Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144046.roa
File:                     AS144046.roa (raw, json)
Hash identifier:          S0hDNjy75kQKc04T7ymrYtUiPzmCCuoucC0Lg6u8OHM=
Subject key identifier:   7F:AE:B1:46:E6:D7:22:26:7A:8C:F6:50:3B:95:8F:5A:48:C2:EB:13
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       09A30CD8FE67FB7D5AE2C4B3D2FAA155E4B11277
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144046.roa
Signing time:             Fri 22 May 2026 04:26:57 +0000
ROA not before:           Fri 22 May 2026 04:21:57 +0000
ROA not after:            Fri 21 May 2027 04:26:57 +0000
asID:                     144046
IP address blocks:        240a:a574::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a3:0c:d8:fe:67:fb:7d:5a:e2:c4:b3:d2:fa:a1:55:e4:b1:12:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:21:57 2026 GMT
            Not After : May 21 04:26:57 2027 GMT
        Subject: CN=7FAEB146E6D722267A8CF6503B958F5A48C2EB13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f0:3b:cd:63:76:d8:6d:e8:11:b1:c5:5d:b6:
                    1d:94:7e:54:1f:c4:37:18:17:db:e0:72:6c:a2:aa:
                    0c:11:8a:d6:be:41:f9:d6:25:ce:2a:87:c5:85:b3:
                    ba:bf:fa:cf:ec:ef:d7:9f:13:67:ec:e9:21:ca:be:
                    17:1c:24:06:c4:61:77:1a:5d:37:ff:41:a6:1e:37:
                    86:93:8b:87:1e:45:97:a9:26:dd:ec:f4:ee:e8:2c:
                    66:de:41:15:e2:a0:ac:e4:0b:05:bc:64:b2:34:58:
                    08:51:18:7e:d8:2a:33:b8:5a:83:21:a2:11:1c:96:
                    68:e8:e1:41:d3:5e:c6:64:6c:1f:3e:12:b9:2a:58:
                    e0:23:79:c2:22:cc:57:09:40:32:fe:e8:df:4b:91:
                    f1:88:98:d3:4a:6b:63:ac:4b:12:10:21:25:78:99:
                    78:7c:ae:07:da:1d:eb:59:d4:cf:52:14:18:ef:83:
                    da:3e:96:7d:51:01:43:b0:af:90:36:88:3d:48:df:
                    47:56:e2:d1:98:18:56:09:16:4e:05:44:a4:6e:0e:
                    7d:ae:92:9c:30:3f:a8:ad:10:50:04:34:c2:c1:d0:
                    67:e2:a7:33:f7:8f:3b:7e:c7:5f:4c:82:60:dc:a8:
                    5e:60:6c:72:ac:da:2e:40:2e:ba:03:fa:e1:98:3d:
                    c2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:AE:B1:46:E6:D7:22:26:7A:8C:F6:50:3B:95:8F:5A:48:C2:EB:13
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144046.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a574::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:7f:0c:43:57:78:90:fd:56:58:56:17:ee:00:c1:e9:e9:18:
         a6:ae:bc:bb:68:bc:eb:41:4b:6c:b4:ba:66:02:34:e5:72:de:
         f8:aa:af:f1:dd:08:09:23:ee:91:2e:85:41:b9:07:5c:33:75:
         41:dc:3a:dd:3f:6e:3e:2d:78:d9:6f:77:aa:89:e3:b6:72:44:
         56:7e:f9:bc:a5:a2:55:9a:20:0b:49:3d:5b:82:96:f0:61:12:
         ae:c2:48:27:1c:fd:d3:b3:8b:b9:eb:33:f7:52:f3:b7:d8:82:
         b3:0e:d5:f2:7f:b2:80:ee:fb:e0:a1:6f:d0:2e:30:6e:97:d1:
         44:85:b9:08:0d:0b:3e:4f:36:a4:9e:e0:13:fb:b3:5b:c6:88:
         b1:29:11:f4:03:08:19:c3:89:98:65:65:71:b0:70:54:0d:7d:
         06:24:49:49:fd:cb:9c:19:22:e0:5d:de:57:6f:72:ba:85:5f:
         48:54:5c:f4:3e:51:8a:cd:cb:36:ba:df:a9:ab:9e:6e:ec:8f:
         ed:c2:c5:e0:78:db:04:18:6f:53:9d:87:a9:c3:da:f1:3c:5c:
         4a:88:9e:db:4d:30:8e:9a:d0:1b:89:14:d6:6c:41:31:e8:89:
         89:3c:07:6d:6a:a9:36:2f:19:bf:ff:d5:e3:0c:e6:12:cb:80:
         38:3c:3f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----