Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144132.roa
File:                     AS144132.roa (raw, json)
Hash identifier:          mk9K+fgzmqOxeAq5OCGoD/2ScPROx7Q4l0OuezgDY/s=
Subject key identifier:   4C:25:7A:90:7A:03:A6:94:90:DE:1D:DF:74:82:21:43:3D:0B:43:59
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0EFC8E85F0316A7A7956F01D0D37B17CA808FD3B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144132.roa
Signing time:             Tue 26 May 2026 08:52:59 +0000
ROA not before:           Tue 26 May 2026 08:47:59 +0000
ROA not after:            Tue 25 May 2027 08:52:59 +0000
asID:                     144132
IP address blocks:        240a:a5ca::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:fc:8e:85:f0:31:6a:7a:79:56:f0:1d:0d:37:b1:7c:a8:08:fd:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 08:47:59 2026 GMT
            Not After : May 25 08:52:59 2027 GMT
        Subject: CN=4C257A907A03A69490DE1DDF748221433D0B4359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ee:6e:e6:4c:b9:3d:f6:3c:bc:d2:7d:81:60:
                    ba:96:b9:55:f9:ad:67:c0:ec:e0:c4:88:a6:b9:9c:
                    27:74:de:7c:7d:cc:f4:37:34:4c:82:29:c8:07:da:
                    35:31:ad:18:e6:93:da:c3:1e:fb:be:0e:5c:1c:6f:
                    ed:a3:c2:dd:c4:aa:0a:9d:74:fa:f5:3a:ad:e3:e2:
                    aa:17:a6:cd:d2:c3:fb:5a:f9:3b:67:7d:f8:ae:36:
                    76:1f:79:49:57:79:06:a3:a3:de:55:f0:f8:43:a7:
                    a9:34:69:cc:69:54:65:30:1d:ec:48:69:49:c4:3a:
                    89:a4:87:bd:55:80:e2:86:e3:bd:8e:b4:0f:c1:22:
                    f3:07:37:91:51:9b:1c:36:20:89:3e:72:c5:79:6c:
                    6d:4c:15:33:2d:b8:a8:90:27:35:13:32:02:da:82:
                    ab:46:8f:ca:c6:f5:62:a5:06:12:f6:a8:47:e9:56:
                    ff:c7:ea:d9:68:c6:e8:a6:fd:ca:3c:5f:31:5a:e1:
                    bb:26:d3:c8:4f:59:97:e4:77:3b:b5:0b:ba:d0:5b:
                    b5:db:11:94:a4:05:31:d7:00:93:cd:d3:5d:83:29:
                    64:db:e3:37:4e:48:ee:80:38:bc:1e:26:8f:35:86:
                    6e:30:11:8b:5c:1a:3a:af:9e:ff:69:94:61:51:8b:
                    e8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:25:7A:90:7A:03:A6:94:90:DE:1D:DF:74:82:21:43:3D:0B:43:59
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a5ca::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:7f:01:09:85:91:11:83:a8:ab:96:a5:78:83:b8:c2:b6:ee:
         18:fe:61:ea:13:fc:92:5e:a5:5d:bd:bf:f8:0f:02:8e:70:c0:
         57:28:64:af:b0:5a:df:7c:6c:30:84:a1:e4:8c:a9:6a:63:af:
         91:82:a9:a9:f5:dc:7a:84:74:1a:51:25:d0:f8:07:4c:30:33:
         60:8b:f8:48:98:7f:04:dd:f9:9c:65:bc:5d:e0:68:48:7e:21:
         03:53:74:2e:20:b2:0c:f2:83:f0:96:ce:15:f5:0f:03:e5:40:
         1c:b2:35:15:34:77:1a:e7:6c:c9:62:14:a0:f2:e7:fd:46:a5:
         0a:3f:e1:bb:f2:4f:e1:9e:51:79:83:db:ed:d3:05:cf:4e:64:
         d6:e7:50:5f:d6:22:bd:81:ff:4b:ff:6a:4b:34:53:68:f0:81:
         d1:f1:ed:0b:00:83:48:87:20:27:5c:7f:b1:d1:9a:ed:b4:5c:
         2b:03:74:ff:63:2b:4d:9a:df:05:aa:50:62:77:6c:6d:c4:82:
         16:b7:dc:99:d0:62:30:63:5f:bb:0f:be:ba:23:05:af:fb:ae:
         ab:a6:68:cb:ad:b1:bd:ef:08:34:77:5e:5f:28:0e:49:b4:98:
         27:b9:e1:ff:06:40:9c:6a:5b:f3:85:fc:46:45:66:74:4a:0e:
         1d:4d:03:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----