Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144227.roa
File:                     AS144227.roa (raw, json)
Hash identifier:          UwvoIVKQtXlmHTCc0NX7i6QrP0LVv+7ZAklJ/1CX10Y=
Subject key identifier:   96:4E:01:14:3C:28:68:01:DE:19:D3:58:5D:B5:F5:3F:B6:EF:03:28
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       520922213D34FF4D6556A1B414A07458F2CF7905
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144227.roa
Signing time:             Tue 26 May 2026 02:34:49 +0000
ROA not before:           Tue 26 May 2026 02:29:49 +0000
ROA not after:            Tue 25 May 2027 02:34:49 +0000
asID:                     144227
IP address blocks:        240a:a629::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:09:22:21:3d:34:ff:4d:65:56:a1:b4:14:a0:74:58:f2:cf:79:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:29:49 2026 GMT
            Not After : May 25 02:34:49 2027 GMT
        Subject: CN=964E01143C286801DE19D3585DB5F53FB6EF0328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:31:a4:80:6e:bc:87:83:8c:2f:b3:31:98:12:
                    95:51:28:d6:53:8d:b5:15:37:d1:2c:a7:00:f3:d3:
                    ef:47:34:fa:c1:e8:29:67:d5:ce:5f:70:51:9f:b8:
                    72:04:12:f8:b7:55:c3:29:bc:d9:e8:46:42:84:6c:
                    a2:08:5e:4e:d8:df:6c:e8:35:87:6a:f0:60:66:30:
                    e9:55:0f:39:73:2e:b4:bc:29:78:81:90:3a:3e:8c:
                    61:5a:10:12:3e:99:9a:d1:5f:90:ad:1b:d9:18:5e:
                    2e:7f:62:30:b8:68:bd:72:c0:72:eb:23:29:0d:13:
                    23:28:24:30:bf:3c:c3:9f:55:4d:2f:ea:1d:ab:11:
                    52:2d:4e:d7:0b:27:b1:d7:a8:42:39:56:4e:66:68:
                    9d:98:ae:74:ac:b4:66:2b:fc:37:97:8b:f3:f0:0f:
                    22:2f:a3:73:cc:f2:a2:ff:17:b8:84:24:e0:83:bd:
                    6d:d3:67:d0:bf:b1:a8:1e:0c:a1:be:a7:95:a1:e9:
                    92:c8:ac:ad:a7:f5:b9:20:1a:9e:02:58:97:77:1d:
                    c4:26:2a:17:ea:91:da:fd:1a:d9:c3:9f:58:4f:35:
                    d8:10:50:05:24:1b:66:f5:5c:b7:28:1d:61:71:8c:
                    7d:d2:ce:ef:6e:51:07:e4:11:4b:54:f0:b0:93:f2:
                    58:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:4E:01:14:3C:28:68:01:DE:19:D3:58:5D:B5:F5:3F:B6:EF:03:28
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144227.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a629::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:9c:c4:64:f0:84:d4:b2:c7:bb:ef:5a:0c:28:55:0c:06:e9:
         64:e9:81:ee:e4:3b:3a:33:2b:c1:69:32:c5:aa:6d:09:4a:3c:
         03:2f:61:18:cd:cf:15:d8:7d:fb:30:6f:ce:a5:bc:d8:b9:02:
         1f:71:38:6b:54:f7:50:5e:54:d6:4e:b4:90:0f:62:44:6b:2c:
         1b:34:f5:ef:58:8e:0d:18:0b:a0:59:cc:3a:66:fa:e2:ba:cb:
         90:ba:1e:bd:4b:cf:e2:36:b8:f9:f1:dd:b4:d3:ee:87:23:d5:
         aa:e0:0d:f3:8f:29:f7:5e:a8:13:fe:b5:e7:44:78:76:04:61:
         95:c4:74:df:3e:47:a2:06:03:a7:9a:3d:c4:ea:75:ed:84:83:
         fd:9a:e3:55:4b:06:d9:71:c0:a8:aa:7e:b8:10:6c:00:ca:be:
         5b:7b:aa:93:54:97:d9:13:13:d5:3d:28:ae:eb:8e:4f:b4:84:
         ef:65:16:7c:ab:01:43:f2:44:c9:69:de:97:2d:55:e1:2e:e1:
         79:6d:71:1e:76:5b:e7:b3:40:d7:81:d2:1a:d5:62:1b:62:67:
         76:0e:57:d7:14:b5:8e:68:74:e8:3f:d5:32:d3:0e:c5:2f:09:
         14:6a:f6:e8:2b:4a:da:2a:7c:19:f0:57:96:61:d0:40:8b:a0:
         64:8e:88:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----