Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144328.roa
File:                     AS144328.roa (raw, json)
Hash identifier:          vHeYQCZZKyx8PAEOMBwR8V9xOgwsxOySurk0+/P4PSc=
Subject key identifier:   5B:C4:A3:DD:C8:FF:C5:7D:1D:C7:AD:CB:7D:A3:AE:C1:79:DF:CD:2B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2C7E01191EB09B05F56E826BBF81439743C606E4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144328.roa
Signing time:             Mon 25 May 2026 03:19:16 +0000
ROA not before:           Mon 25 May 2026 03:14:16 +0000
ROA not after:            Mon 24 May 2027 03:19:16 +0000
asID:                     144328
IP address blocks:        240a:a68e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:7e:01:19:1e:b0:9b:05:f5:6e:82:6b:bf:81:43:97:43:c6:06:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:16 2026 GMT
            Not After : May 24 03:19:16 2027 GMT
        Subject: CN=5BC4A3DDC8FFC57D1DC7ADCB7DA3AEC179DFCD2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4d:a8:25:9f:23:5d:cb:60:8d:53:3a:1e:50:
                    06:bf:d2:9e:09:12:24:07:7c:5b:e3:32:9d:e1:b4:
                    60:36:70:8d:98:cf:bb:ed:59:e4:ae:36:17:60:b8:
                    4f:e8:54:4f:1b:6f:7d:d9:02:dd:be:6f:25:37:7b:
                    03:f2:9c:15:18:bc:12:61:71:26:b0:7e:37:cc:8c:
                    6f:3e:69:53:48:b0:bc:19:a3:d9:87:d4:86:b2:33:
                    71:ee:d2:1b:17:01:03:49:01:6e:42:31:63:b8:5b:
                    a1:8a:f6:4b:bb:a5:bf:7c:fa:9d:5c:e4:34:ad:3a:
                    62:e6:9f:9a:83:d2:4e:41:19:3f:3f:b3:77:34:94:
                    03:29:22:a9:0e:a0:9a:da:12:0d:33:c9:49:da:1e:
                    b9:cc:f6:35:10:49:5a:05:39:63:ae:53:49:d2:cd:
                    5c:7b:8c:7b:e5:81:5c:87:6b:61:0b:6b:95:b9:33:
                    ef:0c:4f:2d:6f:62:fb:d9:60:28:68:a7:ab:a9:9e:
                    b4:63:6e:b3:ad:11:89:eb:93:95:3f:82:68:43:66:
                    93:10:3b:2f:28:ef:03:f8:d1:55:25:4e:36:ac:ba:
                    de:7f:72:6c:b5:69:bc:53:f2:cd:f4:12:c5:d9:0e:
                    f3:79:e7:cf:ab:cd:f1:a0:3e:5f:19:19:1b:a0:23:
                    42:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C4:A3:DD:C8:FF:C5:7D:1D:C7:AD:CB:7D:A3:AE:C1:79:DF:CD:2B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144328.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a68e::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:b2:16:51:bf:55:71:1a:79:ce:13:75:86:24:c3:85:da:b7:
         41:b9:31:e0:5c:b8:b0:cb:14:7b:06:8b:a4:15:63:a7:71:8a:
         b1:af:18:be:ea:d6:d3:93:97:eb:87:45:e3:72:3c:04:6c:95:
         84:9f:a1:ba:cd:e9:dc:9b:e7:c6:e2:06:a9:c5:82:8d:47:81:
         94:93:73:9f:7b:52:69:34:2a:5b:08:c0:d0:99:fe:32:14:9a:
         67:e1:c8:a7:89:3c:73:b5:09:2c:46:bb:15:7d:57:65:62:29:
         b2:17:89:3e:df:64:d8:ee:ce:23:d9:e6:17:7b:8c:3f:1f:15:
         72:0c:17:e5:91:83:35:fa:8e:d3:83:6c:19:e0:06:3a:c9:9d:
         ee:0f:e2:cf:78:ae:05:39:1e:39:85:b4:13:e6:41:7f:c1:a5:
         1a:09:10:7c:96:a1:b6:4d:10:43:f7:9e:67:09:0a:9e:7c:80:
         76:d7:fc:01:41:1e:7f:88:42:41:fb:f1:1a:3d:68:a5:60:03:
         04:9b:66:a8:8c:86:7c:1c:7c:4b:58:2c:16:11:f1:e2:08:cd:
         fc:d7:21:5c:58:c0:1e:96:5e:f3:a1:fa:3d:7a:87:35:7c:2b:
         fe:a9:3d:14:d1:28:6d:c4:e7:3f:83:05:d5:73:35:a6:07:4e:
         a5:6f:d5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----