Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144238.roa
File:                     AS144238.roa (raw, json)
Hash identifier:          FPX3vhCBwkW/kbsRT8sy4Q7996mVLd8gs2vVrFcWpZk=
Subject key identifier:   38:FD:18:12:00:28:78:83:BB:E2:2B:64:CD:99:E7:B5:1C:E8:C8:5A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       53E35AB2722DDF51BB6AA5BE8C5FAB73409BFAD1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144238.roa
Signing time:             Tue 26 May 2026 06:30:50 +0000
ROA not before:           Tue 26 May 2026 06:25:50 +0000
ROA not after:            Tue 25 May 2027 06:30:50 +0000
asID:                     144238
IP address blocks:        240a:a634::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e3:5a:b2:72:2d:df:51:bb:6a:a5:be:8c:5f:ab:73:40:9b:fa:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:50 2026 GMT
            Not After : May 25 06:30:50 2027 GMT
        Subject: CN=38FD181200287883BBE22B64CD99E7B51CE8C85A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b8:92:83:39:ac:ac:19:df:50:eb:2d:d7:16:
                    f4:72:72:28:af:0e:3b:8e:da:bc:96:ab:ad:8f:ec:
                    76:0a:d2:3d:e8:8a:7e:f3:09:d3:92:6e:76:98:31:
                    ec:01:0c:35:f9:84:fd:7b:e1:fe:35:03:a2:c4:ca:
                    27:d8:86:68:f6:1d:82:b1:c7:f3:b1:b5:72:f8:b5:
                    b6:8c:21:a6:bf:c8:4b:60:d0:20:be:73:77:4b:e6:
                    2f:75:19:3f:17:b0:ae:de:10:c0:ee:c8:ea:ae:c0:
                    dd:0a:4f:ef:3c:b9:7f:dd:d0:bc:ed:a6:9e:d9:03:
                    a6:44:30:35:ba:78:3b:be:a9:ee:d1:06:30:0e:6b:
                    34:7a:01:3f:36:55:dd:1b:e1:35:0d:87:b0:d7:c4:
                    cd:72:3c:53:59:8b:ba:52:f4:c2:80:2e:d1:4e:4e:
                    22:ed:f2:ce:cc:92:ee:fb:c3:5a:0e:25:15:bb:c0:
                    73:f3:a9:33:6b:9d:b2:0e:d8:5c:78:b9:7e:0b:01:
                    aa:d2:f0:ef:c6:58:d2:8d:fb:a9:7c:0c:12:82:a6:
                    17:c3:18:72:d0:3d:cb:f2:87:fc:f2:b7:7b:c6:5b:
                    6d:e4:56:55:d8:39:d7:fe:dd:e9:70:cd:9d:03:6c:
                    6a:03:31:fd:be:e7:c4:73:a0:8e:4c:8c:95:3d:d0:
                    be:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:FD:18:12:00:28:78:83:BB:E2:2B:64:CD:99:E7:B5:1C:E8:C8:5A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a634::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:24:3e:8b:41:ce:34:75:13:e9:47:b2:ee:59:66:81:bb:d8:
         c7:6c:4d:10:05:3e:91:0c:c3:4a:9a:27:5e:fe:de:23:7d:45:
         0d:46:a9:77:0e:12:66:70:48:28:bf:d7:c8:dd:ff:06:28:4b:
         17:02:92:e3:af:4c:c1:d8:d5:60:40:f7:2d:4a:78:1b:ee:80:
         a3:25:b2:2b:6e:54:a0:29:93:32:65:64:6f:a8:25:b9:25:af:
         7e:55:1d:10:c6:cf:e3:71:cb:26:fa:99:89:e9:97:0c:39:02:
         48:2a:31:0a:9b:ba:e6:ce:27:ee:9d:8b:6f:99:85:be:24:68:
         b0:ce:9d:d6:25:5e:30:8e:79:73:30:05:42:e3:cd:af:ed:cb:
         f1:c9:0d:24:18:3c:55:d5:61:f8:4c:c6:a1:34:e0:7e:41:60:
         b6:5b:13:db:42:41:36:ef:c7:7d:25:fb:38:20:fc:ab:ae:ec:
         5b:4f:44:51:4d:8e:c9:91:0d:e5:da:5e:75:f2:f2:90:8a:5d:
         0d:5a:be:b9:e0:1c:e0:07:ca:44:96:2a:df:92:13:e0:25:19:
         88:9f:82:af:33:f7:09:e0:ec:86:c2:8d:78:f9:09:e0:3e:7b:
         0d:7e:5b:3c:21:7c:ce:f3:64:e5:b8:d9:0d:3c:a0:0f:08:64:
         1a:e6:68:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----