Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144319.roa
File:                     AS144319.roa (raw, json)
Hash identifier:          WeqZxu2CZaS1yfkoyIgJW7Wv/6MGlDu3AugdYsOQPwY=
Subject key identifier:   73:FF:42:6F:4F:E9:1E:F1:F4:52:5E:0B:C5:80:C2:82:67:6D:2D:2B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       626BD9A9D00B6CC871623FF0FB220F4EEFEB7462
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144319.roa
Signing time:             Fri 22 May 2026 04:26:40 +0000
ROA not before:           Fri 22 May 2026 04:21:40 +0000
ROA not after:            Fri 21 May 2027 04:26:40 +0000
asID:                     144319
IP address blocks:        240a:a685::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:6b:d9:a9:d0:0b:6c:c8:71:62:3f:f0:fb:22:0f:4e:ef:eb:74:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:21:40 2026 GMT
            Not After : May 21 04:26:40 2027 GMT
        Subject: CN=73FF426F4FE91EF1F4525E0BC580C282676D2D2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:43:94:ba:b7:5d:b8:b8:f0:4e:19:76:6c:29:
                    0e:7e:86:9e:e9:23:8c:07:84:31:74:e7:0f:b7:1e:
                    72:bd:31:0d:e8:5e:41:1a:a0:9d:3c:e4:62:e6:15:
                    8c:36:b6:2d:85:92:77:e1:bb:c3:56:43:ab:21:3d:
                    df:3b:64:ea:dc:fb:31:e0:cb:a5:0b:5b:75:65:ee:
                    39:d0:95:19:b6:75:cd:ef:23:8f:1e:ce:04:fb:81:
                    40:66:f8:a8:e6:d8:2f:29:7c:bd:77:fb:79:95:c8:
                    a8:e0:29:a6:ed:2f:91:21:bc:80:23:5e:20:10:23:
                    07:47:e8:ed:41:e2:18:95:3b:99:20:ec:0e:17:83:
                    b8:ba:d6:bc:ba:26:4a:0f:89:35:a9:48:63:3e:5a:
                    c0:a8:2e:82:a6:6a:e0:c8:95:09:ed:83:60:40:d8:
                    9a:b6:b7:a0:4d:c1:c5:ff:79:d1:ce:d0:ac:73:59:
                    f8:67:40:fd:78:75:ab:51:2b:a9:0f:9b:52:fd:f3:
                    0d:7f:5d:09:71:ef:20:bb:b6:50:6a:7d:3c:f4:59:
                    69:b3:2e:0c:c4:07:c9:54:f8:ae:4d:e6:78:a3:5c:
                    31:76:08:05:4b:a9:ec:e4:e8:dc:88:c5:50:c7:34:
                    17:13:df:e4:36:4e:4b:eb:47:0c:3d:a0:6f:8e:f5:
                    db:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FF:42:6F:4F:E9:1E:F1:F4:52:5E:0B:C5:80:C2:82:67:6D:2D:2B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144319.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a685::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:dc:ac:07:57:6d:7d:3b:ac:dc:12:34:64:f5:d0:ed:4c:58:
         c6:3e:6b:f9:1f:af:0a:e5:bd:b6:f0:ba:d0:be:40:6d:a2:59:
         f1:08:30:a1:7b:a7:27:12:46:9d:5f:6a:01:6a:1d:07:d9:ca:
         8d:c7:6b:27:de:e5:8e:d9:97:68:60:31:ff:fe:12:19:35:13:
         f5:62:38:8f:fb:c2:15:ef:5d:46:65:f1:3a:7a:02:25:1f:a3:
         f0:76:05:9f:23:c0:fa:c6:57:75:8e:8b:e9:15:4c:b4:c7:21:
         d8:b7:86:b5:d2:d4:d0:d8:84:59:15:e7:a0:8f:3a:2e:85:41:
         45:6a:74:34:1d:e4:d2:fc:80:8d:c6:67:e0:80:3f:59:0e:fc:
         2b:f7:6f:33:98:ee:88:86:9d:d9:bb:02:85:02:5a:c8:8b:50:
         ad:e8:1f:84:8d:5b:03:e0:27:2c:30:3f:06:1d:23:8f:95:19:
         f9:2b:f2:86:fe:a0:96:2d:30:3b:d8:fa:3d:96:a2:d1:7c:a4:
         2b:e3:db:8c:f4:c0:5a:35:a2:9a:d6:08:f3:bd:f9:79:d3:7e:
         0c:a9:b4:7e:1c:12:2b:c4:c2:04:bc:4c:3c:51:1d:0b:2a:12:
         56:32:e6:63:be:26:54:8b:72:db:d5:88:59:77:99:cf:2a:04:
         d0:33:a9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----