Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144433.roa
File:                     AS144433.roa (raw, json)
Hash identifier:          XZkUxjiP7cJaqYd3hz94uRxVcYA8YEvM24S+ZYV1a8A=
Subject key identifier:   98:49:1B:4A:C0:7D:B8:DF:6C:1A:DC:00:15:9F:3B:7C:57:AF:F6:12
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6529927A888D68A26FC6B124D3862E3C98758FCE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144433.roa
Signing time:             Fri 22 May 2026 06:58:17 +0000
ROA not before:           Fri 22 May 2026 06:53:17 +0000
ROA not after:            Fri 21 May 2027 06:58:17 +0000
asID:                     144433
IP address blocks:        240a:a6f7::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:29:92:7a:88:8d:68:a2:6f:c6:b1:24:d3:86:2e:3c:98:75:8f:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:17 2026 GMT
            Not After : May 21 06:58:17 2027 GMT
        Subject: CN=98491B4AC07DB8DF6C1ADC00159F3B7C57AFF612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5d:f8:1d:42:23:0d:53:51:e4:e8:de:f9:b6:
                    d2:45:01:ec:a5:39:6d:51:bc:c6:f9:ef:36:28:ae:
                    64:d2:5e:a1:e2:4a:b3:3a:4e:54:65:ff:fd:74:de:
                    33:ae:d8:42:bd:8b:d0:81:8d:27:88:cd:e5:09:a7:
                    0c:71:dc:c2:63:2f:0e:4a:2a:f3:b1:e4:c6:e2:f3:
                    8e:ea:29:4a:6d:cf:1e:36:c7:ed:4b:49:6d:c7:58:
                    d2:19:65:49:2f:15:3b:89:89:db:a7:01:a3:f4:e2:
                    d6:e6:90:8b:eb:47:19:4d:1b:03:b9:01:de:6f:e9:
                    1f:5d:21:21:fe:2e:d5:13:05:6c:8a:16:38:32:91:
                    f5:4e:bd:54:9a:80:0f:a7:78:8c:97:62:af:e7:f0:
                    95:6a:af:7f:32:bf:5a:90:e3:6c:46:d9:3f:bb:11:
                    14:d9:a0:7f:4e:56:0d:38:d4:45:ad:1c:17:f1:0e:
                    66:f2:83:9a:37:e5:c0:c7:4d:bc:3b:71:58:e1:3a:
                    0f:4a:bf:b8:bc:73:1f:b0:a9:29:98:72:a1:33:59:
                    45:99:1e:4f:9b:f2:d9:cc:28:c7:88:52:19:fa:5b:
                    7d:c7:7b:76:c2:a1:45:8c:fe:08:25:ee:78:b2:30:
                    e9:e6:ce:fc:40:8b:b2:0a:e5:6d:ae:81:eb:55:a8:
                    09:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:49:1B:4A:C0:7D:B8:DF:6C:1A:DC:00:15:9F:3B:7C:57:AF:F6:12
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a6f7::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:47:ca:5c:a9:c5:ae:19:37:a8:17:53:b9:5f:89:67:21:88:
         bf:f8:47:4c:16:63:48:97:47:e9:89:ce:35:36:b2:f3:ae:b8:
         8c:c0:65:75:79:d0:a6:96:33:f2:33:b9:48:4e:53:aa:32:e5:
         5f:c5:49:28:c9:dc:74:f4:28:ae:b4:2b:a0:eb:a5:16:29:32:
         de:32:6e:40:6c:cd:17:52:03:75:b7:33:de:41:f0:37:d3:6f:
         a3:d6:8b:7b:32:b4:c7:32:be:66:7b:09:11:2f:e5:8d:f0:50:
         02:0b:7e:bc:2f:c3:22:c8:11:39:0f:9c:70:73:92:4e:cd:cd:
         9f:eb:bb:6d:d0:eb:c5:4d:31:49:fe:de:b0:7e:cf:b7:b4:74:
         98:67:3a:25:89:1d:fc:34:d7:78:d8:8f:9c:50:92:2f:44:1f:
         31:26:b3:39:56:44:fc:0e:3a:b4:5f:0f:13:f3:13:6e:23:92:
         77:10:c4:9b:9a:5c:f9:5c:ef:81:d0:35:97:27:74:27:2b:2c:
         9c:f5:db:1f:d2:f0:f4:bf:c4:8e:67:9f:74:cc:f8:f1:8a:ee:
         2c:75:2b:b6:8f:ae:07:e6:17:e6:8a:9c:cd:7c:b7:51:73:43:
         f6:64:f3:b0:17:ea:c0:2f:d5:a5:2c:5f:7d:d4:92:38:1c:2a:
         20:e1:b8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----