Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144417.roa
File:                     AS144417.roa (raw, json)
Hash identifier:          VXzF/1MB0JKYaDEwFTCz4rIgoB1qKnvB66nnY/zMvII=
Subject key identifier:   63:25:5F:15:2F:FC:42:36:E5:B6:00:84:E3:28:00:08:48:14:8F:B3
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       723FD915CD6CDBF096B8DF2F540AF2353F71D928
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144417.roa
Signing time:             Tue 26 May 2026 03:16:43 +0000
ROA not before:           Tue 26 May 2026 03:11:43 +0000
ROA not after:            Tue 25 May 2027 03:16:43 +0000
asID:                     144417
IP address blocks:        240a:a6e7::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:3f:d9:15:cd:6c:db:f0:96:b8:df:2f:54:0a:f2:35:3f:71:d9:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:11:43 2026 GMT
            Not After : May 25 03:16:43 2027 GMT
        Subject: CN=63255F152FFC4236E5B60084E328000848148FB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ca:81:77:95:60:63:99:15:11:f2:34:4e:09:
                    52:4e:43:e7:22:27:32:77:ca:f5:aa:83:a7:c6:f4:
                    36:57:8e:f4:a3:2e:df:bc:12:4b:22:a0:b3:ae:5c:
                    2a:1b:3e:ad:3c:d9:88:fb:51:d6:63:2f:d7:77:96:
                    e6:8b:fa:11:8b:ec:a0:4f:a4:31:c4:bd:ff:98:07:
                    34:13:41:ed:51:a6:0f:63:97:52:8f:ac:d4:c7:84:
                    7c:3c:eb:10:57:42:64:9e:29:10:9d:19:1f:b9:37:
                    08:ec:d3:61:f7:68:44:8c:ea:1e:c5:3b:a8:d5:de:
                    d8:ac:aa:88:ed:74:ba:25:ad:33:78:a3:b2:5b:39:
                    e3:9f:d2:4e:3f:7b:a6:77:b7:32:72:df:6f:4b:f9:
                    e0:39:11:ad:17:b8:e2:d9:01:f2:7b:d8:75:65:19:
                    21:39:f7:64:32:39:75:38:2b:56:09:f0:b9:48:f9:
                    79:b2:d9:1f:97:1a:c2:87:48:01:39:71:48:3b:50:
                    bc:6b:d6:ee:28:8e:91:09:c5:08:63:ca:e2:c0:c2:
                    8f:d0:a6:83:6a:79:d5:07:d5:8f:90:ea:17:cc:9b:
                    22:b9:31:9b:aa:78:4d:34:12:cd:f8:aa:2b:c4:c5:
                    bf:26:19:d0:bb:3e:9d:13:2e:e3:a1:b4:76:2f:fa:
                    b7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:25:5F:15:2F:FC:42:36:E5:B6:00:84:E3:28:00:08:48:14:8F:B3
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144417.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a6e7::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:a4:73:3f:5d:1a:26:6d:c1:42:c2:e0:fd:b4:74:91:84:a8:
         92:63:bc:aa:ca:9f:4d:16:12:9d:ad:6c:a2:fc:37:47:59:c1:
         e5:9f:5c:1f:68:8b:a9:5d:4e:ec:cc:8e:17:16:6a:1e:46:71:
         20:29:4c:4f:0d:b6:a9:3b:14:b8:22:ee:ea:52:c8:da:91:04:
         8f:34:6a:1f:82:f0:ca:b1:8b:01:72:35:72:26:f5:3f:f9:45:
         c7:ad:19:65:22:6a:68:f3:e4:75:6b:12:bf:5a:df:49:19:a4:
         b2:e6:84:2a:59:e0:e7:a3:b9:50:b5:b7:32:fd:11:64:4d:68:
         bc:fa:e6:43:1e:4c:ed:2a:41:f9:80:fa:fe:9d:46:34:47:aa:
         06:f7:d4:e4:e2:ff:00:41:a1:28:da:d7:25:e9:d7:ee:4b:ea:
         19:93:bc:8f:12:c2:72:e7:b2:e4:ae:51:62:cb:7c:0c:35:83:
         a2:74:60:0a:5b:db:1f:eb:33:2c:9a:fd:1c:80:45:9d:bf:71:
         1c:75:ad:f0:a8:f0:b7:03:d8:b7:5e:3e:1e:ba:51:23:d7:71:
         01:1e:d0:60:82:5d:d4:70:cc:c8:b1:c7:50:3e:c1:8b:f5:0b:
         ad:66:b5:13:d5:a7:2a:cb:e7:3a:77:0e:93:26:22:78:1f:b7:
         bf:e3:89:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----