Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144290.roa
File:                     AS144290.roa (raw, json)
Hash identifier:          wefIhD3cqLBbUVxxExqTeO/3htWhRJwhlcWHD1tH6SM=
Subject key identifier:   F3:3F:B0:8D:5D:3B:73:D0:89:53:36:A0:CF:3B:E6:DE:87:87:C6:2D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       57324BA15CDBDA46B939A132E12FC68E21F626AE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144290.roa
Signing time:             Mon 25 May 2026 01:19:59 +0000
ROA not before:           Mon 25 May 2026 01:14:59 +0000
ROA not after:            Mon 24 May 2027 01:19:59 +0000
asID:                     144290
IP address blocks:        240a:a668::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:32:4b:a1:5c:db:da:46:b9:39:a1:32:e1:2f:c6:8e:21:f6:26:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:14:59 2026 GMT
            Not After : May 24 01:19:59 2027 GMT
        Subject: CN=F33FB08D5D3B73D0895336A0CF3BE6DE8787C62D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:de:93:b0:57:45:14:f4:ac:38:28:72:d0:78:
                    99:b4:bf:0e:cf:3b:56:47:3d:a7:63:1a:f0:aa:40:
                    75:3c:80:f9:9e:15:3f:4f:d5:d6:79:e0:2d:84:4a:
                    73:3a:33:e6:e1:14:7b:86:89:18:dc:64:9f:25:cf:
                    36:1e:1f:38:da:74:60:58:16:a5:56:fd:83:6c:fa:
                    d2:67:36:6a:da:aa:03:b6:1b:b4:4b:14:0d:5e:7b:
                    95:b5:1a:3d:3f:08:84:1a:cc:6b:f5:36:f9:be:41:
                    71:74:c7:bf:50:46:30:5b:e3:93:c3:2b:9b:47:9b:
                    1e:bc:9a:fe:b6:6d:64:88:6f:44:92:09:aa:1d:07:
                    ec:c1:81:da:1e:81:e1:e4:32:8e:9d:70:ed:94:9c:
                    f6:ce:84:a7:68:3b:73:ae:b0:47:8c:10:0f:32:62:
                    97:52:5c:b5:da:4a:e3:3c:47:bb:df:ba:23:5d:3b:
                    80:95:7d:3a:3f:83:f6:92:4e:eb:de:f7:eb:19:d7:
                    c7:44:93:1d:49:1b:68:dc:e4:da:97:17:e7:fc:32:
                    bc:fa:bc:40:0d:87:e8:28:0c:19:3a:e9:a7:62:bb:
                    ff:f1:73:df:73:57:59:0c:fa:8d:bd:0e:25:ce:5a:
                    0f:4d:b3:22:38:b2:42:82:98:4d:76:bf:f0:d1:3e:
                    1b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:3F:B0:8D:5D:3B:73:D0:89:53:36:A0:CF:3B:E6:DE:87:87:C6:2D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144290.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a668::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:f1:5d:9e:22:61:3d:1d:65:98:bf:62:86:f6:71:ce:f1:0d:
         68:ea:f0:ad:25:4d:18:f9:44:24:55:f9:e1:d4:31:08:89:8c:
         2e:69:31:28:39:6a:75:84:16:52:e3:de:99:ac:89:bc:c2:30:
         82:e0:9a:23:bd:e6:f1:9a:ef:24:f6:4a:b4:ba:ae:a4:fb:ea:
         09:a3:ea:c6:93:9b:41:c6:ac:59:35:33:64:76:3e:e7:ab:3d:
         69:73:fe:2b:0d:7f:ee:55:3c:5e:ae:7c:7a:13:e8:3a:b2:01:
         af:5e:cf:db:40:ac:cd:0d:e8:0d:82:bf:32:e1:d8:78:aa:17:
         73:57:13:dc:4c:79:ec:00:c2:e8:f9:8e:d1:00:78:a8:7a:54:
         df:8c:f9:54:9a:81:df:e9:e6:62:c0:68:50:77:69:f8:1e:25:
         8e:85:be:50:31:df:2b:67:1b:24:6b:58:ae:d8:71:78:4e:33:
         61:bb:46:77:c6:4b:cb:e2:f0:bd:e0:d7:a7:a7:86:0a:8e:1c:
         80:ee:c0:4a:f5:98:3e:e5:27:ba:fd:e2:8a:2b:5d:22:6b:d5:
         b6:9b:23:e4:fd:b2:89:ea:d8:0c:dc:e0:a9:ab:6c:be:f3:7e:
         b6:ab:17:32:08:bf:55:77:5e:ce:3b:e4:ae:ea:67:6d:83:86:
         55:18:e6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----