Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144102.roa
File:                     AS144102.roa (raw, json)
Hash identifier:          od3ozXK70phl2Lttv5ICu33Wcw6l1TfCNWkUCFxFP1I=
Subject key identifier:   A9:42:FC:27:C5:67:CF:BC:A5:20:19:13:E5:92:41:76:22:BD:DE:E1
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1119FB6EB9C65027969A71B728219E07C88F39EC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144102.roa
Signing time:             Fri 22 May 2026 07:40:55 +0000
ROA not before:           Fri 22 May 2026 07:35:55 +0000
ROA not after:            Fri 21 May 2027 07:40:55 +0000
asID:                     144102
IP address blocks:        240a:a5ac::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:19:fb:6e:b9:c6:50:27:96:9a:71:b7:28:21:9e:07:c8:8f:39:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:35:55 2026 GMT
            Not After : May 21 07:40:55 2027 GMT
        Subject: CN=A942FC27C567CFBCA5201913E592417622BDDEE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:70:aa:d1:55:9f:a8:74:34:22:1b:32:dc:75:
                    96:a7:a6:08:b7:32:89:62:c6:27:91:5d:c1:16:97:
                    31:52:92:de:b9:19:05:bc:bf:36:82:6c:11:09:8e:
                    03:5f:75:47:e6:5d:b7:f2:e4:e7:e0:83:e0:ef:a2:
                    e5:4e:32:01:b5:b8:34:a7:34:b5:1f:f8:63:c2:26:
                    e7:50:1f:65:a3:d6:07:4c:74:97:fd:0d:8d:71:70:
                    47:b5:e4:bb:cd:5a:fb:3a:0d:ae:d0:59:fc:53:88:
                    5e:41:90:7d:7d:3d:db:cd:da:19:d6:37:6b:9d:62:
                    84:c5:f9:8f:c3:5a:02:48:bd:d7:66:a8:65:35:c9:
                    9d:fe:7d:66:9e:91:a9:b1:3b:f2:e4:50:fa:67:49:
                    84:64:63:c9:33:7b:06:11:6d:8e:9a:03:ec:ae:34:
                    14:f2:68:f7:4f:d3:a3:6e:05:32:45:4f:ea:36:af:
                    fb:b5:12:e9:6e:db:38:81:92:f8:d6:2d:22:3e:ed:
                    61:91:2a:d1:15:0e:58:60:89:e0:42:01:28:c1:e2:
                    8f:61:e6:61:19:b0:9f:29:21:a4:7a:44:8b:12:ef:
                    8d:bb:ca:98:7a:0d:ed:ae:cb:ab:89:b5:36:37:4e:
                    79:06:7e:64:16:a4:80:f6:87:ed:99:de:68:84:df:
                    ce:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:42:FC:27:C5:67:CF:BC:A5:20:19:13:E5:92:41:76:22:BD:DE:E1
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144102.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a5ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:e9:fe:82:75:24:76:99:d2:df:f1:ee:e5:9f:20:d6:23:b7:
         a2:0b:c8:6a:a1:73:60:b9:41:10:e8:db:2b:f9:a1:d0:9e:f9:
         6e:c4:3b:87:06:d6:2d:fc:50:06:ca:1a:d4:d7:e8:e2:09:2e:
         84:37:da:a7:af:89:ad:a7:4b:34:b7:72:4d:19:02:df:ef:da:
         d8:2c:4e:bb:c6:f3:d8:ee:66:94:e3:bc:b9:99:c3:c4:19:48:
         d4:41:8f:ff:eb:37:ec:40:55:7e:4a:41:9f:e0:36:61:5c:a8:
         ae:11:a3:f1:e1:02:f4:b2:40:53:7c:93:5f:24:c1:44:05:3d:
         11:7f:68:45:f4:34:8d:49:af:bb:81:2e:65:ab:07:7c:e7:68:
         e1:63:8f:43:43:cc:d3:f9:b6:72:db:29:a3:e2:d9:f1:4b:f4:
         b4:05:9f:a1:c4:a6:db:2b:a2:e9:75:f9:49:49:72:74:51:3f:
         06:da:b7:0b:91:02:08:85:81:c4:c3:53:90:28:5f:23:6c:4a:
         8a:78:ff:0a:39:84:02:f4:c7:e9:9c:6f:c3:51:29:4f:01:d3:
         cc:b2:f1:a9:ea:7a:cb:ff:e0:ab:61:46:17:b6:74:ac:d1:3c:
         48:23:08:4d:29:3f:d5:2c:72:bc:cd:1e:f4:95:66:26:ce:01:
         0a:d3:03:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----