Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144350.roa
File:                     AS144350.roa (raw, json)
Hash identifier:          cWnli1zkqO56YH3ILrW+BaFczeJ54taoTuLeL1SsChc=
Subject key identifier:   FF:75:D2:99:5B:4E:6B:16:98:38:68:DA:E9:8A:B5:CC:DC:D7:8B:9C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       285DBFCDDE18C05CE3E6E4F63AB28981012BC155
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144350.roa
Signing time:             Mon 25 May 2026 06:49:10 +0000
ROA not before:           Mon 25 May 2026 06:44:10 +0000
ROA not after:            Mon 24 May 2027 06:49:10 +0000
asID:                     144350
IP address blocks:        240a:a6a4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:5d:bf:cd:de:18:c0:5c:e3:e6:e4:f6:3a:b2:89:81:01:2b:c1:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:44:10 2026 GMT
            Not After : May 24 06:49:10 2027 GMT
        Subject: CN=FF75D2995B4E6B16983868DAE98AB5CCDCD78B9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3a:2c:c1:a2:fd:61:db:01:29:f3:ff:93:9b:
                    d2:d8:46:34:46:0f:c8:0d:7e:89:74:5a:6c:3d:4a:
                    ef:c6:cb:5c:ee:cd:aa:43:16:b2:dd:52:03:7e:b2:
                    f1:87:3c:68:3e:f0:35:97:4d:0a:72:e9:82:98:62:
                    42:6f:91:fc:4e:64:28:e5:8c:0b:cc:cc:17:e2:56:
                    49:52:7e:f5:a2:5b:ce:8e:5b:f6:85:89:62:d5:d0:
                    b0:a2:d7:01:50:ff:6f:eb:fb:27:1c:33:e9:d8:d0:
                    e5:5b:70:8f:57:ff:0d:af:25:46:98:df:a1:c4:44:
                    90:7a:0a:97:7e:0b:ec:f3:52:c2:d1:56:85:72:2b:
                    28:59:92:dd:2b:dc:16:e6:d3:6f:e5:49:6b:50:e3:
                    3a:9b:5e:23:21:fc:85:63:61:51:fb:04:a8:42:d7:
                    a5:63:cf:8b:4c:3d:45:8c:9b:9e:b3:8e:65:2b:a3:
                    c8:69:08:13:9b:9f:34:61:39:44:89:e6:5d:35:48:
                    21:24:0c:7c:a4:65:cd:37:3a:64:29:07:f2:1a:f5:
                    04:57:21:03:e0:98:43:43:58:15:3d:b1:6c:d1:37:
                    95:1d:a2:f6:3c:10:31:8e:88:60:b7:de:33:97:78:
                    35:93:4c:ec:c2:93:d8:93:1f:79:b5:d5:c6:a3:32:
                    72:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:75:D2:99:5B:4E:6B:16:98:38:68:DA:E9:8A:B5:CC:DC:D7:8B:9C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144350.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a6a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:06:e1:9e:f2:44:68:f6:a9:ae:40:ab:00:a6:5f:cf:9d:30:
         6c:ef:1c:d1:18:bb:18:04:b7:f8:04:f6:5f:a8:ac:10:8a:ee:
         1a:b0:84:ee:a7:ea:67:0c:86:1c:f6:75:6a:ea:be:01:8a:9c:
         56:06:5f:04:43:35:1d:e6:a2:ba:38:25:13:53:20:04:2b:9c:
         90:6f:45:de:df:ee:0d:78:23:68:9b:09:a5:9b:7e:5e:29:97:
         e6:13:17:52:46:65:ab:ae:2c:08:f9:72:41:e7:e5:dd:3f:6d:
         6f:9f:ec:6c:a2:29:be:67:49:61:82:bd:d2:b3:c4:b3:ba:23:
         64:ae:24:a8:42:25:ca:5b:1c:dd:34:36:d3:b8:d0:15:a5:27:
         85:a0:30:17:9d:05:58:3b:70:f6:9f:65:c6:bb:7c:9b:26:c5:
         4f:e9:e8:77:95:f2:a1:f0:42:81:61:17:20:82:a9:6d:7a:6d:
         61:27:a4:92:8f:be:b1:22:4a:6a:51:7c:48:9d:fe:82:ff:aa:
         ef:9d:2f:32:98:d0:83:3c:49:e0:a3:c1:01:c8:78:67:43:ab:
         2f:35:b8:0f:c9:bc:27:06:58:0e:29:a5:a3:65:c5:a6:f4:d0:
         db:9c:0e:e4:d5:67:11:5f:db:78:51:54:af:b1:c7:5d:5c:82:
         6a:10:b0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----