Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144270.roa
File:                     AS144270.roa (raw, json)
Hash identifier:          R2jizF9i9I1o5AJsQ6DKkpbClXsgs0pff6fbf0PGd+M=
Subject key identifier:   AC:1A:10:DB:2D:64:62:76:C3:C8:B9:C4:9A:A7:7F:E7:F5:AC:2C:42
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       76A86D24428E2E6F5871E4F78EA1991E1E8DE661
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144270.roa
Signing time:             Fri 22 May 2026 07:32:08 +0000
ROA not before:           Fri 22 May 2026 07:27:08 +0000
ROA not after:            Fri 21 May 2027 07:32:08 +0000
asID:                     144270
IP address blocks:        240a:a654::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:a8:6d:24:42:8e:2e:6f:58:71:e4:f7:8e:a1:99:1e:1e:8d:e6:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:08 2026 GMT
            Not After : May 21 07:32:08 2027 GMT
        Subject: CN=AC1A10DB2D646276C3C8B9C49AA77FE7F5AC2C42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:af:e6:83:f8:f4:9d:5c:78:c0:b3:7d:15:24:
                    8c:7d:c6:a8:fc:f2:52:6d:a6:b1:a1:03:a4:61:3d:
                    ee:cc:8b:e5:2f:ba:08:05:96:41:fd:3b:4f:6a:bf:
                    62:88:02:3c:fa:b2:c7:ca:35:6a:06:8a:a9:94:21:
                    8b:f1:63:32:99:27:f0:e1:3e:78:4d:cd:92:cb:ce:
                    8d:98:6d:91:b4:63:39:2b:c9:0e:73:8e:9f:7f:ad:
                    fd:64:00:c2:c7:fd:06:a2:32:16:65:05:98:e1:bf:
                    12:5f:67:dd:16:ae:01:2e:e9:72:9f:99:56:32:c3:
                    23:e4:1e:2e:1f:fb:c9:9f:95:d7:4c:77:53:4f:cb:
                    59:20:0c:9c:ab:34:3b:f4:3e:a3:d8:2b:62:56:69:
                    cb:7b:53:bc:e6:64:bc:7e:16:e6:08:64:25:95:94:
                    f3:11:85:1c:2f:9c:87:c0:f7:de:34:53:d5:ff:a3:
                    6b:7a:bb:f8:61:c0:2b:81:34:2c:ff:9e:b9:ca:71:
                    3f:9e:bd:bb:5d:50:ad:91:5c:36:f8:d1:3a:f9:dc:
                    45:64:ff:ff:1c:bf:94:98:ef:3b:51:81:6a:d5:af:
                    3c:0f:f8:5c:5c:02:60:65:5f:e1:30:2a:af:61:29:
                    a1:87:5c:cb:58:13:7d:6e:a6:0a:8d:79:e1:e9:dc:
                    8b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:1A:10:DB:2D:64:62:76:C3:C8:B9:C4:9A:A7:7F:E7:F5:AC:2C:42
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144270.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a654::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:22:5a:72:c2:4d:25:58:0b:8b:8b:b0:c5:c6:d1:ef:45:92:
         26:8a:b7:f1:5b:49:4d:f9:c2:64:4a:47:96:8d:8f:eb:e9:eb:
         ac:55:45:a3:a1:29:b0:ab:f3:b8:b9:fb:70:96:d7:51:de:48:
         66:4f:f4:05:79:c1:30:51:7a:dd:bd:64:be:d8:db:f8:a1:11:
         05:03:11:75:33:88:31:a1:6f:58:8a:53:af:51:42:68:0a:60:
         b2:db:a1:8b:55:de:d7:df:d1:70:f9:bd:ac:7e:34:af:9d:0a:
         0e:c4:da:0e:31:65:2a:58:d8:94:cc:b8:57:5c:f0:b4:d7:0d:
         6d:ab:d4:f7:d9:70:dd:3f:97:91:30:f2:8c:47:73:13:60:19:
         4f:a8:85:28:62:9e:68:0f:33:09:57:31:4f:7a:d0:4d:d4:d6:
         76:1c:6c:e0:18:ff:8d:12:1e:d5:5d:56:87:1e:a3:24:f6:df:
         33:fc:8e:da:58:14:e6:2c:e3:03:59:4a:e4:65:61:17:91:71:
         42:ef:0c:8a:21:78:46:f9:91:b4:56:c9:7b:ba:f7:a3:81:a7:
         dd:39:6c:fb:61:6f:19:bc:1d:9f:41:df:18:c9:5d:40:a3:46:
         6f:f4:b4:89:81:94:8a:fe:27:38:2f:6c:b0:48:67:c0:1a:c6:
         a8:be:af:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----