Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144187.roa
File:                     AS144187.roa (raw, json)
Hash identifier:          DFOHQDAb2jK6EkKFLl8uzeBfWhEsAihYhJP2ddzPtgM=
Subject key identifier:   69:0C:A7:7F:FB:3E:B4:08:11:E9:F3:99:EE:4D:35:29:D5:69:E2:06
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       76904768188F42D8CD1570376E7ED18379DA57B9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144187.roa
Signing time:             Tue 26 May 2026 02:35:11 +0000
ROA not before:           Tue 26 May 2026 02:30:11 +0000
ROA not after:            Tue 25 May 2027 02:35:11 +0000
asID:                     144187
IP address blocks:        240a:a601::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:90:47:68:18:8f:42:d8:cd:15:70:37:6e:7e:d1:83:79:da:57:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:30:11 2026 GMT
            Not After : May 25 02:35:11 2027 GMT
        Subject: CN=690CA77FFB3EB40811E9F399EE4D3529D569E206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5d:54:88:ed:21:5d:82:3f:db:22:db:ce:f3:
                    5f:29:2d:52:22:23:17:c2:a9:77:ce:ff:7c:e8:26:
                    53:8d:08:11:15:ba:b0:3e:bd:ee:fe:20:0d:a1:f6:
                    74:dc:a1:18:5b:09:95:a5:e8:66:d6:54:20:51:a7:
                    64:8f:47:e2:0b:be:aa:1f:93:c2:8c:22:53:67:e2:
                    ba:3d:74:69:2e:6a:78:2a:1d:a4:19:a3:88:be:ee:
                    2c:7e:3c:56:7f:a7:81:a7:f3:d6:c5:8f:28:e2:c5:
                    6d:45:f3:4d:a5:f4:cc:31:7a:ca:e9:10:9b:c3:71:
                    4d:ab:e5:2e:ba:d8:82:69:38:b3:db:a7:e9:4b:43:
                    42:19:19:b6:24:9c:63:26:69:96:f9:43:68:cf:ae:
                    37:6b:b3:48:e2:b6:9c:59:cf:e3:ab:a1:e8:c8:fe:
                    0e:6a:90:34:b4:fc:5b:90:a6:9b:db:e5:a1:2c:02:
                    d3:7a:c6:da:81:cc:86:f4:07:76:a6:80:b5:9c:bd:
                    9e:aa:ab:45:9c:74:7c:54:dc:11:7c:1c:76:7c:19:
                    6d:ac:27:bc:cc:73:ab:3c:f5:bf:bb:c8:d4:9a:04:
                    cc:30:b9:36:6c:12:cf:96:a7:1f:1c:a6:e8:63:5e:
                    5c:f0:70:ab:59:1a:28:8b:ca:a5:53:eb:69:0b:37:
                    eb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0C:A7:7F:FB:3E:B4:08:11:E9:F3:99:EE:4D:35:29:D5:69:E2:06
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144187.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a601::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:b2:ca:4f:f7:f9:ad:aa:93:f7:75:72:66:e3:8e:66:f5:57:
         dd:aa:dc:7b:b4:f4:26:a4:4a:cd:13:f7:7c:4d:84:3c:bd:0d:
         08:d7:d9:66:d8:88:a5:3c:09:71:a8:db:4e:09:7b:1f:de:43:
         df:f7:9a:5b:c5:b5:11:91:20:69:b8:46:90:43:c4:9f:dd:28:
         cb:d3:5a:8f:95:de:8e:e2:2e:18:b0:a1:0a:34:bc:7c:6d:9e:
         56:dc:d6:68:27:a6:e6:99:b7:a5:66:89:32:22:62:8e:8f:6f:
         0a:25:3d:6b:24:7e:b3:69:8c:36:f4:ea:44:56:65:4f:76:70:
         f7:39:55:e9:37:c0:0d:61:de:0b:ff:1f:f3:3f:a5:49:3a:91:
         58:80:16:4d:ca:9a:7d:6b:f5:6e:58:7b:99:9c:fc:f4:07:56:
         59:c5:56:05:e9:86:0b:07:08:53:58:d2:a0:f6:11:3c:49:e8:
         b6:ad:78:5f:2c:1c:9d:ce:ef:2e:de:9f:5a:af:cc:31:2a:f1:
         9c:9c:26:0a:59:0e:a2:59:d2:80:8c:6b:1b:34:11:86:4e:41:
         28:8f:1e:24:d7:90:7c:81:b6:12:61:f2:98:05:eb:6d:e5:85:
         a8:0c:32:d1:0c:67:66:10:b6:a0:bb:34:a8:e2:96:f0:b8:1e:
         06:c4:5d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----