Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144170.roa
File:                     AS144170.roa (raw, json)
Hash identifier:          LU+gDZ6Gqa65r045/gARUfOBVep/243aBOzl16xAonY=
Subject key identifier:   7D:A9:99:B7:63:97:19:7D:39:DA:22:14:22:A5:99:58:12:45:38:AB
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6AA6FD3ACCEC5B05E36B0CFF51E97116F74D5C6F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144170.roa
Signing time:             Mon 25 May 2026 03:19:13 +0000
ROA not before:           Mon 25 May 2026 03:14:13 +0000
ROA not after:            Mon 24 May 2027 03:19:13 +0000
asID:                     144170
IP address blocks:        240a:a5f0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:a6:fd:3a:cc:ec:5b:05:e3:6b:0c:ff:51:e9:71:16:f7:4d:5c:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:13 2026 GMT
            Not After : May 24 03:19:13 2027 GMT
        Subject: CN=7DA999B76397197D39DA221422A59958124538AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cc:d1:57:f7:db:fa:04:84:bb:c8:17:41:f3:
                    79:98:fd:54:15:c7:e6:2b:ee:4d:3f:2a:37:50:b0:
                    db:d5:c9:15:50:01:29:04:84:3c:cf:4a:f2:df:7f:
                    06:c8:e3:ab:13:7f:82:6b:0c:89:a4:18:ae:42:88:
                    25:8b:27:e7:d5:c7:e3:f1:3c:32:f3:fe:b3:da:4f:
                    fe:f6:aa:60:ee:13:c9:bc:d8:54:f3:a2:38:24:0b:
                    ff:ab:58:40:73:59:05:2e:5f:12:cd:cd:0f:37:41:
                    bd:43:fb:29:f5:a1:55:a6:e4:fb:69:54:2a:60:bc:
                    71:b9:bb:97:a9:6a:ff:92:3d:d0:00:28:49:72:24:
                    f5:75:b5:1c:c5:d1:20:74:b9:6f:e8:78:a6:f6:9a:
                    a4:ae:2b:02:c5:09:cc:c3:5e:8a:19:3c:fd:55:0c:
                    a8:9f:cf:d9:46:df:c6:c7:0f:c4:77:0d:4e:46:63:
                    4d:14:3e:2b:c9:a9:ec:dc:e9:2a:f6:37:81:a4:13:
                    79:08:6a:10:bc:58:3b:67:d5:03:c9:2f:55:a3:2c:
                    a2:f8:24:c3:78:87:b1:e7:55:c4:90:1e:b6:1c:8a:
                    0d:2f:db:bf:ef:08:f7:da:5e:23:73:20:54:19:4b:
                    9b:ab:65:37:9b:3a:7e:f1:33:e7:1f:c2:95:46:99:
                    84:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A9:99:B7:63:97:19:7D:39:DA:22:14:22:A5:99:58:12:45:38:AB
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144170.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a5f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:cc:0f:2f:1b:84:aa:af:fd:be:54:e8:39:16:1a:15:1d:e1:
         a9:49:7f:74:8a:f1:33:63:de:ef:ef:75:6d:20:5e:e6:97:d5:
         bc:64:f1:58:9e:7b:13:3e:cb:2d:2f:86:48:e5:36:63:97:f3:
         4d:c1:34:29:09:3e:2f:f9:65:d9:9f:a1:ed:ab:a3:44:08:49:
         c3:2a:e6:ee:b2:ed:13:75:ab:bc:2b:82:33:4b:d1:45:a3:9b:
         4f:0e:95:f3:3b:80:8c:0a:bc:8d:f2:7f:64:ad:dd:35:50:05:
         3e:ec:52:c0:a4:44:84:b9:f5:bb:27:d2:57:95:e9:36:05:e4:
         ee:ab:61:75:70:50:43:8d:56:28:6b:4d:01:ef:1f:ea:55:a2:
         24:25:05:c7:4c:c4:73:b2:36:15:34:f4:db:12:29:8f:4c:a9:
         8b:7d:cb:0d:b7:9d:8b:49:68:92:fe:9d:08:a0:d9:4d:36:4d:
         ec:e7:1d:d7:f0:80:a8:6b:61:91:f0:5a:1c:a9:03:91:d0:1b:
         bf:e4:05:30:08:47:67:31:97:dc:f6:60:58:0c:82:89:59:31:
         20:5b:ca:08:1f:b9:8c:f1:f1:05:96:6e:f1:3d:3b:d7:19:43:
         a0:1a:78:a2:db:1e:0e:f6:33:0e:3e:0a:43:02:05:ef:76:41:
         3f:f1:34:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----