Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144184.roa
File:                     AS144184.roa (raw, json)
Hash identifier:          otheLsd4L9uqT4vmwPo0TjPj4LF9JWY1QF5jGgIAPIM=
Subject key identifier:   B2:73:21:7B:97:C4:59:FA:C0:B4:C6:D4:00:A3:A9:51:E5:29:92:C4
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       300D47E7CDAE44D7960234A1A15C60DA63C10118
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144184.roa
Signing time:             Mon 25 May 2026 01:20:16 +0000
ROA not before:           Mon 25 May 2026 01:15:16 +0000
ROA not after:            Mon 24 May 2027 01:20:16 +0000
asID:                     144184
IP address blocks:        240a:a5fe::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:0d:47:e7:cd:ae:44:d7:96:02:34:a1:a1:5c:60:da:63:c1:01:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:15:16 2026 GMT
            Not After : May 24 01:20:16 2027 GMT
        Subject: CN=B273217B97C459FAC0B4C6D400A3A951E52992C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:77:20:34:a4:a7:60:29:ca:8d:05:57:e3:0f:
                    26:ef:92:32:80:88:fa:62:9b:4a:21:9e:e2:d0:da:
                    eb:76:e9:8f:39:84:6a:27:39:61:d5:dc:cb:6e:45:
                    b4:6f:94:ee:44:bc:7a:81:04:2f:f6:da:4c:3d:07:
                    94:f0:b1:db:e3:6e:bc:19:2a:a1:c3:cf:f2:d1:ab:
                    81:f4:b3:b7:f5:a9:a8:7e:d9:16:2b:82:26:56:15:
                    84:ca:68:1f:e8:d8:df:08:8b:a7:a0:ad:02:5a:d6:
                    aa:a9:8b:a2:de:ba:f2:71:96:f5:46:0b:2d:7a:61:
                    7d:09:3d:37:f8:3c:29:87:7f:ee:00:41:32:9f:21:
                    55:ed:ff:62:e2:bc:97:74:f2:60:12:ca:91:2c:db:
                    76:df:93:6e:f2:3d:ff:2c:ba:8a:05:d0:e1:89:64:
                    02:86:d8:15:d1:5c:0c:c9:3a:75:1e:30:f0:e3:83:
                    14:7b:96:f5:5f:4e:15:42:29:6b:0d:f0:e7:69:1f:
                    04:be:05:9b:c9:56:b5:6d:8f:77:6a:83:cf:a9:d7:
                    6c:5c:7d:3c:2e:49:c7:40:58:fb:e6:46:b5:5f:dc:
                    83:20:64:3c:ae:fe:f4:c5:dc:12:86:ed:60:d3:7b:
                    66:a0:72:51:a1:9b:ca:7b:ed:bf:8a:40:03:b0:ca:
                    7d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:73:21:7B:97:C4:59:FA:C0:B4:C6:D4:00:A3:A9:51:E5:29:92:C4
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144184.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a5fe::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:31:20:c1:75:b9:c5:9f:50:ac:ce:4f:21:3d:d3:eb:76:ec:
         cb:aa:f3:7c:0a:f6:79:98:e7:0a:f1:27:99:84:74:ea:5a:8e:
         1e:b3:95:29:f2:1c:91:7d:ab:04:63:31:31:39:8a:5e:b7:55:
         82:26:44:9b:02:b4:1f:ab:e9:72:8a:ba:0d:13:43:9e:f8:52:
         4c:13:3c:60:c4:34:b7:1b:0c:60:4c:c5:37:04:a8:dc:5f:f6:
         bd:7a:92:27:07:ec:6d:9b:fa:96:f8:13:d0:74:4d:71:ef:60:
         7d:9c:bd:e0:be:e8:03:c3:bb:7d:20:a3:eb:5e:ea:e7:02:80:
         6b:bc:a1:b3:84:2b:37:ec:7e:95:1d:19:25:27:3d:f8:ed:76:
         79:d8:1d:f6:ff:54:f2:d2:f7:48:6e:45:2b:aa:9c:82:03:70:
         70:06:07:6b:ad:e0:0a:3f:6f:ac:78:d8:fc:90:a5:08:68:aa:
         21:62:8d:ee:53:c3:72:19:16:92:71:c2:98:26:5a:16:52:60:
         a9:c0:fa:c6:66:93:b2:6b:2a:8d:82:f0:f1:e9:79:05:1c:91:
         56:c0:cc:e2:33:5a:43:c7:46:32:6b:66:d1:ae:c7:1a:79:78:
         46:9f:2b:c9:14:e1:8c:7d:d0:fa:75:e9:cf:49:a8:21:af:02:
         07:5f:f5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----