Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144427.roa
File:                     AS144427.roa (raw, json)
Hash identifier:          HCTHM6wvX03jlQ0VaFCPjBK3cmRcT/socOybz2Parp4=
Subject key identifier:   B2:E1:9F:01:04:2F:E2:CE:F0:9F:2F:41:7F:5A:A0:A3:77:3D:ED:C3
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       03E20C72F28D4B630C58B8233289A15AB6AA516A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144427.roa
Signing time:             Mon 25 May 2026 01:50:57 +0000
ROA not before:           Mon 25 May 2026 01:45:57 +0000
ROA not after:            Mon 24 May 2027 01:50:57 +0000
asID:                     144427
IP address blocks:        240a:a6f1::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e2:0c:72:f2:8d:4b:63:0c:58:b8:23:32:89:a1:5a:b6:aa:51:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:45:57 2026 GMT
            Not After : May 24 01:50:57 2027 GMT
        Subject: CN=B2E19F01042FE2CEF09F2F417F5AA0A3773DEDC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9f:81:c1:1b:b1:ad:1d:9e:41:a5:a9:94:ad:
                    03:da:a0:eb:91:4f:1c:ac:86:d7:75:86:94:06:68:
                    73:50:95:36:6e:89:92:6e:38:56:91:b2:0a:fe:e4:
                    1b:49:8f:f3:86:c1:a8:fb:16:c5:de:33:4b:7a:65:
                    8e:9c:1a:dc:cc:c0:81:0d:8f:8a:ff:0c:79:a3:d7:
                    ee:86:a3:da:af:d5:0d:4e:f9:88:81:59:8a:67:00:
                    f4:65:69:13:f6:2d:1d:3a:0d:e8:32:90:05:31:9e:
                    fa:d5:44:8c:72:00:60:b8:96:e7:ec:8d:d7:94:15:
                    a4:8e:af:f7:99:9d:ea:ea:c4:91:b2:d5:4a:0a:5b:
                    54:0e:21:bf:26:9b:69:53:65:e9:b3:5a:e2:7b:cb:
                    70:a8:c3:3d:85:31:7a:48:8a:8e:5f:0b:e9:86:52:
                    8b:f9:2b:ac:1d:45:ca:46:98:62:a6:93:8f:11:a7:
                    b4:06:76:7d:ce:71:0b:cb:5c:2c:4c:5c:ef:73:31:
                    13:bb:d5:96:d3:d8:fc:c4:78:24:12:d1:03:5b:61:
                    f6:59:35:86:ac:55:32:7d:34:8e:2d:fe:62:11:5f:
                    2d:29:09:9c:54:9b:e2:ae:a2:cb:de:e1:27:d9:a1:
                    63:eb:61:4d:7c:bc:6a:3c:4b:c2:f7:88:6c:94:66:
                    a7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E1:9F:01:04:2F:E2:CE:F0:9F:2F:41:7F:5A:A0:A3:77:3D:ED:C3
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144427.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a6f1::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:57:e5:f0:ee:10:3f:d7:de:8b:51:47:88:df:97:57:98:c1:
         c7:c6:0d:89:42:ce:4a:e9:d0:62:cd:8c:ae:6f:8b:ad:ab:ff:
         54:3a:e7:a3:45:07:44:a9:80:da:0b:42:e9:39:96:fb:5d:29:
         5a:a2:23:95:2d:5e:d1:52:06:d9:6b:a9:b4:7e:e4:7c:a3:f6:
         59:ed:e6:72:d2:0e:b8:cd:60:d4:68:9b:7c:57:3a:ef:47:b0:
         45:b9:d0:e0:4f:ab:0c:26:eb:21:a6:cf:63:60:8c:4b:6b:db:
         99:3e:57:20:65:16:ff:75:aa:83:82:b4:24:62:2a:cf:bf:39:
         c9:b6:87:bc:0e:41:be:10:8f:1b:2f:f4:2d:aa:e2:2c:d5:9b:
         8d:57:4c:da:ac:bf:6e:74:ae:21:58:d7:09:bb:d9:6b:65:b1:
         62:6c:d2:0b:c9:e2:b1:cb:83:c0:56:24:b1:97:70:e1:fc:ad:
         82:75:5e:be:44:50:94:95:45:f2:8f:ec:ea:bd:e0:f9:d0:35:
         9c:77:35:ee:e6:2b:d4:3e:95:5b:c2:77:92:18:a6:2f:d1:5e:
         42:59:95:9d:e8:e2:37:e8:9a:2c:35:30:16:26:bb:c6:30:71:
         1e:03:5f:37:ad:0d:d0:41:20:b7:50:48:b6:93:47:3a:8d:b6:
         14:7a:62:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----