Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144041.roa
File:                     AS144041.roa (raw, json)
Hash identifier:          oitI/AuTAi2lqZ8GMEV3PfP89CPd5FbVDZF4wmVds3k=
Subject key identifier:   FB:D8:98:4E:D7:97:2A:9D:BA:B9:8A:27:88:EB:7F:E2:98:AA:19:82
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       498055390F64E25D50D0D118E4B2C3B6CF0B07E5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144041.roa
Signing time:             Mon 25 May 2026 02:22:12 +0000
ROA not before:           Mon 25 May 2026 02:17:12 +0000
ROA not after:            Mon 24 May 2027 02:22:12 +0000
asID:                     144041
IP address blocks:        240a:a56f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:80:55:39:0f:64:e2:5d:50:d0:d1:18:e4:b2:c3:b6:cf:0b:07:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 02:17:12 2026 GMT
            Not After : May 24 02:22:12 2027 GMT
        Subject: CN=FBD8984ED7972A9DBAB98A2788EB7FE298AA1982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c4:93:e4:aa:fa:3f:1b:4f:a5:05:07:52:92:
                    98:1c:8f:10:26:c3:eb:7f:56:0b:ea:72:c6:5a:0d:
                    e0:46:63:4a:5c:8b:6f:b4:5d:c5:02:29:a8:1f:03:
                    29:1b:7f:f7:d9:34:03:ef:92:a6:a7:c1:58:41:d1:
                    ff:54:a3:88:34:29:e7:3c:88:5b:34:56:62:64:ab:
                    81:d9:bb:f7:ae:26:2d:61:5b:57:7e:76:b3:6b:63:
                    b4:0e:dc:12:96:22:77:40:8b:3d:08:4a:e9:a7:42:
                    b3:9a:49:3e:0c:c8:01:35:43:5e:d6:02:27:f1:ae:
                    52:20:35:98:4f:7d:89:eb:8f:2f:50:e8:1f:0e:7d:
                    be:91:f3:a3:47:2c:4f:21:ad:50:9f:fd:65:ed:61:
                    45:90:34:5f:61:1c:4f:1b:dd:f7:a9:c3:9d:41:f4:
                    a8:0a:96:ac:f6:b2:87:bd:24:38:41:38:d8:2e:13:
                    3e:9f:36:61:85:2c:34:e0:95:a7:34:83:ce:91:35:
                    11:06:04:9f:4a:61:af:a6:a2:ce:a8:98:74:9b:3b:
                    fc:5a:fb:57:bf:e3:a3:6e:b3:5f:7f:c4:cf:c5:a9:
                    9b:da:3c:d3:c2:1f:fb:67:b2:b2:02:57:f8:a8:fb:
                    38:8e:1f:2a:bf:85:6e:71:6f:71:ee:8b:71:f9:ae:
                    a9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D8:98:4E:D7:97:2A:9D:BA:B9:8A:27:88:EB:7F:E2:98:AA:19:82
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144041.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a56f::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:b1:59:6d:1e:e1:3b:0e:82:b2:ba:c5:7e:da:b5:d7:1f:71:
         f9:0a:27:78:10:45:a4:a7:bf:b4:6d:d1:5f:10:19:da:b4:97:
         0e:da:81:09:3e:f1:0b:78:9b:80:34:f1:4f:57:b8:e5:f6:8a:
         31:11:6d:f9:0c:91:00:ee:48:26:38:cc:50:a4:e5:54:7c:2a:
         8c:91:7e:bf:e7:e4:a7:e6:6a:05:15:0f:e1:90:d4:ab:7e:ea:
         eb:a7:4b:d8:43:66:70:b1:f3:79:d9:78:59:e2:a9:55:9b:04:
         23:e5:51:83:75:a4:53:80:89:e7:6d:56:a9:29:ef:1f:64:f2:
         5a:24:b0:2d:1e:ad:11:37:ab:83:22:8f:d9:74:bb:9c:26:cb:
         22:0f:d3:c4:ca:79:3b:ff:aa:46:d0:a9:f4:f1:47:2f:f1:5b:
         55:0e:34:90:ee:25:28:94:ef:26:c1:12:25:38:8f:eb:50:1e:
         83:f0:84:0e:3b:06:37:df:79:13:7d:e2:b4:f9:05:c6:d2:17:
         17:6e:ba:86:c5:15:2c:17:22:bb:fb:dc:26:96:d8:ac:ac:33:
         a2:73:34:df:40:6b:4c:e7:7a:4b:57:19:cd:ff:ee:db:d5:b8:
         05:c0:71:59:e6:da:48:77:ca:a9:ca:5e:6c:8d:68:f6:ad:13:
         bc:f6:7f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----