Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144251.roa
File:                     AS144251.roa (raw, json)
Hash identifier:          nnwpcv5JCWMIFifwp0/PGpVlhi13eRYLfH1H6X5rRIs=
Subject key identifier:   F3:97:B1:A8:05:B2:AB:7C:F4:B5:25:90:92:D1:1F:2F:4F:B5:34:4F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       236AA7E0701AF40ADD6AD7B0D0EE440E7329DD07
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144251.roa
Signing time:             Fri 22 May 2026 02:47:52 +0000
ROA not before:           Fri 22 May 2026 02:42:52 +0000
ROA not after:            Fri 21 May 2027 02:47:52 +0000
asID:                     144251
IP address blocks:        240a:a641::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:6a:a7:e0:70:1a:f4:0a:dd:6a:d7:b0:d0:ee:44:0e:73:29:dd:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:42:52 2026 GMT
            Not After : May 21 02:47:52 2027 GMT
        Subject: CN=F397B1A805B2AB7CF4B5259092D11F2F4FB5344F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:81:24:94:2d:ac:ed:e6:6f:7f:37:59:b0:5c:
                    7d:35:1d:b4:25:91:af:51:a8:df:30:fc:81:d1:b4:
                    90:b1:2a:4f:1c:a8:d5:55:b2:9f:5c:65:79:10:5b:
                    70:47:71:61:65:1c:6d:1e:d8:34:3b:d9:a7:99:dd:
                    b4:4f:7b:c1:a9:bc:d4:b4:80:73:2b:2c:67:96:77:
                    6f:bc:77:e9:cf:46:89:f6:76:4e:29:50:a7:61:cb:
                    02:92:7f:95:d4:f4:42:4c:fc:bb:2f:39:6f:55:d9:
                    61:42:d5:92:46:a7:e1:c5:eb:9a:fb:38:0e:f8:28:
                    17:6c:be:99:2f:62:d8:b3:ac:ff:e7:0f:5d:33:df:
                    28:ae:df:98:af:a6:2c:87:61:27:73:59:3b:a0:af:
                    ca:3d:c8:9b:0d:40:6a:ef:f5:02:ae:0b:c6:c3:db:
                    14:fb:8e:f7:01:5e:49:45:69:25:3f:bc:21:63:01:
                    47:19:06:bc:1a:94:bc:18:26:39:2e:27:86:b1:33:
                    79:94:bd:b0:15:bc:07:91:6d:57:65:90:d2:a8:1b:
                    73:27:fe:7a:f3:1f:02:88:7a:01:e5:31:6d:d6:06:
                    30:76:38:4f:b8:04:38:38:51:93:94:51:83:02:2b:
                    eb:4e:e4:dd:9e:d4:42:62:c1:5f:07:92:58:a3:cb:
                    c7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:97:B1:A8:05:B2:AB:7C:F4:B5:25:90:92:D1:1F:2F:4F:B5:34:4F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144251.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a641::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:83:e9:df:39:61:1d:aa:6a:9d:64:cd:d9:05:4d:14:b6:7e:
         f2:be:50:c6:a3:97:30:9b:6f:06:27:d8:0a:37:9f:40:47:d2:
         5a:4e:e0:1e:47:2f:36:b8:a9:ad:56:e6:e5:b1:40:b1:fe:7d:
         af:33:ba:8d:67:c1:8a:fb:59:59:98:f8:8d:14:b7:f2:fb:62:
         26:bf:80:59:57:aa:45:48:20:94:b7:86:70:89:bf:a1:d4:c6:
         a3:e1:3c:a2:0f:5f:a5:48:28:28:4a:22:c7:a2:20:96:de:f8:
         dd:a3:84:45:13:6f:c7:63:24:df:2e:27:7c:e1:4c:11:c7:73:
         35:54:ae:21:b4:d4:ee:ca:d9:1d:0c:a5:4c:c9:5c:6e:95:8d:
         9f:f8:6e:2c:f1:e3:0d:5f:38:53:db:ce:85:30:30:ad:98:7c:
         19:f1:59:b6:a5:d9:60:46:95:8a:2c:65:15:44:a5:e0:21:95:
         b7:5b:41:f8:8b:9b:19:2e:35:90:90:44:74:ad:57:20:d7:2f:
         ae:9c:62:fe:6a:68:41:a5:79:63:f9:89:78:59:36:43:19:e1:
         d9:0e:7f:f9:0b:59:71:80:70:44:b9:e2:02:80:1a:5a:5e:4e:
         3d:0a:dc:64:e7:92:c5:ab:68:55:17:22:0b:52:23:92:81:54:
         80:98:fa:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----