Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144099.roa
File:                     AS144099.roa (raw, json)
Hash identifier:          4Q9mJfuypKBSnVz9C/KqmPdnOiDewz3Y7qfs/YKPPHc=
Subject key identifier:   8C:67:26:42:9B:00:85:95:9C:7D:55:57:18:DE:D3:D0:48:26:80:B1
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4C7F05EA572B332A195A6543B3878B6B3C9BF9F4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144099.roa
Signing time:             Mon 25 May 2026 01:51:08 +0000
ROA not before:           Mon 25 May 2026 01:46:08 +0000
ROA not after:            Mon 24 May 2027 01:51:08 +0000
asID:                     144099
IP address blocks:        240a:a5a9::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:7f:05:ea:57:2b:33:2a:19:5a:65:43:b3:87:8b:6b:3c:9b:f9:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:08 2026 GMT
            Not After : May 24 01:51:08 2027 GMT
        Subject: CN=8C6726429B0085959C7D555718DED3D0482680B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:32:80:61:30:4d:3f:6d:de:70:0b:5a:56:e9:
                    c0:c7:e3:8d:fc:d9:a2:bc:5e:78:9b:95:e1:8f:04:
                    a2:60:cc:44:cf:8b:d1:7f:06:73:2a:1c:76:15:ec:
                    76:19:ee:b5:a0:97:4b:c3:77:03:79:d2:6c:44:4e:
                    77:fc:45:e8:c7:a7:0b:f7:bd:27:47:0e:97:da:8e:
                    21:86:d3:c3:dd:01:44:07:c6:ca:ff:4b:c2:a7:92:
                    75:81:25:43:69:d9:f9:17:96:01:98:ab:27:ae:e2:
                    7a:c4:39:d5:ee:3f:22:85:20:2f:3d:65:73:99:92:
                    5d:fe:95:0e:06:84:6a:81:0c:4f:4d:eb:dc:aa:54:
                    38:d4:97:0a:ba:3f:6d:da:da:4a:5c:3b:d1:b6:0c:
                    e2:04:2d:db:79:53:a4:f6:64:93:93:46:60:bf:26:
                    a3:10:66:fd:54:63:2c:20:c4:eb:db:dc:a4:2b:a9:
                    34:1d:5b:9b:99:d9:91:3d:c2:20:30:f0:38:14:02:
                    b9:cc:57:93:cb:7c:74:64:28:40:80:9f:b2:45:6b:
                    47:a6:5b:c5:bc:2c:f0:cb:d4:f9:ce:82:80:d8:65:
                    fa:dc:2a:97:5d:eb:88:5c:65:a8:a1:f4:4a:86:9d:
                    72:18:4a:64:01:ef:bb:7c:c7:ae:bb:4d:40:25:b8:
                    02:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:67:26:42:9B:00:85:95:9C:7D:55:57:18:DE:D3:D0:48:26:80:B1
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144099.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a5a9::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:09:ac:01:a5:fc:e4:60:65:44:51:24:9f:d5:f3:c2:28:5c:
         41:e5:4a:c4:85:75:a8:4a:ac:99:77:c4:2e:72:c0:7b:17:4f:
         ba:b1:c6:c8:94:fb:a6:bd:c6:be:50:1c:f7:df:41:d5:80:af:
         17:26:eb:e4:d8:54:d3:32:9f:4c:f8:77:10:04:2e:00:c0:72:
         a3:96:7c:9f:b1:93:03:53:79:6c:ff:79:02:24:81:c0:a0:5b:
         a7:2c:a8:b1:38:c8:62:36:2d:88:4e:36:a4:af:5d:29:07:1c:
         08:66:07:ce:61:ca:7d:f6:ba:61:ea:5f:d3:98:86:82:1a:22:
         60:da:ab:24:be:c6:85:5f:d4:48:05:e6:56:ed:de:5e:03:bf:
         e7:a8:ce:1c:26:72:24:43:6b:e2:c1:25:68:f3:2f:30:7c:b1:
         5a:bd:2a:0a:ed:fb:45:9f:1a:9d:e2:3c:0a:b9:a0:ac:31:d0:
         3c:70:1e:79:5f:c5:3d:00:db:2a:2c:c0:d9:ad:91:1f:fe:65:
         9d:15:9d:79:95:e9:6e:21:a9:6d:1b:6b:1d:49:a7:49:6b:bd:
         07:32:bf:48:71:fe:d6:63:e4:83:17:c3:d9:be:fa:46:68:0b:
         32:f1:12:ba:32:f2:b3:51:ef:6f:8b:b1:19:60:94:63:19:8a:
         e5:45:04:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----