Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144080.roa
File:                     AS144080.roa (raw, json)
Hash identifier:          mrTL3RS8XC1dl1/uIDnZ0dJOC6WOWlTq1eiXyDskEwg=
Subject key identifier:   FF:94:3B:A9:6E:32:67:69:34:7F:10:F3:56:24:6C:0A:03:83:3E:58
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4BC792972FFF8A340C8F23DF4DF26F9A6BD0C0C9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144080.roa
Signing time:             Fri 22 May 2026 06:05:20 +0000
ROA not before:           Fri 22 May 2026 06:00:20 +0000
ROA not after:            Fri 21 May 2027 06:05:20 +0000
asID:                     144080
IP address blocks:        240a:a596::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:c7:92:97:2f:ff:8a:34:0c:8f:23:df:4d:f2:6f:9a:6b:d0:c0:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:00:20 2026 GMT
            Not After : May 21 06:05:20 2027 GMT
        Subject: CN=FF943BA96E326769347F10F356246C0A03833E58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d2:28:fa:2e:37:3a:de:54:4b:dd:1f:7f:7e:
                    05:e6:ab:27:5e:da:c1:82:2a:8b:6a:45:ca:ca:57:
                    f7:d6:0d:76:7c:ff:0c:0a:0d:70:d3:8b:dc:a2:19:
                    7c:9c:e5:a0:1f:24:7f:10:03:cc:af:eb:cf:3b:1d:
                    b0:cd:85:27:b5:e2:92:db:6c:2b:2e:19:5c:0e:e3:
                    1c:82:b5:68:69:88:e5:40:45:b2:f9:85:df:ff:5d:
                    89:c7:77:69:be:e6:4e:6f:06:55:32:dc:44:66:d4:
                    ff:a7:af:ae:0f:7f:1e:ac:a1:2f:09:35:d7:aa:7d:
                    ac:d5:17:26:20:f2:90:b7:dc:f0:70:30:97:99:7c:
                    93:60:b8:53:20:5a:dd:05:48:c2:a0:5a:5d:dc:ad:
                    e9:de:12:4b:f1:50:1e:30:41:c2:53:b8:37:7a:87:
                    b1:47:76:b9:0a:a6:36:10:3d:51:10:22:06:4d:2d:
                    88:2c:00:86:22:15:75:62:0e:94:31:11:fc:ba:a3:
                    de:72:c3:f6:1d:cc:31:1e:bf:73:33:0d:15:89:98:
                    7b:17:db:dc:54:71:8f:d4:20:97:f0:e1:3c:25:ef:
                    18:7b:b2:7a:64:d4:26:84:69:11:05:a1:c3:e6:97:
                    1e:7a:d9:e4:72:f0:b2:3e:ad:d1:a4:e9:34:33:22:
                    c4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:94:3B:A9:6E:32:67:69:34:7F:10:F3:56:24:6C:0A:03:83:3E:58
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144080.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a596::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:0b:39:f3:e2:e6:27:c0:f6:0b:e8:73:3e:44:35:2d:a1:62:
         2f:53:20:5b:0b:45:7c:84:25:2a:06:4b:be:69:fb:bf:37:5b:
         2d:38:7e:00:b2:b6:25:77:73:38:a2:18:fc:ea:1d:62:7f:28:
         ac:3a:a9:ee:c4:cb:7c:96:60:6a:1e:33:4f:01:46:d4:e0:55:
         34:d3:db:6d:b7:e3:67:86:74:0d:1e:ef:ab:53:dd:42:f7:fe:
         48:bc:97:78:77:ce:93:67:26:48:3f:f1:e9:87:e1:5f:56:ce:
         c5:80:8c:e0:8d:fc:71:d6:70:57:a8:c2:c1:58:bf:b0:78:77:
         f7:23:e2:e4:7f:66:49:42:18:af:1e:db:10:99:61:e1:61:07:
         25:c2:bb:78:da:0f:40:ee:7f:16:e0:71:dd:4a:a2:38:bb:ff:
         03:8c:99:1b:14:ae:59:5f:39:47:3c:16:8d:55:38:11:4a:d3:
         5e:0a:05:3b:ce:22:10:96:dc:2a:02:9f:65:16:cd:17:54:4c:
         fb:5e:a8:0e:2e:c7:0e:49:49:0b:eb:cd:0e:50:95:b8:e2:cd:
         b0:e2:91:5c:33:c0:47:96:37:d4:fc:44:b8:38:c1:d4:00:be:
         31:49:8a:89:9a:b0:45:30:d2:19:b1:d9:d1:cc:76:e2:40:4e:
         c6:cf:60:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----