Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144451.roa
File:                     AS144451.roa (raw, json)
Hash identifier:          f/buXwTbnmM8FmZcQJfFugW5K8bjfRqxXoP0+YwTvz4=
Subject key identifier:   21:AB:CF:E3:76:E3:C8:6D:31:45:F4:D2:DA:21:6F:1C:08:10:73:BA
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       30DFAC3B697A89F9EBA3C7C0D9B5D476244BCDC1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144451.roa
Signing time:             Mon 25 May 2026 01:38:22 +0000
ROA not before:           Mon 25 May 2026 01:33:22 +0000
ROA not after:            Mon 24 May 2027 01:38:22 +0000
asID:                     144451
IP address blocks:        240a:a709::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:df:ac:3b:69:7a:89:f9:eb:a3:c7:c0:d9:b5:d4:76:24:4b:cd:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:22 2026 GMT
            Not After : May 24 01:38:22 2027 GMT
        Subject: CN=21ABCFE376E3C86D3145F4D2DA216F1C081073BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:66:8d:93:e0:5c:f9:da:9d:82:3e:29:68:01:
                    b4:1d:9c:9a:6d:c7:35:f5:c0:a0:52:62:7e:2e:53:
                    91:54:83:79:6d:0e:ad:5d:76:9f:ea:b9:12:85:e6:
                    7e:16:ea:da:9e:0e:52:0a:87:fb:9e:76:70:03:b6:
                    4b:17:26:00:c5:c1:da:91:e7:e9:96:ea:61:13:25:
                    03:72:10:8d:c9:af:bc:94:e8:7c:f4:19:43:45:92:
                    ea:1c:e3:6a:e3:e9:bc:22:b1:8c:8b:e6:f0:fe:11:
                    02:af:38:11:52:78:1e:e6:9c:0d:c9:19:1a:30:25:
                    41:38:80:ec:1f:83:d0:86:9b:6e:53:65:32:c1:59:
                    71:30:13:04:66:dc:7a:c6:4a:4e:ad:07:2f:8d:cf:
                    11:48:bb:90:fa:0a:27:67:91:4a:f3:47:b8:48:64:
                    fd:40:61:fe:00:62:99:51:e7:17:c6:03:65:87:4a:
                    a0:85:59:4e:96:3a:11:e2:5a:55:ac:da:cf:37:ed:
                    7e:cf:04:3b:0f:52:8b:32:36:6b:d5:96:3b:a5:77:
                    81:3d:b9:d8:44:09:29:61:24:01:f5:71:6a:2b:ff:
                    38:a0:a4:da:81:4e:71:a5:86:1e:de:b1:48:6f:8b:
                    2f:02:c7:c9:fe:c4:3f:ca:75:0d:5d:02:4f:d6:f0:
                    20:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:AB:CF:E3:76:E3:C8:6D:31:45:F4:D2:DA:21:6F:1C:08:10:73:BA
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144451.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a709::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:33:e9:d2:7c:8b:68:cf:76:80:87:85:b5:e8:df:75:dc:7d:
         8a:87:4e:34:6d:05:d9:f1:25:c7:a5:7e:99:35:7b:1d:e7:ac:
         eb:4d:86:5c:94:03:c5:28:e0:ec:58:90:bb:2c:58:2a:bd:24:
         d1:5d:95:ab:fe:1e:f3:15:5d:2a:b3:1a:f9:ca:64:18:b9:dd:
         8c:3d:40:3c:61:26:19:8f:0f:98:cb:f3:bb:a7:44:90:b4:8c:
         d9:08:bd:1b:6e:22:43:52:27:3e:a2:43:eb:9b:14:5a:ff:af:
         39:66:99:62:20:f2:25:7a:6d:06:8a:6d:f4:33:8a:43:de:e9:
         64:72:6e:b2:86:e7:2a:f7:40:5e:78:85:3c:60:6b:01:d9:a1:
         9e:6d:23:54:61:32:0e:33:63:b6:f0:ac:9b:a6:a3:a7:36:9f:
         71:5c:2c:31:ae:8c:50:c3:c7:9f:e3:16:9a:45:a5:36:d0:4c:
         27:da:63:9f:9a:9e:41:51:7c:37:f7:d2:60:99:29:53:b2:c1:
         8f:9e:05:dd:21:4e:c3:b1:53:03:8c:6f:46:07:f8:fd:85:6d:
         47:e2:b2:bb:20:dd:cc:9b:55:d0:dd:13:78:34:31:8f:91:b1:
         d7:df:1e:77:6e:a1:23:f0:88:56:69:c0:03:01:47:5c:97:07:
         67:36:e8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----