Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144104.roa
File:                     AS144104.roa (raw, json)
Hash identifier:          LKuFAE/LiYv/Fw2KWh/Trerz7tPN7Un2yWNfdLLs8rw=
Subject key identifier:   C2:4F:CA:2A:15:9E:9F:82:83:67:83:27:B1:65:72:C4:C3:53:78:1D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       16611656D2B11B73B73808CABA1271EBBFE31AF5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144104.roa
Signing time:             Fri 22 May 2026 04:08:26 +0000
ROA not before:           Fri 22 May 2026 04:03:26 +0000
ROA not after:            Fri 21 May 2027 04:08:26 +0000
asID:                     144104
IP address blocks:        240a:a5ae::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:61:16:56:d2:b1:1b:73:b7:38:08:ca:ba:12:71:eb:bf:e3:1a:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:03:26 2026 GMT
            Not After : May 21 04:08:26 2027 GMT
        Subject: CN=C24FCA2A159E9F8283678327B16572C4C353781D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:61:89:bb:c0:1b:47:0e:de:0a:51:45:3b:44:
                    b4:ee:aa:3b:3a:b0:59:f8:53:15:61:f1:5d:44:52:
                    9f:0d:0e:8e:18:4f:45:ee:74:b0:3c:0d:75:8b:3b:
                    77:ec:76:03:1e:14:b9:0b:8c:31:26:ce:c3:41:a9:
                    ef:c9:45:87:39:fe:6f:1d:be:88:34:22:25:73:e3:
                    5a:88:f2:c3:ac:98:8a:bf:b6:bb:71:78:b0:72:22:
                    98:7a:29:f6:ca:aa:a3:0e:56:9a:0d:4e:4a:fc:2b:
                    4f:5a:f5:41:de:2a:2f:8a:93:07:83:4b:97:6d:2c:
                    30:a4:8d:fa:60:f7:a5:9b:39:fe:5a:86:e6:c0:a2:
                    11:28:35:06:a9:25:98:0c:51:c2:0b:9b:7e:c1:a5:
                    21:60:e7:6c:3c:95:3a:7d:23:d3:17:6c:60:4b:93:
                    55:be:ed:b4:bc:53:e9:ea:75:98:26:66:a3:49:d8:
                    47:69:01:67:8c:30:0c:b9:a3:1f:62:13:67:82:19:
                    0b:20:70:f9:16:25:61:72:29:02:b1:25:5a:fd:78:
                    d7:a9:a2:ac:93:d0:00:bb:6e:94:63:94:98:50:bb:
                    e4:b4:15:14:03:90:ee:57:58:9b:04:67:08:bb:49:
                    38:a1:a7:01:a8:16:bb:41:b2:38:03:aa:9a:6c:36:
                    da:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4F:CA:2A:15:9E:9F:82:83:67:83:27:B1:65:72:C4:C3:53:78:1D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144104.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a5ae::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:f8:9b:bc:25:80:e6:2d:d9:c2:1e:40:28:b0:a6:a6:25:17:
         36:63:2b:a5:77:9b:75:13:79:76:a4:01:15:12:94:3f:d0:78:
         5a:1e:4f:29:7e:09:48:ee:4f:36:ab:9c:38:95:3c:2d:34:80:
         58:f8:23:f7:10:21:da:3c:3f:f3:f8:d3:05:a6:44:7e:38:fc:
         c3:53:63:d4:75:31:2b:cc:74:23:3b:79:bd:48:ea:35:48:0e:
         a5:1f:7c:f2:33:55:c1:22:2f:70:43:2b:0a:ea:8f:7b:57:39:
         6f:66:fe:f9:83:8e:5d:46:e9:00:14:91:d8:27:58:54:1c:fe:
         30:45:93:d0:79:f1:93:0e:58:b0:72:0e:cd:1e:2e:b7:57:a7:
         55:5b:14:28:db:fe:89:4c:20:f0:21:54:f1:c6:c7:d1:cd:88:
         39:8a:b2:c3:79:fb:35:35:7a:10:a9:7a:bf:0d:79:c5:4d:5a:
         41:f0:bf:f1:f6:c2:55:30:7b:cd:90:ef:31:42:f0:21:ff:e7:
         33:ed:ef:7e:2b:5e:41:a7:95:49:87:c6:a4:c0:1e:dd:82:13:
         7e:92:07:cc:09:4d:82:62:46:d9:3f:52:d9:02:65:cc:33:0d:
         41:7f:be:f3:6c:65:b7:a6:f2:b8:ef:8c:99:e1:5c:2f:da:81:
         75:1d:a3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----