Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144177.roa
File:                     AS144177.roa (raw, json)
Hash identifier:          BIS2wmqs0/K0HhWNEUtHaCBJrOaeqQgkXMtTxkMcCVg=
Subject key identifier:   D4:64:C9:A3:EC:75:64:63:3D:84:E0:1E:5B:E7:DD:B6:E2:78:C2:70
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7D9F618E7EF2411DD1E2264226184E27EE5A315E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144177.roa
Signing time:             Mon 25 May 2026 02:22:28 +0000
ROA not before:           Mon 25 May 2026 02:17:28 +0000
ROA not after:            Mon 24 May 2027 02:22:28 +0000
asID:                     144177
IP address blocks:        240a:a5f7::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:9f:61:8e:7e:f2:41:1d:d1:e2:26:42:26:18:4e:27:ee:5a:31:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 02:17:28 2026 GMT
            Not After : May 24 02:22:28 2027 GMT
        Subject: CN=D464C9A3EC7564633D84E01E5BE7DDB6E278C270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:65:8a:52:11:92:07:ec:9a:71:93:31:ed:3e:
                    3b:f5:37:06:26:74:4a:db:b9:4e:61:fd:13:8c:d3:
                    5d:bf:b9:64:d0:63:ab:fe:e1:ff:09:7e:88:fb:3a:
                    d0:b9:42:ce:ce:8c:a2:92:a4:2f:d5:25:97:2f:39:
                    fa:82:32:8d:8e:e1:3a:e6:46:a8:4d:d4:dd:c9:ca:
                    12:9f:42:3c:61:f0:65:48:27:bf:03:3a:68:c0:3b:
                    7a:5a:14:35:20:09:06:df:72:b6:6a:28:5a:a3:1f:
                    45:0a:97:d3:2d:1c:48:99:75:63:01:fd:42:9d:15:
                    11:68:f5:bc:f4:59:f2:49:12:17:96:be:2f:92:b1:
                    94:aa:9d:4f:0a:90:da:1e:f5:c4:90:8c:87:55:e2:
                    a7:f2:e4:2b:98:e2:b2:89:1f:25:a6:66:5c:e6:76:
                    50:6b:e9:90:52:5c:4b:97:68:fe:82:82:d8:30:97:
                    be:85:8e:2a:3a:98:63:05:cd:4c:00:86:9d:42:df:
                    64:02:33:2b:18:5a:f2:ff:2d:b3:fc:3c:bb:d6:34:
                    1a:8e:b7:cd:b5:38:c1:24:fb:fa:2e:a7:79:77:f7:
                    50:f0:e4:19:5d:18:9a:87:d2:a6:06:ef:c1:78:b5:
                    b8:40:c4:0d:47:18:ed:6f:1d:7f:60:bc:39:9b:c4:
                    ff:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:64:C9:A3:EC:75:64:63:3D:84:E0:1E:5B:E7:DD:B6:E2:78:C2:70
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144177.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a5f7::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:bf:10:37:fe:cb:36:9f:f8:55:81:56:31:d3:fb:8f:95:2b:
         c7:66:32:72:e5:61:fd:80:01:14:4e:78:2f:ef:56:f5:0a:91:
         8e:16:9d:c8:64:69:b7:9c:17:3a:8f:ef:bc:ea:90:66:24:16:
         78:53:b7:14:f0:37:5c:42:bc:31:f3:38:0f:a2:3d:26:fb:c4:
         dd:48:35:85:1d:5e:df:e1:03:37:c2:f4:5d:f9:c6:cb:ee:c3:
         1c:cd:8a:41:90:0d:ea:49:6d:6f:ad:44:c8:49:fc:84:0f:11:
         ca:ed:46:3b:bc:c3:8c:05:9c:d0:4d:85:03:fe:6a:cc:d0:98:
         87:39:5d:4e:dc:1e:f9:72:06:8e:62:18:9b:a6:2b:e3:24:d4:
         eb:ac:4d:09:f0:a8:e9:89:98:cd:8e:01:c7:6a:c9:bb:a6:4d:
         c3:be:4d:5d:fa:70:cd:72:bc:85:e0:2b:8a:f7:93:18:ab:56:
         6b:5b:b2:48:89:2d:f5:01:5f:b9:fc:79:9d:c5:8c:e0:c1:b6:
         9e:bb:0f:64:cb:f4:95:51:c5:c4:8c:17:8a:0b:f9:3c:e7:7e:
         cd:eb:b1:80:bd:5f:6b:77:b0:87:c9:cc:57:85:16:59:4c:52:
         00:e0:71:96:b4:a0:b8:3e:f8:55:e0:4d:f7:9c:ca:73:a4:bc:
         33:f6:28:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----