Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144323.roa
File:                     AS144323.roa (raw, json)
Hash identifier:          0rkrpFZkz/aj7io2PSvLAYuoJO+QEgMorPki3baudI4=
Subject key identifier:   9D:B3:27:46:B4:39:B0:1B:2F:9A:D9:1B:99:2E:2E:E6:B8:01:BA:FE
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0B6CCFB3455473AF59F28E91A4AE31536C7EDDC2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144323.roa
Signing time:             Mon 25 May 2026 01:38:07 +0000
ROA not before:           Mon 25 May 2026 01:33:07 +0000
ROA not after:            Mon 24 May 2027 01:38:07 +0000
asID:                     144323
IP address blocks:        240a:a689::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:6c:cf:b3:45:54:73:af:59:f2:8e:91:a4:ae:31:53:6c:7e:dd:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:07 2026 GMT
            Not After : May 24 01:38:07 2027 GMT
        Subject: CN=9DB32746B439B01B2F9AD91B992E2EE6B801BAFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6f:ed:27:6e:7f:ca:d2:10:06:c5:77:07:08:
                    c5:1f:b3:10:5e:e0:f7:bb:73:8c:a5:1d:35:75:a6:
                    ee:15:12:a4:5e:fc:cc:bd:60:88:ae:bc:c7:64:5c:
                    20:50:35:56:6a:df:14:c5:35:56:83:a1:c3:7f:87:
                    b1:02:64:5d:b3:03:91:3b:24:a4:7b:f2:11:b0:f0:
                    20:f2:f9:c1:91:c6:ce:6a:db:88:bd:6a:2d:2f:2a:
                    c6:7b:c4:23:bb:43:41:23:f9:9d:e0:c7:72:c4:fa:
                    76:cf:d5:bb:f7:ad:d1:c6:2f:7c:00:da:70:5a:e0:
                    15:30:57:61:29:2f:4d:26:21:d3:5f:67:af:c7:a9:
                    63:c5:f9:c3:3c:f7:28:71:09:5f:90:8b:45:15:73:
                    95:85:9d:0b:fa:05:a2:cb:66:5a:4e:65:62:99:20:
                    69:a5:85:d6:39:74:28:87:b4:7d:8b:53:4b:e3:f0:
                    44:31:d9:4e:11:39:c0:58:f8:ef:ce:5c:bb:95:d3:
                    fa:31:b9:7b:76:c9:ac:f1:58:b4:42:7c:63:89:01:
                    f6:57:14:8b:ba:cf:de:c1:da:64:6a:f3:9b:50:11:
                    06:14:5a:6e:c6:2b:f6:91:f7:7a:ae:8b:ce:c7:dc:
                    b3:6e:e0:9c:43:f6:03:0b:4a:33:59:c8:47:e3:61:
                    89:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B3:27:46:B4:39:B0:1B:2F:9A:D9:1B:99:2E:2E:E6:B8:01:BA:FE
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144323.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a689::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:8d:95:8d:f3:e0:91:af:a1:56:8c:5f:b8:44:86:82:a1:99:
         e0:22:7e:db:3e:06:7f:89:e1:f8:94:d1:d4:67:4c:3c:5c:fc:
         8c:17:93:5d:ab:3b:8e:de:5e:0a:fe:d3:76:57:e4:f3:94:65:
         8d:df:1d:c1:99:29:e6:14:15:4c:9b:d3:92:63:9c:3e:bb:7c:
         bd:98:6a:45:ee:11:96:c9:d4:94:2c:7f:81:f5:75:38:ed:68:
         a7:dd:11:2e:2a:18:77:51:7c:76:e5:93:7d:a7:87:16:04:c2:
         6e:72:f0:bd:92:56:2c:3e:f6:84:27:ad:ed:90:27:50:01:7c:
         c8:a2:2e:e8:2f:dc:47:4c:cf:4a:3c:2d:ff:16:e7:b5:25:e8:
         f0:d1:fe:b0:f4:59:47:3f:09:27:b5:a0:c6:ab:0b:37:34:2a:
         8e:4c:45:78:dd:ae:f4:dd:29:27:be:24:d7:98:de:30:82:03:
         25:50:49:4e:16:93:a6:93:42:ab:a5:b4:f6:1e:2b:85:c8:2a:
         8d:aa:65:23:20:dc:5f:39:6f:70:52:14:3c:4a:fc:3b:b7:99:
         72:3c:97:ee:03:03:ac:da:97:c8:ec:50:4e:9d:18:4f:3e:42:
         71:76:d4:fa:54:c3:6e:9c:a0:3f:ed:5d:90:f7:5d:64:e2:f6:
         5b:ec:26:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----