Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144108.roa
File:                     AS144108.roa (raw, json)
Hash identifier:          St6R71+QAZVe/3I9ZDgmOymE5WJPyM9w6Lx/RmwwwHM=
Subject key identifier:   49:B4:27:66:AE:4A:AB:A0:C2:CA:3F:D3:C6:F2:04:81:B8:F7:67:80
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       54DB7A427B29783F0F91BFFC262710BE60DE38C7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144108.roa
Signing time:             Mon 25 May 2026 06:49:08 +0000
ROA not before:           Mon 25 May 2026 06:44:08 +0000
ROA not after:            Mon 24 May 2027 06:49:08 +0000
asID:                     144108
IP address blocks:        240a:a5b2::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:db:7a:42:7b:29:78:3f:0f:91:bf:fc:26:27:10:be:60:de:38:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:44:08 2026 GMT
            Not After : May 24 06:49:08 2027 GMT
        Subject: CN=49B42766AE4AABA0C2CA3FD3C6F20481B8F76780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cf:0a:9c:b9:c7:03:87:cf:f2:9d:ce:bf:11:
                    55:47:30:79:b7:e2:09:ef:8c:f9:59:83:f5:2e:fc:
                    b1:bf:83:9d:0f:35:a3:35:99:1d:c0:98:86:8f:d4:
                    57:d1:ed:63:9f:35:b4:e8:69:78:50:71:ac:06:06:
                    df:06:de:db:e1:63:6b:84:dc:59:1e:bc:3d:d8:53:
                    6e:97:06:b7:13:f6:9f:19:b7:9a:cc:40:13:e0:d0:
                    e7:f1:99:e5:7f:58:05:14:ba:a5:da:e4:71:f2:9e:
                    cf:44:d7:1e:ba:56:ab:45:c0:07:63:2f:af:da:44:
                    23:c9:94:57:f5:4a:29:8f:e8:b0:06:55:db:79:6d:
                    5c:5d:bc:61:58:64:6c:63:bb:9b:17:c7:6f:ff:1e:
                    89:3a:8d:0d:81:4d:a7:32:a7:93:b8:91:79:43:f2:
                    7a:dd:b0:08:eb:89:62:ca:ef:02:64:ce:93:5d:4b:
                    7e:a1:f3:e9:84:b0:16:ce:67:05:d7:0f:a1:df:ca:
                    1a:41:38:17:ab:8c:3b:4d:b9:a5:ef:6e:26:d4:22:
                    06:24:8c:a0:01:84:ab:2d:db:ef:9d:94:67:4d:10:
                    0d:fd:e5:bf:a9:71:e0:8c:13:96:ae:f0:80:93:2c:
                    e3:c0:33:0c:1c:8e:f3:7b:aa:58:21:eb:02:3d:dd:
                    09:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B4:27:66:AE:4A:AB:A0:C2:CA:3F:D3:C6:F2:04:81:B8:F7:67:80
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144108.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a5b2::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:ba:ed:1e:e4:9b:0f:cf:d2:89:0a:ad:6f:b4:da:14:99:31:
         bd:b0:74:0f:49:f5:d0:86:c1:fc:f6:68:f6:84:85:6e:d1:4c:
         15:e4:95:04:66:11:b2:40:91:ac:74:bc:d3:7d:0d:d7:53:24:
         8a:b8:2a:84:de:38:1f:bd:09:cb:08:55:a6:3e:b8:fd:e5:aa:
         b4:72:e5:d2:c5:23:a2:7f:dc:b2:49:14:fd:87:27:ee:0a:66:
         68:fc:99:14:3f:28:f7:96:10:7e:47:66:35:94:44:b2:a9:98:
         e6:b7:fa:69:04:7e:6e:33:18:bb:51:12:a2:5e:0e:e5:14:cf:
         f4:c7:ef:d5:22:df:34:67:92:e2:3c:59:55:63:e7:57:b2:d6:
         5d:aa:fb:cf:2c:ee:08:d7:6c:04:9d:72:84:c6:67:41:b5:cf:
         e9:e9:2e:83:cd:61:32:84:2c:d9:21:c6:bb:f5:9c:53:4f:5d:
         20:f8:69:36:08:9e:68:37:2d:f9:18:16:fc:3e:df:32:b3:f9:
         98:b1:13:f1:f5:d6:29:6f:24:d9:3c:05:25:c3:dc:57:ab:2d:
         e1:e0:85:29:7d:bf:ce:3f:f5:06:66:0d:c2:da:16:0b:dd:a3:
         9c:2c:de:61:53:b8:99:67:67:44:0b:24:27:04:e4:f0:12:eb:
         bb:b7:e0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----