Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144268.roa
File:                     AS144268.roa (raw, json)
Hash identifier:          WzO6o5sYnv+05YkUPGBF/R6iIBfT4NC2eL5m05G7Gec=
Subject key identifier:   B8:BE:AA:9F:A2:83:E7:63:48:84:F9:25:2E:F9:E0:7D:11:AB:88:8A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2FE907A12581EFC41918427722770033D0ACF26A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144268.roa
Signing time:             Fri 22 May 2026 07:32:06 +0000
ROA not before:           Fri 22 May 2026 07:27:06 +0000
ROA not after:            Fri 21 May 2027 07:32:06 +0000
asID:                     144268
IP address blocks:        240a:a652::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e9:07:a1:25:81:ef:c4:19:18:42:77:22:77:00:33:d0:ac:f2:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:06 2026 GMT
            Not After : May 21 07:32:06 2027 GMT
        Subject: CN=B8BEAA9FA283E7634884F9252EF9E07D11AB888A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2c:f4:71:20:e3:f6:ca:aa:18:bd:a2:db:18:
                    e8:9b:4e:be:53:6e:fc:d9:26:18:0f:b6:47:81:e4:
                    ff:a4:d1:88:f0:e1:c7:c0:41:65:a7:47:ce:b9:0b:
                    f6:74:f4:51:54:06:98:bd:14:c5:93:44:73:b3:ab:
                    16:71:34:89:fb:1c:dc:2a:f8:e5:b4:21:5d:a6:21:
                    19:3b:85:7b:57:96:26:ca:27:ec:1a:d1:1b:e9:46:
                    47:b2:e6:10:e1:e5:c6:e8:2d:6d:6d:bf:41:31:7d:
                    9c:2a:34:eb:ae:c2:f5:a3:a9:4b:3d:77:62:be:3f:
                    05:9e:3e:7e:d5:4b:c8:a0:58:1e:16:40:9a:bf:7d:
                    ef:1f:ea:7d:76:6d:d0:c6:a0:39:19:c3:ea:12:16:
                    3d:a7:07:cd:ef:3f:aa:3a:90:14:6e:61:20:6d:c1:
                    bf:4c:ee:ff:35:a2:77:56:72:b5:3e:af:38:79:2c:
                    23:86:e7:b0:c1:df:a5:89:ee:c8:d6:26:23:2b:20:
                    20:5a:df:68:0e:a2:2a:13:cf:39:1a:ff:25:c9:82:
                    8b:48:38:dc:28:e8:4f:f1:a6:67:ee:d1:df:99:d4:
                    a7:e8:00:69:30:8c:3f:bc:4c:43:78:75:a4:14:45:
                    ea:5c:e4:1f:20:87:4d:7b:97:17:c0:72:d9:9d:30:
                    ca:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:BE:AA:9F:A2:83:E7:63:48:84:F9:25:2E:F9:E0:7D:11:AB:88:8A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144268.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a652::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:42:fd:9e:46:5a:5d:64:75:b6:e8:f6:78:7c:4f:f2:57:34:
         51:0d:e9:ba:0d:ba:90:20:3d:e7:4b:ac:ce:ec:80:b5:f9:f4:
         c2:33:fe:a9:72:03:e0:e6:d7:95:01:0b:33:3e:76:2e:e8:6c:
         68:dd:ae:5f:30:74:6c:ec:b6:27:8e:38:d5:56:2a:78:b1:3d:
         4f:65:a4:24:e2:4e:55:bb:d5:f2:c1:88:15:41:ef:a2:8b:67:
         79:9f:2e:5a:70:be:7e:f3:0e:27:78:7a:3a:28:53:4a:24:05:
         d9:5b:e1:fd:65:76:fc:49:33:6b:4f:b3:37:b6:17:80:9d:f9:
         bd:24:e0:bf:08:fb:c0:22:91:97:bb:4f:6a:cf:eb:ed:ea:8d:
         de:50:ac:21:56:c4:25:75:0b:31:4a:d6:97:46:1c:c2:20:17:
         19:9f:07:09:fb:72:a6:c2:d9:27:bf:08:29:6d:14:b2:11:4b:
         bb:4c:c8:49:13:26:7c:3a:f1:06:0e:a2:b8:f7:fd:7b:b6:df:
         35:0a:cc:47:d5:b5:99:fc:70:09:f7:90:77:89:e4:99:79:60:
         ce:73:1a:53:b2:85:b5:7d:d3:48:51:8f:ad:95:59:cd:5b:1b:
         aa:e5:18:dc:33:af:89:62:a5:9d:25:a9:ac:1d:e8:c6:d0:1e:
         d8:2e:53:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----