Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144361.roa
File:                     AS144361.roa (raw, json)
Hash identifier:          duT+bjT2HUzRaFNsaN9pYwCGWNVQ5aTFvcvW/HsWHzg=
Subject key identifier:   79:A3:DC:0A:33:33:8B:25:D9:26:D8:FD:91:8A:46:BB:7C:CF:F4:A6
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2CE81DF324F4CEC6EE274F37C91C4438C80F82BF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144361.roa
Signing time:             Mon 25 May 2026 01:38:33 +0000
ROA not before:           Mon 25 May 2026 01:33:33 +0000
ROA not after:            Mon 24 May 2027 01:38:33 +0000
asID:                     144361
IP address blocks:        240a:a6af::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:e8:1d:f3:24:f4:ce:c6:ee:27:4f:37:c9:1c:44:38:c8:0f:82:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:33 2026 GMT
            Not After : May 24 01:38:33 2027 GMT
        Subject: CN=79A3DC0A33338B25D926D8FD918A46BB7CCFF4A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c9:ed:24:0c:56:33:bd:c4:94:ca:c6:38:52:
                    b0:06:b9:02:2b:93:36:ca:b1:7b:dd:26:16:c3:3b:
                    3d:97:e4:df:53:db:c6:f4:34:59:b4:02:25:f4:bd:
                    32:28:50:bf:3b:fe:a5:fa:a7:18:d8:54:f7:5f:a2:
                    80:7e:4a:a7:74:94:2e:b9:5f:79:cb:70:ee:2d:6d:
                    c4:45:cf:f8:9a:9e:c4:a6:8d:8d:d3:35:8c:cb:8e:
                    db:a2:db:3f:7f:28:de:42:ce:eb:c6:fb:40:d0:06:
                    26:fa:eb:44:9c:bc:0e:83:db:18:28:b9:23:a5:62:
                    b3:1d:b8:64:fb:7f:74:0c:35:ee:0f:d0:ae:bd:5f:
                    70:4c:41:6b:4d:6d:24:d1:6e:89:e8:da:73:f5:1a:
                    8c:a0:fa:1b:f1:b1:16:6c:5d:c6:50:97:11:bb:42:
                    a5:bd:ed:fa:5f:02:71:83:d6:3e:9b:c1:66:c8:ef:
                    fd:1b:27:92:a9:7c:8a:e6:7d:aa:a6:ca:bc:fa:e5:
                    7b:06:bf:37:39:1a:ee:47:ba:b1:83:11:f8:d3:b2:
                    03:77:0b:4c:47:1c:15:02:89:0f:cb:08:4a:9c:50:
                    11:ce:0f:8d:68:6a:4a:da:a4:af:de:91:aa:53:d5:
                    0e:2e:cd:68:73:60:f5:11:b2:3e:73:5e:81:ab:4b:
                    43:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A3:DC:0A:33:33:8B:25:D9:26:D8:FD:91:8A:46:BB:7C:CF:F4:A6
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144361.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a6af::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:45:fe:31:4f:cb:6b:21:a9:16:95:d3:96:9e:d7:eb:ee:ae:
         c0:ca:0f:80:87:e7:5e:86:58:22:c7:ba:37:8f:58:53:89:6f:
         4a:f6:f9:b0:88:49:d7:26:08:57:0b:b6:60:d7:bb:ae:10:ff:
         94:a6:b8:b3:25:21:c5:a2:17:a0:cc:d3:8a:22:99:b7:13:f4:
         af:c7:02:34:a6:81:3a:ad:5d:bd:c5:e9:a2:4f:10:b8:52:fd:
         be:4c:ff:2f:65:06:5a:a9:84:bb:08:26:dc:3b:cb:9b:47:ab:
         ed:86:36:ca:21:9f:cb:60:fd:fa:7c:35:86:f5:24:38:51:70:
         9c:d4:17:3c:16:88:d5:da:fd:a4:10:cf:6b:dc:60:d7:cb:ff:
         e5:36:f5:34:a8:53:f5:ea:de:b0:ca:cf:68:77:14:f9:3d:10:
         a7:1f:13:e1:e2:24:92:6d:2f:41:c3:81:ba:35:4b:8f:a8:55:
         b9:20:9e:91:b5:19:80:c5:89:d8:76:ae:af:6b:0b:17:5e:d0:
         37:f7:6b:22:8c:b6:d4:c5:53:e1:c0:0e:3d:c4:aa:55:3d:bf:
         70:f5:04:b2:44:d1:c8:ac:f3:ef:d3:cd:d8:1e:ce:c5:a2:cd:
         70:d8:0c:a9:c2:dc:72:da:76:e7:7f:a0:ca:41:33:f9:4b:cb:
         fb:8d:53:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----