Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144303.roa
File:                     AS144303.roa (raw, json)
Hash identifier:          RWdBp7GALD5cQ/MAEPRMSHjCJ6N0Tjcbd3SSJ7dksLQ=
Subject key identifier:   D9:60:1F:62:CD:F1:F1:50:88:6C:B6:04:57:DE:89:A0:49:9A:B1:C9
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5E3EFA686E50B479479E5DB718C3BDE2FFEDDCEE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144303.roa
Signing time:             Tue 26 May 2026 03:17:12 +0000
ROA not before:           Tue 26 May 2026 03:12:12 +0000
ROA not after:            Tue 25 May 2027 03:17:12 +0000
asID:                     144303
IP address blocks:        240a:a675::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:3e:fa:68:6e:50:b4:79:47:9e:5d:b7:18:c3:bd:e2:ff:ed:dc:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:12:12 2026 GMT
            Not After : May 25 03:17:12 2027 GMT
        Subject: CN=D9601F62CDF1F150886CB60457DE89A0499AB1C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:39:95:f8:e1:82:36:0a:52:d5:a2:80:e6:dc:
                    8a:f9:36:e0:e1:81:47:2f:60:97:62:11:70:2b:a7:
                    d3:25:3b:98:e7:8f:88:ef:ca:4a:26:61:40:ca:87:
                    49:09:8e:96:e0:6c:e5:35:35:33:d6:38:8c:2c:7c:
                    1c:c9:6b:5c:ff:88:6c:ae:cb:ff:bc:ab:71:f2:17:
                    55:99:e2:8f:5b:a2:6a:5b:85:39:d7:c8:9a:65:62:
                    2f:c0:0b:8f:3b:12:a1:13:7f:b2:ab:ef:33:43:43:
                    a7:70:07:cf:fe:e8:18:f5:d7:32:8b:67:a6:a8:d4:
                    db:f7:f8:59:cd:9d:7f:8f:c8:e2:39:a1:f2:f4:9f:
                    a5:e0:13:d1:bc:47:fa:87:5a:9d:8c:1c:bf:9b:80:
                    56:a0:b1:ef:4e:bf:4d:59:a8:68:31:7b:ee:7c:bd:
                    64:98:cf:5b:7e:34:73:f9:1e:3b:19:d3:94:07:37:
                    7b:18:0b:d6:17:93:0a:8b:b8:1c:6b:ef:0c:81:f7:
                    de:5e:6c:fc:45:bf:33:1d:1d:3b:47:53:9b:df:ac:
                    71:4a:05:1b:28:f6:ce:75:71:30:81:cd:54:a8:15:
                    d4:74:a5:22:3e:dc:a2:b9:07:ca:0c:18:29:a7:a4:
                    83:00:bd:70:41:25:31:0a:0c:06:2c:ea:bc:7c:45:
                    6c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:60:1F:62:CD:F1:F1:50:88:6C:B6:04:57:DE:89:A0:49:9A:B1:C9
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144303.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a675::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:ca:21:d2:ea:4d:a5:ec:63:9f:a6:7c:33:e5:af:47:07:59:
         7f:f1:e3:2e:53:f1:3a:2d:21:42:0d:16:fe:98:7a:25:c1:22:
         55:35:c2:f9:db:f6:c1:e5:a2:52:58:1e:25:39:dd:a6:97:a7:
         90:4a:b1:8b:e9:4a:d1:69:d1:4f:75:c3:a4:aa:24:98:23:e4:
         75:ed:70:e7:72:c5:fd:fe:3a:71:46:a7:fa:fa:54:e9:e2:5e:
         9e:36:c7:fc:89:70:60:64:2b:83:a3:97:b2:24:3d:b5:48:04:
         ff:cf:71:c4:ac:8f:d6:5f:38:68:30:e6:09:8f:bc:c7:ba:d3:
         db:42:c6:e6:ff:f6:69:09:c8:62:e4:11:4f:4f:bc:e5:b7:a2:
         34:66:73:05:8f:c6:85:ae:b8:c1:0a:70:6c:b5:60:eb:b4:b8:
         8d:e2:5c:18:e0:3a:94:11:14:54:b6:6c:eb:2b:d6:c7:a0:ce:
         9e:54:f4:e7:16:39:0f:5b:b4:c9:f8:15:38:c6:f5:10:d1:e1:
         5d:f5:da:da:ef:5c:fe:6e:25:0c:07:55:59:b1:50:37:51:17:
         0d:fe:10:ee:8f:c3:09:fa:b8:ec:4d:f1:74:a8:57:fd:06:b9:
         32:25:33:da:21:98:8a:5a:c9:d2:45:71:ed:12:e1:88:7a:a4:
         23:8c:ab:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----