Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142993.roa
File:                     AS142993.roa (raw, json)
Hash identifier:          ZPzKzyf1Ye3dCcPJYjJM3q7xjkoAs+GIpSKmaT1sxZ0=
Subject key identifier:   18:79:9C:3B:73:3A:E5:69:8B:AC:1E:3E:EE:2D:9A:18:32:51:A2:20
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6807D561C3FB86A117B3B04EC611C8E363735A1F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142993.roa
Signing time:             Fri 22 May 2026 06:58:41 +0000
ROA not before:           Fri 22 May 2026 06:53:41 +0000
ROA not after:            Fri 21 May 2027 06:58:41 +0000
asID:                     142993
IP address blocks:        240a:a157::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:07:d5:61:c3:fb:86:a1:17:b3:b0:4e:c6:11:c8:e3:63:73:5a:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:41 2026 GMT
            Not After : May 21 06:58:41 2027 GMT
        Subject: CN=18799C3B733AE5698BAC1E3EEE2D9A183251A220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:35:3a:86:4c:f6:9b:35:1d:49:6e:f0:60:0e:
                    6b:e1:f7:e2:94:bd:f3:e1:19:04:f3:5c:7e:73:8e:
                    ca:0b:25:8e:66:9b:b0:f7:53:7a:ba:b1:a9:f4:46:
                    92:8a:91:d0:b6:4d:85:6f:a0:66:90:fe:74:de:4d:
                    76:a6:03:55:99:78:34:83:3c:4d:96:5a:05:67:1b:
                    17:62:61:22:38:5b:1c:41:36:ef:f5:6e:5e:91:83:
                    d2:f8:fa:b2:88:80:99:56:67:a4:80:3c:45:eb:92:
                    15:f6:e2:70:0a:d5:0f:91:b0:ec:75:cc:27:92:58:
                    35:39:c3:4e:19:17:48:26:9d:47:c7:df:5a:d7:14:
                    fa:f2:8b:7c:41:14:1f:7c:7f:8d:8d:31:68:9e:93:
                    fa:af:01:c6:d2:ec:b3:0c:6d:77:ba:63:8c:1d:24:
                    bc:2a:77:40:67:f6:57:bb:40:bb:4e:dd:b9:cf:19:
                    7b:77:c8:32:b1:be:19:4e:cd:81:13:f6:a5:6b:a7:
                    2a:2d:a3:c1:30:27:c6:b9:b6:0a:64:05:01:24:4f:
                    ba:ec:d5:bc:b3:ac:1d:01:c7:ba:06:8e:9f:f8:d8:
                    d8:a4:54:ec:82:c9:11:51:1e:3f:a7:55:a9:88:c0:
                    6f:f3:62:7b:c9:5f:c5:c7:84:3b:5a:e2:25:5d:42:
                    bf:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:79:9C:3B:73:3A:E5:69:8B:AC:1E:3E:EE:2D:9A:18:32:51:A2:20
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142993.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a157::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:6a:37:61:04:c4:e0:36:e2:c6:92:4c:9f:ad:ac:48:84:87:
         69:44:94:83:c7:ca:98:ce:ea:59:25:54:df:e6:e4:53:07:dd:
         d5:9c:2e:cf:a5:0e:17:98:29:7d:2a:9f:cd:2a:53:25:65:c0:
         6b:cb:19:1c:9c:ba:86:c6:61:8d:2d:d9:6c:55:c6:fb:12:73:
         6a:0f:a0:20:e4:b6:4f:5d:01:a4:c8:22:f2:ba:63:ff:9d:ff:
         8e:39:86:53:5b:6a:0e:e9:83:e3:ef:28:ce:8b:4e:99:62:e5:
         ad:99:61:65:28:10:ed:76:9d:85:a9:7d:2f:44:57:69:3d:c9:
         d2:47:a2:61:40:d3:27:88:40:14:9d:26:bb:93:e6:1f:a7:9d:
         a9:fa:5f:ed:96:bf:0b:f0:cc:30:6a:fd:27:a6:93:1c:8d:7b:
         c3:dc:c3:9a:cf:02:0e:6b:55:da:46:46:68:b5:e5:a1:20:6e:
         4f:ca:a8:3c:53:70:5d:f2:f1:61:a4:e8:9b:12:09:64:9a:22:
         81:0b:07:7c:53:08:73:fd:28:88:cd:e5:91:8d:82:89:5f:f1:
         c9:31:44:38:a8:81:f8:3b:9f:c7:47:98:64:b0:67:44:04:07:
         69:88:29:80:c9:e6:bb:3d:94:8a:58:ba:38:10:30:f7:e1:16:
         9a:6b:a5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----