Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142995.roa
File:                     AS142995.roa (raw, json)
Hash identifier:          tWwEBK61TDZxtdRLO/dXsaIMSk6uMZ5HhhOuZbQyJ5I=
Subject key identifier:   78:72:C8:31:DB:31:7A:0D:EE:5D:A3:5D:7D:CE:A3:A3:D9:07:C9:7B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       18FE6276CC017D2B919F8BBF3765B380D1C3E0FC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142995.roa
Signing time:             Tue 26 May 2026 03:17:14 +0000
ROA not before:           Tue 26 May 2026 03:12:14 +0000
ROA not after:            Tue 25 May 2027 03:17:14 +0000
asID:                     142995
IP address blocks:        240a:a159::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:fe:62:76:cc:01:7d:2b:91:9f:8b:bf:37:65:b3:80:d1:c3:e0:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:12:14 2026 GMT
            Not After : May 25 03:17:14 2027 GMT
        Subject: CN=7872C831DB317A0DEE5DA35D7DCEA3A3D907C97B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0c:5b:c3:81:23:42:72:64:55:0a:27:af:c4:
                    41:ae:29:7d:94:be:20:bd:cc:4a:c2:f4:78:48:0a:
                    3f:94:44:97:7c:57:5b:a2:8e:33:9d:d8:b7:60:7f:
                    ae:e0:54:9a:20:be:b4:21:26:ae:21:11:d0:a9:02:
                    e4:62:6f:6f:36:83:b6:15:43:e5:5f:35:4f:4d:c3:
                    da:0d:8f:19:fc:a2:81:c0:42:e7:58:71:8b:2d:82:
                    1c:6c:19:3d:f7:c6:02:2e:42:08:03:fe:8d:aa:89:
                    17:87:69:1a:2b:9a:b4:20:0c:82:49:78:35:23:e6:
                    3b:67:84:0f:f0:53:84:3c:48:e4:b1:30:05:1c:b0:
                    b0:b8:e9:92:4a:be:f8:ea:a2:1e:eb:02:79:b0:a5:
                    95:33:bc:b9:93:3a:64:e9:9f:c7:37:af:16:7e:ce:
                    74:26:53:be:e8:33:7e:c7:ef:f3:be:02:43:bd:8c:
                    22:bd:ba:cd:f0:e7:d7:18:5e:49:f2:12:77:42:17:
                    9f:a6:0d:4b:0f:df:c2:31:1c:ae:cd:81:aa:e1:65:
                    58:95:3a:93:b5:98:0f:da:ae:92:1b:67:62:07:4e:
                    ce:a3:a6:a7:27:02:4b:ad:8c:b0:2b:e9:a2:75:8c:
                    88:9d:61:6d:14:47:1d:59:ef:c1:15:42:f7:68:03:
                    0e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:72:C8:31:DB:31:7A:0D:EE:5D:A3:5D:7D:CE:A3:A3:D9:07:C9:7B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142995.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a159::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:0f:25:fb:08:0f:f9:a0:d7:56:e7:49:b4:cc:1a:fd:c5:29:
         26:5d:b6:ef:d0:87:a5:2f:57:3b:a7:a5:54:bb:a9:60:ba:2f:
         27:52:3b:0e:9a:89:25:85:ef:56:ec:43:da:da:1c:0c:76:d2:
         af:8f:ef:33:ea:9c:8f:ff:7e:a3:f6:53:b6:fe:d1:fa:8f:bf:
         db:0d:d3:53:71:0c:04:4f:59:43:93:62:01:64:93:c3:ca:7d:
         54:10:62:3a:57:d0:ba:8b:47:c0:0b:20:ec:d0:24:c2:74:96:
         f2:b0:16:36:71:f8:36:15:ea:a1:52:f9:5a:21:d0:e9:ea:8f:
         ab:97:d8:ee:a1:54:53:6f:70:14:20:bd:7d:8a:61:7d:3b:1d:
         49:35:9b:18:f7:f4:2b:f5:00:e0:83:ca:8f:6e:da:96:3d:6e:
         4b:d1:f5:9d:d1:fc:15:46:d1:b9:83:86:b8:bb:f2:43:57:da:
         f0:64:4d:03:02:c6:cc:a0:87:99:aa:e4:27:98:f4:a3:7f:39:
         b6:9c:fe:d2:86:17:08:45:e4:02:78:36:08:52:f9:fc:e0:76:
         02:70:94:09:e4:cf:41:1f:fc:10:8f:e6:00:dc:03:e5:e1:90:
         dd:12:bf:40:77:4d:0b:3a:ab:96:38:c9:c3:24:18:94:cc:9f:
         8e:99:f0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----