Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144445.roa
File:                     AS144445.roa (raw, json)
Hash identifier:          MQo23wX0DWxwmkYmR16zDrL+YtqKen661RSMXUhhId0=
Subject key identifier:   3E:E2:5B:C4:19:1B:8A:E1:A7:51:8F:73:D6:AF:04:CD:A6:A0:A8:40
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       684477E33DEEB4873B733B299648C87A3D104921
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144445.roa
Signing time:             Tue 26 May 2026 03:16:41 +0000
ROA not before:           Tue 26 May 2026 03:11:41 +0000
ROA not after:            Tue 25 May 2027 03:16:41 +0000
asID:                     144445
IP address blocks:        240a:a703::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:44:77:e3:3d:ee:b4:87:3b:73:3b:29:96:48:c8:7a:3d:10:49:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:11:41 2026 GMT
            Not After : May 25 03:16:41 2027 GMT
        Subject: CN=3EE25BC4191B8AE1A7518F73D6AF04CDA6A0A840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9b:83:a6:1c:25:c2:0c:ad:56:9f:21:bb:96:
                    0f:0b:b8:a0:a0:9c:27:60:8c:4c:5c:48:e6:46:80:
                    fa:db:b9:e1:68:9c:b5:2d:6f:ad:91:01:e6:56:74:
                    ff:dd:59:7e:ae:1a:ce:20:dd:ac:e7:77:98:82:7a:
                    0f:04:47:79:6c:41:4a:9b:4b:60:4f:10:f1:73:30:
                    45:b4:d8:74:aa:58:25:5b:69:cf:40:41:43:62:74:
                    fa:d1:81:f0:df:00:f4:57:67:2c:36:2f:65:c3:7c:
                    b6:03:2a:31:90:cc:5f:d7:ce:b7:35:88:a1:0c:5d:
                    0c:2f:89:98:47:77:f3:3c:60:4a:4f:de:4d:59:e3:
                    4b:2b:00:5a:ac:b7:a7:d6:03:0e:4e:36:93:38:17:
                    3e:ec:a2:16:14:64:ab:07:fa:62:f7:62:ce:75:5f:
                    4e:36:b5:5c:5e:7d:76:bf:f1:02:22:4f:61:fc:96:
                    a8:3b:ba:4a:ea:b1:89:f2:b0:ed:72:7a:54:ce:50:
                    99:53:21:a7:8c:31:e0:d2:9e:a3:d0:b9:b4:8b:2a:
                    a1:11:94:bc:f5:d7:68:04:86:40:03:d3:ea:2f:71:
                    db:eb:8c:9b:b2:07:5d:ac:bb:dd:ac:21:5d:98:ca:
                    c6:47:d1:b6:5e:d7:88:e0:3f:e6:13:db:a9:57:17:
                    66:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E2:5B:C4:19:1B:8A:E1:A7:51:8F:73:D6:AF:04:CD:A6:A0:A8:40
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144445.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a703::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:90:4e:fc:23:50:b4:76:e9:20:3a:59:5c:91:50:7f:db:b9:
         6f:94:df:59:7e:9e:96:67:90:c6:8e:73:cd:0a:c7:28:44:24:
         91:47:61:01:4d:ce:72:ce:4a:df:55:ff:c4:6b:04:13:a9:1f:
         e0:73:ab:33:7a:c9:f7:e2:41:5a:dd:f0:d6:57:92:b5:c4:89:
         69:9c:59:76:e6:8a:67:65:01:00:d4:ed:2f:35:5c:96:e6:21:
         54:24:d8:f4:e2:93:af:48:1d:19:99:16:bd:13:9b:0d:27:ba:
         3a:5d:fd:a2:e7:90:4f:6f:47:80:a2:2d:b7:30:f7:40:97:a2:
         d9:e1:3d:75:a2:4a:d0:cd:18:b0:84:76:43:23:bc:3e:de:24:
         f8:72:12:6c:bd:73:60:0f:a8:83:eb:e0:58:9b:26:84:14:c9:
         dc:6f:c5:05:e8:be:6b:42:f3:d5:1a:e7:f7:be:ed:da:89:c8:
         43:bc:23:af:fe:1b:03:8b:14:fd:6f:26:f8:e8:9e:89:ef:5a:
         cf:ec:87:d1:d8:89:03:1d:61:13:e8:6a:76:a8:2d:f6:3f:37:
         42:6b:64:6f:22:c3:51:bd:72:15:0e:21:b8:68:8d:e3:04:81:
         2b:f1:28:bd:95:6c:dd:e5:55:3d:7d:86:d3:92:bc:4a:30:27:
         c6:0d:bb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----