Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144419.roa
File:                     AS144419.roa (raw, json)
Hash identifier:          0bGawJlor3rL++q6Vs2yOwuzk5wHCN4xWXS11/iGyoU=
Subject key identifier:   80:52:0D:91:B8:16:8E:65:9F:DD:91:CA:93:29:C8:2F:9B:E5:B2:D0
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       45BCE66BA9FB57CB81C53F5F4E3904005C93280C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144419.roa
Signing time:             Mon 25 May 2026 01:38:09 +0000
ROA not before:           Mon 25 May 2026 01:33:09 +0000
ROA not after:            Mon 24 May 2027 01:38:09 +0000
asID:                     144419
IP address blocks:        240a:a6e9::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:bc:e6:6b:a9:fb:57:cb:81:c5:3f:5f:4e:39:04:00:5c:93:28:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:09 2026 GMT
            Not After : May 24 01:38:09 2027 GMT
        Subject: CN=80520D91B8168E659FDD91CA9329C82F9BE5B2D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0f:ee:e4:26:ce:31:03:dc:39:0b:39:80:f2:
                    c5:ff:05:d4:21:10:f5:d6:95:10:b4:10:4f:55:a4:
                    b9:df:d1:c8:81:19:93:f3:8e:23:b9:e7:19:9a:f4:
                    28:c0:db:42:5e:32:87:16:98:25:2e:21:fa:5c:fe:
                    ed:9a:61:de:b7:7f:25:1f:93:6a:15:2b:54:ca:cc:
                    d1:ff:d7:72:a9:23:4d:ad:47:f8:55:34:27:16:47:
                    a9:45:1b:92:59:65:06:a8:ef:8c:be:04:ff:e5:41:
                    58:b9:84:5f:63:f3:73:46:0b:c2:50:5a:10:5b:e5:
                    47:28:d6:c6:2a:0e:08:aa:ad:a7:68:16:83:91:90:
                    ef:7c:92:d4:f0:12:96:94:ca:f6:11:83:0d:ac:ff:
                    f9:76:56:0a:dc:6a:ef:89:87:19:55:8d:a1:f1:5a:
                    e2:a7:f0:f6:7f:a8:c3:65:83:75:23:08:e7:9a:ea:
                    c4:11:70:04:ac:9e:76:54:d5:b8:4b:0f:ab:c7:5c:
                    c3:b5:f4:a2:5a:89:17:f6:40:92:a7:ca:f8:3f:84:
                    fd:31:56:17:0f:33:a3:34:a7:7a:ba:61:cf:4c:08:
                    60:2e:2d:8e:73:bd:39:22:be:07:12:bb:80:f9:f3:
                    84:82:05:46:e0:c1:cf:a0:a0:6e:ab:a3:a9:25:6b:
                    3c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:52:0D:91:B8:16:8E:65:9F:DD:91:CA:93:29:C8:2F:9B:E5:B2:D0
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144419.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a6e9::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:0d:45:1d:cb:54:c4:ce:85:65:a3:69:f9:50:22:9d:f8:92:
         8c:a8:25:3e:4a:e1:50:cc:eb:1a:17:92:51:ac:55:9e:80:5d:
         75:ed:bb:cb:ab:b6:ef:90:0c:c0:39:f1:72:ce:cd:ed:ac:46:
         12:f7:7f:e7:8b:5e:b2:26:f5:ad:4c:3d:2a:cf:c4:20:b4:f0:
         26:a5:fa:8c:2c:7a:66:23:de:25:be:7a:2c:b2:f2:9b:ae:e8:
         c1:bf:4f:f3:aa:3f:e9:51:c7:34:7f:cd:ef:fe:f3:5e:94:3f:
         fa:bf:73:7e:0c:57:7b:1f:c7:a0:bc:db:cc:9c:bb:fc:7a:18:
         27:e6:f5:30:08:01:90:22:bd:04:13:57:08:93:ad:19:9c:ca:
         ef:65:05:bb:89:f4:ea:af:41:79:43:6d:3c:c4:9c:33:1b:cc:
         8f:79:35:e5:a0:86:cf:2d:3a:2a:fe:8f:62:1b:93:5a:84:b4:
         cd:80:cb:b2:49:84:69:38:91:3e:f7:3b:dc:4c:87:59:42:d5:
         8e:06:34:a3:e6:ed:87:5c:1a:05:c1:52:75:38:c5:96:31:bd:
         8f:3a:85:a4:54:73:e1:e9:db:38:2a:05:b3:16:cf:43:31:59:
         21:83:ae:39:f4:ec:6f:a3:25:88:b7:74:16:bf:8e:61:1b:67:
         9f:b3:4d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----