Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144242.roa
File:                     AS144242.roa (raw, json)
Hash identifier:          t5+BvMXl3+6MG9op3SrYdLhWvKDTku6fbKTw4gV7iU4=
Subject key identifier:   C7:A2:3A:73:3C:7E:5F:5A:84:2C:7A:5F:41:86:C1:B3:02:24:17:BE
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0E0D22AEABE5761FA86D759753BB06F74CBBA29D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144242.roa
Signing time:             Fri 22 May 2026 07:32:19 +0000
ROA not before:           Fri 22 May 2026 07:27:19 +0000
ROA not after:            Fri 21 May 2027 07:32:19 +0000
asID:                     144242
IP address blocks:        240a:a638::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:0d:22:ae:ab:e5:76:1f:a8:6d:75:97:53:bb:06:f7:4c:bb:a2:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:19 2026 GMT
            Not After : May 21 07:32:19 2027 GMT
        Subject: CN=C7A23A733C7E5F5A842C7A5F4186C1B3022417BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:89:ad:e7:5e:6a:98:e7:f8:a5:df:2f:ec:0b:
                    22:aa:54:90:bd:77:fd:ae:74:67:b4:5b:c3:5a:47:
                    14:f6:56:2f:48:4f:42:85:00:48:35:f0:b8:d3:7b:
                    d3:5c:e0:f6:df:bd:3c:a7:af:f3:11:66:ed:96:b1:
                    50:3a:3c:6c:6b:a0:c3:f7:81:4b:0c:d8:34:da:d1:
                    ba:00:bc:a9:3d:e1:28:37:94:71:28:c2:aa:42:dc:
                    96:14:63:f1:92:6c:99:4d:13:73:8f:51:a6:ff:af:
                    ff:5a:31:ef:b1:38:70:25:fd:19:c1:14:eb:48:fe:
                    1e:17:20:de:6f:5a:c5:33:97:14:da:2d:31:cb:89:
                    e3:f3:41:99:39:57:c0:9d:a6:82:0b:a7:db:ef:e4:
                    4d:68:7e:08:50:2d:7e:60:59:05:b0:54:58:01:6f:
                    ea:1b:2c:2c:f9:8a:70:a4:7e:d1:6e:45:35:18:d5:
                    5d:4e:86:fe:f5:07:a4:d0:b2:c3:d5:8c:06:85:59:
                    98:a0:3c:c2:bb:f6:63:8d:01:48:bc:0e:f5:f3:ca:
                    ba:5f:7d:21:3c:63:48:1c:2b:95:ba:8c:3c:67:aa:
                    f2:ff:90:8d:6d:fa:96:7f:b6:47:8f:80:37:74:1b:
                    f8:d5:2a:36:08:30:1b:4c:b3:fc:d1:e2:27:71:c9:
                    a6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A2:3A:73:3C:7E:5F:5A:84:2C:7A:5F:41:86:C1:B3:02:24:17:BE
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144242.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a638::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:6a:79:03:7d:f1:77:bc:4b:e0:d9:a2:03:82:c0:7e:4f:ef:
         87:fd:c5:60:f8:8d:0d:13:e9:f8:9c:70:ad:73:81:3e:8b:90:
         a5:5b:12:a8:c5:95:cd:03:59:a8:76:5d:1a:1b:64:dd:b3:41:
         f4:94:0a:2f:84:19:87:91:e3:5e:16:6f:f2:0b:66:2a:a9:28:
         26:9b:f4:9f:86:56:fa:b5:74:69:0c:46:9e:3e:74:ec:bc:25:
         b4:2f:5a:31:de:e3:7c:1a:24:65:80:82:0e:9d:bc:49:a1:8c:
         6d:4a:c4:04:b3:0a:37:12:cc:8b:2c:63:df:6e:85:a2:88:a1:
         6a:2e:d8:e2:c2:7a:5d:0f:7b:ff:97:d4:bf:84:4a:b1:b9:3d:
         a3:dd:c6:71:b5:e9:02:f5:09:65:4f:95:e3:7f:5f:d4:10:e1:
         4c:05:c8:de:30:25:96:e2:e6:de:cf:a3:3a:a4:b4:4b:b4:84:
         2c:55:b3:50:16:9a:53:5d:57:09:1e:a7:3d:5d:d9:1a:dd:04:
         0d:a5:10:9b:13:75:3c:72:51:a5:82:16:9a:3a:25:f8:d2:51:
         32:b3:c9:98:c6:32:3a:59:48:84:df:ec:72:3c:2f:6c:97:d1:
         65:ea:c0:8e:71:8d:71:b6:83:1c:a1:13:41:02:89:c6:97:1a:
         9b:d3:a3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----