Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144071.roa
File:                     AS144071.roa (raw, json)
Hash identifier:          3ekBFDiiI+GXO0AD8hh7o9ayxUB40HiyiWeSwKm08Q4=
Subject key identifier:   7B:B6:8F:02:3A:58:0F:DA:36:E6:B7:5F:6D:71:BD:84:20:AB:60:36
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4A3BCC329C977C080CFEB417515E5AE35177F85E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144071.roa
Signing time:             Mon 25 May 2026 06:49:11 +0000
ROA not before:           Mon 25 May 2026 06:44:11 +0000
ROA not after:            Mon 24 May 2027 06:49:11 +0000
asID:                     144071
IP address blocks:        240a:a58d::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:3b:cc:32:9c:97:7c:08:0c:fe:b4:17:51:5e:5a:e3:51:77:f8:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:44:11 2026 GMT
            Not After : May 24 06:49:11 2027 GMT
        Subject: CN=7BB68F023A580FDA36E6B75F6D71BD8420AB6036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:41:48:c7:a9:c0:3b:1e:49:bd:84:14:ef:14:
                    59:ad:2c:c0:5b:79:4c:23:cf:53:94:cf:7e:12:63:
                    71:53:d5:7b:82:9d:c9:96:ff:f2:6e:00:cd:a2:6c:
                    01:3e:0f:49:7e:e7:97:f9:c3:6e:a2:5c:0b:81:81:
                    f6:35:24:d6:0b:c1:22:1d:87:8b:f8:f5:c6:e4:17:
                    7b:0c:24:6c:b8:a5:e2:4b:63:4e:db:05:1c:7e:19:
                    c6:6b:ea:2d:48:f7:86:bd:f1:70:04:d6:ad:a8:23:
                    39:5f:e3:cd:4b:d4:15:f3:f9:22:fe:bf:5f:a9:e3:
                    de:a0:f6:cf:2f:01:fb:13:17:6c:8d:e2:0b:34:cd:
                    6f:16:39:90:fc:fc:08:50:75:be:5b:f4:ef:9f:86:
                    5f:af:37:7b:a7:52:4a:86:ec:7b:7c:18:ab:4d:e9:
                    5d:f1:3a:10:15:87:d6:58:14:b6:e5:cf:09:f9:93:
                    7f:b7:df:f8:44:98:bf:54:b4:27:35:45:34:a7:f2:
                    07:bf:2e:ac:d1:07:f6:3a:93:d1:d2:83:7f:1e:8c:
                    40:6d:a9:37:81:a4:fc:a5:cf:66:b8:b1:01:76:d8:
                    53:3a:73:88:74:09:39:32:06:c9:8a:19:82:97:a8:
                    8b:96:91:f8:5a:9e:36:cf:6c:05:1a:38:3d:7f:79:
                    c2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B6:8F:02:3A:58:0F:DA:36:E6:B7:5F:6D:71:BD:84:20:AB:60:36
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144071.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a58d::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:61:95:a7:c6:a2:ee:1d:92:d5:13:56:ec:05:02:d9:3f:48:
         4c:c8:7c:27:d6:0c:d3:92:f0:2c:50:5e:1f:9e:37:40:a3:50:
         d7:ed:33:43:a0:14:52:54:39:be:7a:a5:41:4e:46:1f:90:a0:
         41:a2:c5:c0:36:aa:66:4b:27:df:38:10:1a:78:a3:47:8b:f7:
         18:29:35:94:0c:a9:fe:0b:a5:d7:7f:1c:56:41:15:b1:63:09:
         e8:68:03:f1:7e:44:1e:4d:11:90:d4:59:49:77:7c:b9:e0:53:
         4d:f6:79:8c:ce:98:57:27:25:53:0c:58:65:1d:e2:0d:26:f1:
         a5:ae:fb:29:63:f5:36:f2:12:cb:80:8f:c6:1c:05:c9:3a:67:
         f1:31:79:93:38:9c:d5:ad:ef:db:ce:4a:6d:b2:6d:4c:06:ef:
         1d:0a:0e:f6:6a:96:4f:0e:a6:ce:b1:95:bd:f8:70:91:1c:13:
         d9:38:4d:59:a0:65:2d:57:27:c4:49:7c:f4:61:03:1f:d2:27:
         c9:1e:78:e7:2a:8f:65:20:55:5b:12:94:e2:c6:c4:fc:3a:28:
         93:30:ec:7c:58:1c:3c:6d:17:ca:ee:26:41:3c:5b:f7:94:c1:
         e3:d9:f2:bd:a2:18:ee:9b:69:f9:54:c8:18:68:5f:9a:b5:67:
         a8:c4:52:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----