Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144020.roa
File:                     AS144020.roa (raw, json)
Hash identifier:          5egXbNdeXL5dgcYBfyvyd3f/ok45Tp0F5h7/UhAiF5o=
Subject key identifier:   03:18:EE:73:CE:05:8F:C1:BF:48:EF:CC:20:8D:C5:AF:E7:F0:A9:7F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       33A3CC7A04A1C482970B2970A79C0030111839E0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144020.roa
Signing time:             Mon 25 May 2026 03:19:31 +0000
ROA not before:           Mon 25 May 2026 03:14:31 +0000
ROA not after:            Mon 24 May 2027 03:19:31 +0000
asID:                     144020
IP address blocks:        240a:a55a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:a3:cc:7a:04:a1:c4:82:97:0b:29:70:a7:9c:00:30:11:18:39:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:31 2026 GMT
            Not After : May 24 03:19:31 2027 GMT
        Subject: CN=0318EE73CE058FC1BF48EFCC208DC5AFE7F0A97F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6b:7a:46:8d:e7:49:37:52:1d:48:1c:65:41:
                    82:85:85:be:07:42:06:a0:3e:42:1f:12:fd:8c:37:
                    6e:8a:f9:bd:3b:de:20:4a:7e:78:a3:1d:2a:07:98:
                    a2:6c:12:9c:ad:55:e0:a7:4e:bb:e7:58:09:23:82:
                    eb:fb:6e:5b:71:8a:0a:96:21:f5:f8:71:f3:af:d3:
                    cc:0c:09:7a:8b:9c:e2:19:37:ad:8d:00:83:82:26:
                    e9:d4:3c:86:af:07:a3:1e:d7:fd:66:3a:37:46:e9:
                    55:53:58:1b:16:33:ee:d8:f9:5f:b9:07:c9:b8:c8:
                    97:b6:18:af:27:ca:f6:42:63:4c:f3:64:60:e6:44:
                    90:df:fc:ba:ce:c5:dc:aa:17:45:4c:bb:f0:32:7b:
                    48:52:af:65:a7:90:05:1d:3f:22:41:03:2f:ab:c4:
                    aa:e3:3d:36:45:e6:f7:52:11:2e:c7:bb:74:0f:f9:
                    5a:54:8d:e1:fe:3a:76:46:2b:2b:33:68:15:31:47:
                    52:ed:9c:38:92:e3:26:12:6e:85:e5:9c:e4:76:be:
                    fe:b5:f7:c0:d8:5a:8d:3d:1c:31:b2:ba:59:dc:ac:
                    53:b3:6d:e6:6b:3d:d8:bd:20:ed:91:6c:86:b4:a5:
                    da:39:96:91:c3:ce:76:35:56:f1:6c:f9:0c:ff:d1:
                    38:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:18:EE:73:CE:05:8F:C1:BF:48:EF:CC:20:8D:C5:AF:E7:F0:A9:7F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144020.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a55a::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:63:b8:3b:79:d7:8e:65:53:a3:8d:e0:f9:7f:88:8d:d8:84:
         d0:75:71:17:6e:1a:9b:46:3c:2b:4b:77:f7:ea:23:6e:1c:b5:
         ed:c8:a7:42:37:26:3e:45:1a:93:93:1e:8b:3c:b9:e8:d3:f6:
         f7:14:54:59:e5:c0:92:2e:66:35:3f:81:25:5c:fa:c6:46:34:
         5d:39:75:fd:92:c9:84:1f:ee:de:8e:1d:d8:8a:48:60:5a:c4:
         62:10:96:33:f4:9a:d9:b7:f1:d1:9b:90:dc:1e:d7:92:ae:77:
         78:36:46:a8:a6:a4:6d:79:bf:00:34:d2:98:02:b1:3d:aa:e4:
         26:b2:b4:0e:9e:fe:2d:3e:d8:2d:a6:6c:5b:22:95:50:23:7b:
         8b:f9:f5:df:55:e7:9e:54:2c:5e:5b:3e:e0:db:b4:a0:65:36:
         a1:e1:d2:f3:2f:b6:21:44:96:1e:21:79:cd:27:23:57:1f:d5:
         2a:f7:e3:98:b8:66:49:e5:76:84:fa:15:fc:1b:f9:d4:ac:5f:
         45:88:45:06:c4:9e:d1:69:22:1a:2c:e8:7f:66:9d:1e:f3:9d:
         66:57:08:af:43:56:32:f5:4e:d2:95:96:c9:a3:49:ec:04:54:
         f2:4a:48:24:41:ec:33:83:e7:c9:60:bd:49:01:d7:6d:8b:11:
         8d:21:38:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----