Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144223.roa
File:                     AS144223.roa (raw, json)
Hash identifier:          cu6BaPZRMh167UIfCrj7YfnGwer49uDn20W+mbdNZmQ=
Subject key identifier:   63:06:BF:13:CA:D5:FE:38:33:7C:06:F6:FB:8E:AA:E8:29:B4:56:A9
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5E2BA984782C2520252A55D14523E37DD48D19FB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144223.roa
Signing time:             Fri 22 May 2026 06:46:24 +0000
ROA not before:           Fri 22 May 2026 06:41:24 +0000
ROA not after:            Fri 21 May 2027 06:46:24 +0000
asID:                     144223
IP address blocks:        240a:a625::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:2b:a9:84:78:2c:25:20:25:2a:55:d1:45:23:e3:7d:d4:8d:19:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:24 2026 GMT
            Not After : May 21 06:46:24 2027 GMT
        Subject: CN=6306BF13CAD5FE38337C06F6FB8EAAE829B456A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ac:b9:cd:f1:82:d4:dd:97:e3:68:59:64:55:
                    c7:eb:02:7b:48:b0:07:19:76:3d:60:bf:60:dd:1d:
                    87:05:7f:13:5e:dc:9d:91:7d:73:06:d4:4f:4a:19:
                    31:3b:dd:55:02:10:1b:92:03:e2:3e:b0:86:38:fe:
                    e2:19:ea:63:e2:a8:bb:ca:fa:a8:b5:9f:cb:fc:01:
                    20:34:53:d2:21:90:3b:dd:fc:2b:04:dd:cc:7d:e4:
                    ce:1d:8b:1b:80:30:7f:f2:6b:8c:7f:dd:d9:cd:8f:
                    cb:cd:f7:44:64:22:eb:08:2f:8c:55:7e:f3:ba:25:
                    a7:0a:81:eb:d5:b6:c9:b8:87:1c:66:5c:2a:6d:b4:
                    c7:17:e7:91:2a:a8:2a:f6:12:5a:f4:1d:67:d4:be:
                    5e:d3:7b:5b:35:bd:96:b8:79:d4:ce:9f:ca:4e:36:
                    ec:94:bc:64:cc:50:35:53:e1:ea:2a:04:39:85:c2:
                    e9:07:67:8c:e0:97:87:13:d5:ea:ad:e1:1b:45:a2:
                    70:6e:47:59:ba:56:c2:a5:17:b0:7c:55:09:20:76:
                    27:5e:c3:91:b3:6a:98:a7:b7:61:35:78:34:9d:fd:
                    56:04:1f:78:97:e6:f9:12:8a:0d:b5:50:36:a8:d0:
                    32:ac:bc:95:a8:f7:4c:48:b9:fc:e2:70:c1:71:b0:
                    c7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:06:BF:13:CA:D5:FE:38:33:7C:06:F6:FB:8E:AA:E8:29:B4:56:A9
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144223.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a625::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:7b:53:2e:24:75:df:c4:ae:aa:e9:55:29:b9:d5:41:9a:e4:
         0d:23:28:39:4b:63:50:ae:4a:e6:de:58:5a:e9:1f:9a:f4:d0:
         a5:d0:31:20:f7:c9:e8:8d:f0:50:20:cb:4d:1a:43:18:de:3d:
         97:69:1c:97:32:fa:7a:87:19:e7:9b:5b:cb:79:a8:fa:ce:f1:
         3c:69:61:40:68:55:68:b5:50:6b:d7:f4:66:fc:61:53:88:ff:
         38:85:95:35:9b:51:6f:ba:5d:a9:78:c1:b9:f1:3e:c9:c7:22:
         8e:27:77:f2:e4:0b:49:59:dd:30:20:f9:2e:6a:38:5f:e0:2f:
         dc:e6:45:8e:dc:a3:74:2c:25:4a:cb:da:85:6a:74:5c:e3:3e:
         4a:57:a3:f3:bb:18:74:58:88:f5:81:bf:a5:78:17:f1:97:6a:
         91:c3:ab:9b:b8:11:f8:9c:db:11:67:10:b6:d6:af:0f:43:4d:
         b3:6f:ab:3a:45:9f:76:e8:e5:df:e2:9f:b4:5c:c9:ee:2e:7e:
         3c:4d:0a:ff:d5:ff:63:b6:88:60:6d:2c:09:27:a9:f4:8d:9c:
         79:2a:4a:6d:b2:d8:bc:78:d6:d3:c0:d7:d2:0d:b9:07:b3:39:
         24:2f:32:6a:fa:06:b1:5e:97:92:bf:84:42:c7:0a:10:53:c4:
         55:e1:98:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----