Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144165.roa
File:                     AS144165.roa (raw, json)
Hash identifier:          WK/0PN+bDbIj3Xi+AZK9dTSxG/2NiaKczs/7ZRguwvM=
Subject key identifier:   A7:A2:C9:58:FA:EB:BD:58:76:D7:54:B1:C9:79:B6:EA:27:AD:57:74
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       13D90FCB115932E30BEB1BE23C46E5CDD62BBE68
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144165.roa
Signing time:             Mon 25 May 2026 03:19:19 +0000
ROA not before:           Mon 25 May 2026 03:14:19 +0000
ROA not after:            Mon 24 May 2027 03:19:19 +0000
asID:                     144165
IP address blocks:        240a:a5eb::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d9:0f:cb:11:59:32:e3:0b:eb:1b:e2:3c:46:e5:cd:d6:2b:be:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:19 2026 GMT
            Not After : May 24 03:19:19 2027 GMT
        Subject: CN=A7A2C958FAEBBD5876D754B1C979B6EA27AD5774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bb:45:d9:7b:92:d5:d5:9b:cf:d4:2b:db:c7:
                    92:3e:42:3e:ba:96:50:6b:84:22:94:4a:f5:15:8c:
                    03:ae:0d:67:ef:ba:36:bb:dc:e3:55:b8:75:c0:39:
                    e3:41:53:76:13:52:4a:1b:73:6d:ae:c8:79:f8:65:
                    63:d4:f1:65:8f:8e:0b:3d:3f:b9:2a:10:fd:d9:f1:
                    09:f2:e9:04:04:a0:d4:b9:52:59:9e:f3:81:63:bf:
                    5f:5c:cc:e3:e0:27:4a:37:57:3b:8b:20:db:ad:ee:
                    34:bb:a3:19:85:36:f6:3e:50:ea:83:9c:82:bd:6e:
                    88:ec:a5:d4:93:eb:be:6d:de:87:58:7c:cd:ae:50:
                    0a:e9:96:d6:19:1c:03:41:c7:49:bc:9e:99:fd:a3:
                    cf:30:a9:0c:ea:b7:7a:68:5f:6f:4f:07:63:96:00:
                    c7:d3:93:38:bb:83:48:41:56:a3:fe:ac:a0:8d:f9:
                    9b:65:c9:71:ef:0b:1a:22:12:06:0a:a7:a3:58:61:
                    85:2c:ee:89:95:5c:05:c8:42:ac:b7:15:b8:29:ba:
                    a6:01:5e:b4:1c:e1:3f:7a:9f:3a:66:d1:a0:47:81:
                    11:45:9d:9a:d4:c6:60:59:4e:ed:64:f4:a0:5b:93:
                    88:6f:96:9d:53:2f:6a:41:e2:58:86:e7:6f:3a:c1:
                    6f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A2:C9:58:FA:EB:BD:58:76:D7:54:B1:C9:79:B6:EA:27:AD:57:74
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144165.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a5eb::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:33:54:23:3f:f6:89:8d:d9:ea:c2:37:c2:d4:e9:83:2d:91:
         a3:84:f8:32:2a:a3:dc:f7:9d:5d:72:ed:67:3a:b2:41:0d:f3:
         3c:cd:37:b4:d5:2c:cd:ad:f0:b4:80:88:26:c3:d3:e6:1e:0e:
         27:90:93:f7:88:6b:2b:a0:ea:bb:0e:24:be:16:ad:9b:3f:6a:
         d7:e9:d7:4e:15:f3:d7:84:fb:34:75:4b:31:31:66:31:a0:e2:
         a7:62:a5:84:a9:e5:db:79:5b:3d:0c:21:db:61:65:cb:8c:3a:
         80:38:3a:11:1b:7a:e2:7a:52:42:c8:0a:6d:c3:23:1b:f9:5a:
         6f:a6:c9:51:82:0a:aa:c8:38:c3:a2:e5:df:18:81:cb:ce:25:
         57:ba:fa:9c:c9:74:a4:48:8a:94:7f:08:7c:91:7d:73:23:37:
         71:b6:d6:74:9b:78:c1:ec:ea:89:e5:9b:85:4e:9c:d3:23:f6:
         fa:a3:cb:18:d5:71:1a:ac:49:05:b2:ff:a1:70:22:a5:25:c6:
         9d:72:5d:bd:75:ed:7e:4b:ce:85:f1:08:61:b0:ed:cb:39:3e:
         f7:0f:79:23:9a:59:ff:ac:ba:7a:46:ad:a9:72:71:02:14:1e:
         fe:56:56:38:d2:bd:c4:7b:61:f9:60:0a:f2:43:74:c7:d6:ca:
         f2:37:f7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----