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:9a:e3:cf:5b:c2:73:0f:26:30:dc:03:ae:4e:c1:12:2d:79:
         6f:85:1c:03:84:b0:34:79:11:1a:e7:2a:b1:ac:b5:48:94:4b:
         c9:fd:5d:5d:0a:85:55:8d:88:60:e3:b6:8b:dd:a4:31:51:d4:
         da:cd:a8:f9:71:6f:be:1a:44:13:c2:4d:6e:f3:ce:84:a8:ed:
         2a:5e:ec:73:8d:1c:d5:ec:f7:ea:45:80:61:95:76:1d:4c:11:
         cc:fd:5a:64:68:dd:2d:70:04:32:9a:28:22:f2:4d:aa:a2:3d:
         fb:e5:7b:85:57:b9:a6:a1:8e:70:ba:43:d4:e5:d5:30:ee:2c:
         86:43:7a:e5:96:10:88:c6:5a:1b:b4:ea:d6:40:f5:df:73:cb:
         5e:f1:c2:2b:85:d5:92:0c:18:01:69:1c:1d:55:04:ee:40:fa:
         41:e6:61:bf:0a:6f:8d:16:43:c1:3a:7a:ad:60:a6:bf:7a:1c:
         ce:7b:7d:87:48:18:ad:6a:4b:3a:86:53:77:43:f9:2c:b7:fc:
         7e:4b:5d:b7:aa:17:23:f8:12:b1:be:f7:15:1b:fb:f7:f8:09:
         61:48:91:8d:ed:2a:67:84:d9:6a:5b:7f:17:bb:ac:18:bb:f8:
         3f:d1:b9:f7:14:9b:24:98:4f:f4:86:07:e4:33:d1:01:fa:dc:
         19:be:0f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----