Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144219.roa
File:                     AS144219.roa (raw, json)
Hash identifier:          QrSlKzi/mDV5wo3tAxNpFh+aHZHqvzqDQUCf/qlKPnA=
Subject key identifier:   FD:00:70:14:96:86:BA:4B:3C:87:5B:6C:85:AC:D2:2A:F4:E8:63:40
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5DF494A933CD19502974AF1CE3A41006DFD73021
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144219.roa
Signing time:             Fri 22 May 2026 02:48:03 +0000
ROA not before:           Fri 22 May 2026 02:43:03 +0000
ROA not after:            Fri 21 May 2027 02:48:03 +0000
asID:                     144219
IP address blocks:        240a:a621::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:f4:94:a9:33:cd:19:50:29:74:af:1c:e3:a4:10:06:df:d7:30:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:43:03 2026 GMT
            Not After : May 21 02:48:03 2027 GMT
        Subject: CN=FD0070149686BA4B3C875B6C85ACD22AF4E86340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:51:48:9c:8d:df:e8:24:47:99:b9:14:a0:72:
                    e0:df:f7:ce:42:98:8a:3b:8d:4b:ac:89:25:f5:34:
                    c3:fa:77:5d:c1:e2:c2:fd:1e:c5:8c:33:3e:d2:35:
                    db:b4:c7:a0:2a:e2:c0:d2:63:14:f0:9b:0b:62:e5:
                    8d:83:7f:7e:f6:43:a6:e5:cd:5a:e1:bb:d2:18:42:
                    09:15:f1:3a:8e:12:ba:be:f0:b8:8d:47:34:19:70:
                    d6:57:3c:b2:d3:bb:b7:0d:ef:d1:6b:a3:0a:92:af:
                    94:00:c3:1f:a7:d2:57:b6:86:45:ef:df:9e:2f:1c:
                    6d:5d:e6:a0:8e:5c:cc:7f:9e:3d:7d:be:22:2e:18:
                    2f:b7:86:7f:1b:11:e9:0b:ff:dd:83:f6:aa:5c:78:
                    5f:6f:07:fb:92:28:7c:87:aa:f6:a6:4e:05:62:85:
                    15:a3:d1:f6:09:bb:53:83:61:aa:8b:f4:58:29:f1:
                    17:5a:db:0f:55:3a:c4:a0:3d:1e:c3:fa:3b:52:6e:
                    85:8e:5d:e6:4b:42:22:12:1a:af:d8:19:cb:23:f6:
                    d8:f2:c8:56:34:ea:73:f1:c8:44:6f:8c:a1:3d:af:
                    75:db:3c:23:a2:b7:d1:7f:fa:9d:7e:eb:65:bb:0c:
                    1e:43:e3:49:46:e7:0b:80:cb:cc:37:33:bf:e5:58:
                    3f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:00:70:14:96:86:BA:4B:3C:87:5B:6C:85:AC:D2:2A:F4:E8:63:40
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144219.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a621::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:6d:05:8d:7c:c7:46:ee:a9:41:ac:43:51:73:7f:88:51:f9:
         75:f9:24:26:80:dc:d7:0b:61:a1:f9:e9:d6:dd:2a:7a:18:28:
         ac:25:26:e7:f9:16:e1:39:3b:83:49:48:e8:34:b3:0d:70:dd:
         31:18:61:58:1b:d7:2a:93:f1:b4:14:00:1d:89:0a:f3:bd:96:
         2a:a8:2c:50:5b:2f:88:bd:79:c0:cb:5d:4c:d8:fe:22:35:59:
         ab:e5:33:f3:55:7f:31:c2:ea:e3:39:0f:a7:60:e4:dd:0b:8b:
         90:f9:ea:2b:ed:11:b1:2e:82:41:c2:58:77:54:92:2d:a3:9b:
         cb:63:93:57:14:1c:17:46:0c:19:f0:38:28:5b:f1:8b:58:bb:
         13:85:87:3c:2c:7d:42:d2:a0:29:97:6e:57:5d:72:be:2c:4a:
         84:06:b7:e1:72:fd:14:68:27:44:e3:e2:32:14:97:ad:10:5e:
         83:e6:bf:58:d5:da:8f:46:e3:9a:d7:21:ce:93:0b:d0:12:6f:
         c5:38:1b:a8:cb:35:b1:f4:53:77:4c:a5:23:08:8a:c9:94:63:
         28:2b:42:fb:1b:74:72:22:d6:72:39:2b:65:00:1b:94:74:58:
         d3:02:10:47:89:43:20:30:2a:ac:e1:9f:87:86:83:42:9d:97:
         cd:ea:ee:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----