Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144064.roa
File:                     AS144064.roa (raw, json)
Hash identifier:          GaHiOBCB9msrapcNmHkokx4exvdGqnMoi7Eiz02kFAw=
Subject key identifier:   7E:B0:5F:68:54:42:0A:B7:0C:12:69:44:9A:88:D2:0F:28:3C:16:10
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4F86B664590520B540401DD86D115A1031331DD0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144064.roa
Signing time:             Fri 22 May 2026 06:05:12 +0000
ROA not before:           Fri 22 May 2026 06:00:12 +0000
ROA not after:            Fri 21 May 2027 06:05:12 +0000
asID:                     144064
IP address blocks:        240a:a586::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:86:b6:64:59:05:20:b5:40:40:1d:d8:6d:11:5a:10:31:33:1d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:00:12 2026 GMT
            Not After : May 21 06:05:12 2027 GMT
        Subject: CN=7EB05F6854420AB70C1269449A88D20F283C1610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:54:07:3a:e7:b4:af:67:19:fe:b9:67:a7:11:
                    96:12:7a:54:1b:ff:27:71:0a:4e:c1:00:ef:4b:6e:
                    16:3b:4c:e2:21:02:a0:14:8e:b0:6d:4c:b3:ba:3b:
                    86:e8:a2:6e:c2:81:e4:20:79:e6:09:a5:77:a0:2c:
                    5f:b9:c1:09:0c:5b:fa:0b:44:47:16:a6:e3:2e:8f:
                    31:1f:19:ca:1f:66:5f:44:f4:c2:e8:49:95:ee:29:
                    59:de:8f:65:a6:30:6e:af:9c:b3:1c:e8:f6:6f:f2:
                    d1:7c:af:3a:de:0f:83:0d:b0:9f:d5:25:a3:f5:f9:
                    fe:74:0f:e8:52:87:1c:5d:7f:07:0d:09:b9:d3:09:
                    45:06:4c:76:00:75:3e:c0:e0:c5:37:bd:3d:5d:d2:
                    7b:97:ff:6e:51:55:be:fd:68:f2:7c:ed:e9:bf:44:
                    8e:5d:55:f7:48:85:d1:cf:db:c5:4b:55:ac:eb:8d:
                    72:83:c6:2f:a6:7a:f3:9d:5b:29:56:8a:42:7d:6f:
                    8a:f0:f7:06:d6:7c:3f:7e:3a:b8:56:da:f5:5b:13:
                    fe:7f:82:8f:62:53:b1:4b:3a:12:ff:c5:bf:33:49:
                    1e:70:2e:4e:f5:20:5b:c3:84:7b:70:13:f3:a1:7b:
                    70:7b:f5:0f:29:f9:3b:88:de:2a:74:43:d6:8e:3e:
                    6e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B0:5F:68:54:42:0A:B7:0C:12:69:44:9A:88:D2:0F:28:3C:16:10
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144064.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a586::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:57:53:a3:32:c8:a8:da:8d:a9:47:4a:f2:f5:4f:9c:44:23:
         62:20:ba:67:b9:eb:17:0e:27:5f:d2:32:37:80:f2:02:83:db:
         cc:9c:19:7d:25:2e:06:63:08:f2:a3:39:22:e6:26:28:39:bb:
         36:75:40:0a:4f:6f:40:3f:cc:6f:eb:70:57:b5:99:c1:a3:35:
         b1:76:0a:5f:1b:87:0b:cf:2e:12:1d:fa:64:53:79:4e:72:5f:
         fa:36:6c:7f:77:5b:cb:3f:51:7e:64:af:d6:65:dd:c2:9f:47:
         27:9c:b4:77:26:08:ce:c5:ab:47:5c:c0:85:a3:05:7b:c6:53:
         dd:31:b2:e9:5b:0b:7b:be:f1:f8:99:fc:3c:94:a1:d9:95:19:
         62:3d:4d:f6:c5:37:c1:12:2a:a0:48:2d:42:90:cd:91:40:96:
         10:18:f3:66:bf:00:1b:39:7a:b9:1c:a4:52:58:69:4e:ea:f4:
         7b:ad:f8:b3:4f:6e:fc:b1:25:4b:ff:1c:03:ad:db:c5:be:23:
         d7:95:98:77:c2:17:81:65:2e:63:13:72:15:82:ea:18:fa:2c:
         aa:31:59:a0:d0:d2:a0:67:9e:d1:b1:69:e7:07:e0:29:f4:33:
         9d:d2:f1:21:53:f7:9f:5a:59:1f:f5:b7:86:18:7e:45:8c:b6:
         de:c4:c5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----