Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144425.roa
File:                     AS144425.roa (raw, json)
Hash identifier:          kJJvJmnSLOSiPnkvb+Y2ZRL3oOZ9RedM83iyHKTsNb4=
Subject key identifier:   43:46:21:DF:A8:92:AA:BD:F3:AE:A5:95:DC:5B:76:FC:F3:42:C8:31
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       54223671ED6A7C2728DA546D58D7A4FCB4415E11
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144425.roa
Signing time:             Fri 22 May 2026 07:32:26 +0000
ROA not before:           Fri 22 May 2026 07:27:26 +0000
ROA not after:            Fri 21 May 2027 07:32:26 +0000
asID:                     144425
IP address blocks:        240a:a6ef::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:22:36:71:ed:6a:7c:27:28:da:54:6d:58:d7:a4:fc:b4:41:5e:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:26 2026 GMT
            Not After : May 21 07:32:26 2027 GMT
        Subject: CN=434621DFA892AABDF3AEA595DC5B76FCF342C831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cb:ee:5a:a6:28:41:00:04:f2:a4:5a:9a:82:
                    f4:36:58:e3:2e:22:20:0f:2e:d5:71:4b:f5:58:8e:
                    1c:65:48:1b:a0:cc:97:d4:b1:bf:2f:99:94:6a:26:
                    f7:29:ad:f6:97:e8:19:63:7d:41:cf:64:0a:2a:1a:
                    7c:42:96:67:e1:74:c3:76:2f:83:7e:00:dc:72:95:
                    cb:32:42:00:e5:4f:91:6b:81:04:9c:38:d4:e2:ba:
                    0e:a1:ec:a1:b5:d9:e2:0a:e4:ea:3d:ed:5b:11:f9:
                    a8:4b:f9:0f:91:76:0d:ea:59:7b:4d:6e:16:77:d9:
                    37:b0:f4:b9:be:c7:f3:33:f7:0e:61:16:60:18:8a:
                    5c:02:5a:b7:ef:ec:85:fa:20:6f:f1:64:81:8d:c6:
                    ae:20:52:b5:2d:af:b3:16:b3:ae:ad:99:21:73:a6:
                    4a:7b:02:5b:bb:a5:dc:52:02:5f:35:d1:eb:b3:93:
                    4f:0f:92:34:36:86:f3:0f:20:bf:39:28:4f:ed:ff:
                    ce:30:54:b7:a9:5d:39:d8:b5:b1:83:6d:67:b6:0b:
                    a5:07:5a:f5:fe:4a:90:20:5f:1d:7a:e1:5c:e2:fa:
                    50:eb:97:03:b1:9c:8d:9b:ae:81:59:fe:bb:0b:8e:
                    4d:3d:95:34:54:f4:1e:e9:0e:f8:16:e5:da:8e:2d:
                    93:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:46:21:DF:A8:92:AA:BD:F3:AE:A5:95:DC:5B:76:FC:F3:42:C8:31
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144425.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a6ef::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:a5:66:99:14:03:6e:4d:f5:ed:d4:8b:9f:31:e6:57:85:be:
         7c:ca:ff:85:d9:87:7e:f9:a3:17:dd:8a:e4:93:4f:5a:df:59:
         ea:05:75:82:e4:39:eb:7b:3d:ba:c9:c9:e1:a1:1b:7c:38:5d:
         4c:88:ab:17:d8:b5:27:ce:60:96:d7:3c:24:ff:e1:ab:68:fa:
         66:47:43:ae:99:09:b0:1b:a1:1d:3c:6a:7a:ab:da:83:f6:f9:
         cf:1a:84:a0:46:56:a4:29:e1:53:d4:cc:fa:d0:f0:fb:33:8e:
         37:3c:e2:7e:3f:4a:45:eb:c7:2a:07:94:7a:8c:7c:44:f1:02:
         4b:a7:04:62:42:55:54:4f:a5:3a:5d:43:0a:af:c2:d3:58:7c:
         bd:66:f1:b9:35:f4:9f:0e:f5:08:f0:06:93:49:61:cd:1c:63:
         da:e5:c7:2a:c5:ed:b5:9b:e1:d1:e1:7c:83:b4:de:32:af:61:
         85:e7:1c:db:5d:ca:ae:3f:87:03:3e:10:d5:1c:90:a0:70:13:
         67:78:f3:0e:6e:67:a2:0b:48:3c:9c:a9:27:9b:fd:5f:68:69:
         f7:8c:8b:98:c5:15:d1:82:68:29:e1:ce:7c:02:79:29:20:36:
         a9:70:3a:a4:f6:bd:50:39:9b:91:41:7f:b5:17:91:4d:73:9a:
         6b:ab:4a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----