Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144097.roa
File:                     AS144097.roa (raw, json)
Hash identifier:          OYiJy0lhiYlLyExaJ5R0O/l/kTIwwA3IPgzDua8Rsgw=
Subject key identifier:   51:0D:9E:32:63:3D:38:56:C5:AE:68:90:D2:8E:D3:8F:4D:14:A0:D1
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       466DF8FE63F44E3B5BC2212CB1C9ECF58A7D76A1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144097.roa
Signing time:             Mon 25 May 2026 02:22:10 +0000
ROA not before:           Mon 25 May 2026 02:17:10 +0000
ROA not after:            Mon 24 May 2027 02:22:10 +0000
asID:                     144097
IP address blocks:        240a:a5a7::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:6d:f8:fe:63:f4:4e:3b:5b:c2:21:2c:b1:c9:ec:f5:8a:7d:76:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 02:17:10 2026 GMT
            Not After : May 24 02:22:10 2027 GMT
        Subject: CN=510D9E32633D3856C5AE6890D28ED38F4D14A0D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5a:e9:7b:e0:bd:d7:69:5b:72:15:2e:a2:c6:
                    9e:d0:fa:bb:4c:59:c4:4f:a8:25:96:e9:21:a2:af:
                    97:1a:61:76:4e:22:98:42:d6:4a:12:30:b2:89:df:
                    5f:7d:6c:13:7b:0c:61:9a:5d:e9:9a:21:e1:7d:14:
                    cb:27:51:f1:db:e3:53:64:a4:a9:42:5b:f1:56:eb:
                    c6:1b:0e:8c:52:e2:38:e8:29:38:4a:d6:0f:5e:de:
                    63:69:b4:63:03:ad:a2:c7:1b:ba:22:86:df:ef:40:
                    ad:3f:df:86:b5:43:74:a0:d6:26:04:b4:ab:41:5d:
                    58:4e:aa:d3:76:1d:6a:ca:ac:63:4b:ae:6a:8f:cc:
                    ec:90:c2:cd:11:a6:b4:37:ba:95:6f:7e:f4:2e:d1:
                    06:e1:a1:84:ec:8e:9a:64:71:99:f5:76:04:8a:c3:
                    64:0b:16:ec:80:a0:f3:4e:f8:54:12:5d:91:e2:23:
                    5e:3f:4b:b5:9d:f9:db:7e:26:0d:87:92:c7:72:36:
                    61:60:e7:e0:cb:e0:9f:48:c1:73:8b:d2:0d:99:f0:
                    32:92:75:b7:08:28:ad:e1:92:ae:04:3a:2c:94:79:
                    37:84:63:2d:24:26:e0:1a:96:32:a7:a2:48:11:37:
                    54:c9:a9:21:e8:ec:39:c8:f6:54:5f:0f:7b:f9:10:
                    b8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:0D:9E:32:63:3D:38:56:C5:AE:68:90:D2:8E:D3:8F:4D:14:A0:D1
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144097.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a5a7::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:dd:8c:bc:b1:45:0c:1f:a8:fb:01:1e:b3:a5:2e:16:cd:2e:
         ae:f9:3e:12:d9:17:04:68:bc:cb:40:ae:32:d9:ed:d8:ba:1d:
         b1:6b:f6:17:7a:3b:4e:41:64:4c:64:23:11:11:2b:5d:dc:df:
         bd:dc:8d:d1:dc:c7:d8:2b:fb:da:3d:3d:85:b9:1a:a6:7a:74:
         0f:c2:60:b5:89:96:58:06:ec:8a:bb:c8:c3:01:8f:78:f4:e4:
         7d:6a:70:11:c6:0a:20:6f:75:14:8f:30:f1:1d:d2:0b:4d:64:
         70:02:b1:4c:9b:ea:06:8c:28:aa:11:2f:7e:4e:5f:f4:10:e1:
         6d:51:2b:ec:dc:57:c7:25:5a:a1:9f:ea:34:df:fd:d6:0d:12:
         53:97:a5:9e:6a:07:d4:2f:9a:02:17:fb:2a:18:8e:e0:3c:e7:
         64:6d:bd:ec:ea:6f:1c:0e:f3:8d:79:1d:b2:49:a6:be:10:9b:
         47:68:a1:4f:5f:36:ac:58:a0:20:20:92:f3:04:c6:a2:2c:65:
         5a:89:78:94:eb:99:42:82:dd:15:3a:ef:51:23:54:56:b3:fc:
         e9:6e:35:46:1f:0f:d7:af:c7:0e:87:52:3a:e6:13:77:c2:59:
         12:89:68:5e:25:46:26:37:a2:c4:b0:de:f7:69:ed:8c:73:89:
         57:d8:e8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----