Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144271.roa
File:                     AS144271.roa (raw, json)
Hash identifier:          2c6+Axh9Z4HP6IL2BTj3lHQTYdB0JsEhpqIF2huwC10=
Subject key identifier:   42:92:39:F0:81:5D:15:47:1B:28:59:BC:B7:2A:BB:7C:D8:8F:3D:E2
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       78E5C146AC4E7182A39567D7F4706D7CDE659712
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144271.roa
Signing time:             Tue 26 May 2026 06:30:58 +0000
ROA not before:           Tue 26 May 2026 06:25:58 +0000
ROA not after:            Tue 25 May 2027 06:30:58 +0000
asID:                     144271
IP address blocks:        240a:a655::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e5:c1:46:ac:4e:71:82:a3:95:67:d7:f4:70:6d:7c:de:65:97:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:58 2026 GMT
            Not After : May 25 06:30:58 2027 GMT
        Subject: CN=429239F0815D15471B2859BCB72ABB7CD88F3DE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4d:be:d0:ec:f0:50:ef:53:cf:c9:05:d5:17:
                    42:71:93:a9:2f:01:e8:20:03:17:3f:6c:39:75:e7:
                    65:37:5e:fa:bd:dd:13:dc:1a:e4:d4:87:7e:d3:4a:
                    73:79:cb:dc:38:36:66:38:a7:cd:b0:58:ed:c0:54:
                    bf:2e:45:d8:95:a6:e7:14:67:91:0c:d3:b3:9d:e6:
                    60:9b:77:13:f1:28:8e:34:3a:20:6c:70:0f:3e:fb:
                    d8:9f:89:3f:5b:b3:f7:02:63:10:f1:bb:7f:3a:93:
                    eb:36:96:a0:cf:6f:5a:0f:cb:fe:4d:98:61:32:08:
                    85:42:a7:0e:01:92:17:90:db:46:f6:ee:00:74:fe:
                    ed:68:8b:88:50:fd:41:52:f0:c6:4b:05:75:af:cf:
                    66:ef:38:ef:d3:f9:58:5a:c2:8d:fc:4c:ae:9a:d4:
                    c6:dd:bf:db:20:d3:9d:8f:3a:fc:51:ab:16:6d:24:
                    e5:0a:72:6c:23:75:5c:9f:71:8b:91:b3:39:b5:1f:
                    7a:19:ee:49:40:6d:4c:38:d3:e7:e6:d4:bd:7a:23:
                    e7:5d:59:8b:2a:c6:9e:73:bc:52:19:0a:e3:d7:0c:
                    17:a1:43:7c:1f:a2:2b:58:d2:45:78:c5:f8:82:1c:
                    44:50:78:45:e6:ac:9f:c8:e3:51:cd:3b:0a:0b:87:
                    7b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:92:39:F0:81:5D:15:47:1B:28:59:BC:B7:2A:BB:7C:D8:8F:3D:E2
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144271.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a655::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:ae:12:ae:fc:e0:1f:cc:1d:c9:50:cd:48:41:e6:8e:43:14:
         6d:b0:b8:17:58:34:8f:17:4d:78:ad:6e:c2:93:3c:8e:3e:01:
         88:b2:d0:8a:b9:48:b0:b7:e5:77:bd:a6:25:ff:75:55:c6:4f:
         7e:5f:25:4d:ed:ae:16:35:95:85:82:22:34:f2:d4:e5:69:cc:
         9c:b3:0e:2a:a0:ef:26:f0:de:a2:e1:66:fe:7b:dd:4a:45:d4:
         ec:30:f9:60:3f:12:c7:82:9c:65:2c:8d:60:6c:24:03:4b:e4:
         4c:73:67:06:31:db:c7:39:88:45:a9:52:4f:b8:a2:b3:0e:ec:
         45:fd:d5:95:e5:db:82:2d:ae:86:ee:95:38:eb:2b:4e:b0:92:
         f0:35:34:35:3b:2f:9d:6c:f8:3f:34:9d:25:87:2c:89:79:7f:
         f9:5b:e5:68:f1:91:aa:0d:bf:19:1a:88:d2:93:96:34:f1:15:
         8a:b4:a4:92:69:d2:4a:94:89:6f:87:b0:bf:f8:65:e1:59:fc:
         ae:dd:6a:5a:0d:9d:27:a5:dd:2a:7b:d6:c2:c3:04:9d:5b:bb:
         d0:bc:ea:ec:3d:68:56:11:4b:b3:44:f6:f5:99:cf:4a:b1:e1:
         88:b7:57:ef:0a:3d:17:78:6d:80:ab:0c:f2:80:23:82:15:5b:
         c6:fe:fc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----