Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144225.roa
File:                     AS144225.roa (raw, json)
Hash identifier:          b20cwU6RiLbZqBJtODlNKfogfDz8IvadeW3BIf+bdFA=
Subject key identifier:   29:4E:E1:5C:0F:84:04:57:76:98:76:4A:DF:51:20:8C:81:0E:B6:50
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3A80212B9591BDDA392610EA732EAE1AB54C57E4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144225.roa
Signing time:             Fri 22 May 2026 06:27:45 +0000
ROA not before:           Fri 22 May 2026 06:22:45 +0000
ROA not after:            Fri 21 May 2027 06:27:45 +0000
asID:                     144225
IP address blocks:        240a:a627::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:80:21:2b:95:91:bd:da:39:26:10:ea:73:2e:ae:1a:b5:4c:57:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:22:45 2026 GMT
            Not After : May 21 06:27:45 2027 GMT
        Subject: CN=294EE15C0F8404577698764ADF51208C810EB650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cc:88:e5:11:c7:5e:bd:1e:1b:d0:27:3f:f7:
                    4a:df:28:92:54:11:63:c2:36:b2:b4:e8:57:5c:ef:
                    82:bc:e1:47:ae:c3:19:ae:54:cf:f3:f1:fc:82:7e:
                    6b:90:51:6b:40:79:c7:78:e6:6b:84:36:ec:31:35:
                    ee:2b:af:7a:1b:49:21:7d:c5:c0:53:49:a1:65:76:
                    d3:6e:93:a1:93:57:49:39:de:5b:26:de:92:6d:55:
                    64:21:d6:35:e7:c4:b8:a1:6c:1f:1d:db:ea:13:51:
                    fb:fa:b2:f2:10:23:51:e3:53:2a:65:da:9c:7e:ce:
                    d1:69:28:70:ca:8d:72:a9:bd:af:eb:59:71:01:df:
                    16:e2:42:fc:15:98:8a:b1:a3:d6:97:9e:ac:f8:ca:
                    cb:32:87:f4:7a:4d:37:c7:f7:af:eb:f6:0e:8e:ea:
                    f6:9c:be:84:7a:aa:cd:11:53:19:bb:5e:bf:53:62:
                    e8:eb:32:12:a7:7b:d6:b6:54:46:09:04:93:3d:8b:
                    16:a8:19:f4:75:bd:0c:d6:22:e0:80:90:95:7b:1e:
                    3f:0d:0a:44:0c:67:dd:bc:09:66:73:dd:b7:db:1a:
                    01:d8:b8:8a:37:7a:08:03:6e:40:ae:52:ab:b6:fe:
                    7d:83:99:3b:b3:4e:8e:20:c7:24:6d:f1:f1:6f:a7:
                    a4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4E:E1:5C:0F:84:04:57:76:98:76:4A:DF:51:20:8C:81:0E:B6:50
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144225.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a627::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:b8:45:09:ba:0b:f0:b5:b4:ba:82:97:aa:74:21:af:52:3a:
         4d:43:d0:4a:a8:af:03:61:76:1c:a9:34:ec:c0:c0:f7:a3:87:
         d2:ed:94:9c:7b:99:d8:b2:9e:be:10:f7:40:e0:05:2e:16:3e:
         f9:3d:f2:d7:10:e7:f5:9c:93:75:4a:0c:5f:24:12:2c:ea:b0:
         2a:62:1d:24:b7:7b:60:8e:3a:1a:3a:9d:65:6e:47:84:87:44:
         33:c7:db:c7:8c:75:97:a8:53:f9:35:41:b5:72:ee:f9:c4:77:
         26:c7:a4:45:80:4f:10:b5:12:80:13:a6:fc:6f:68:ff:a7:3f:
         16:44:2f:46:aa:88:b3:b1:b8:8f:b5:ae:97:39:bd:a2:c9:de:
         2b:93:bb:64:1b:b8:b6:2a:6e:13:ec:00:ca:d5:6b:85:c2:1c:
         a0:55:92:6a:ab:ae:dc:21:de:b8:6e:a0:42:c9:4e:51:ef:09:
         b5:6c:83:9e:9f:23:51:bf:48:ff:8b:94:c6:95:7b:e9:1c:ca:
         77:4d:14:d7:aa:10:86:2d:eb:38:62:2c:60:ce:fb:10:b5:73:
         d5:8c:1a:13:52:d5:e8:a8:29:1e:5c:72:75:9a:0b:74:4c:e9:
         67:b8:31:ca:e2:5e:3a:d1:82:8b:98:78:fb:e1:39:6f:0f:c4:
         81:06:69:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----