Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144455.roa
File:                     AS144455.roa (raw, json)
Hash identifier:          IGurjc7zAk+aJhaOV3Z/04U0EjkypNs4gm/KdnCe8OM=
Subject key identifier:   9D:68:B6:4A:11:6C:2F:EB:1F:CB:67:40:D9:90:D5:51:2F:61:5D:D2
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       42266771F63B21BC46B3F6A211B6BF0DB1E05669
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144455.roa
Signing time:             Fri 22 May 2026 06:58:15 +0000
ROA not before:           Fri 22 May 2026 06:53:15 +0000
ROA not after:            Fri 21 May 2027 06:58:15 +0000
asID:                     144455
IP address blocks:        240a:a70d::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:26:67:71:f6:3b:21:bc:46:b3:f6:a2:11:b6:bf:0d:b1:e0:56:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:15 2026 GMT
            Not After : May 21 06:58:15 2027 GMT
        Subject: CN=9D68B64A116C2FEB1FCB6740D990D5512F615DD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:27:9d:07:40:86:a0:0a:3f:77:ae:97:e9:23:
                    0b:6d:3d:9c:f4:12:96:fd:58:d3:0b:0e:76:fc:00:
                    19:14:9e:97:29:89:8b:5f:43:02:7f:51:a3:20:53:
                    96:b7:35:01:1b:cc:43:35:d4:d1:99:68:13:09:25:
                    6c:9b:30:53:38:37:48:32:cf:0e:e7:69:70:8b:04:
                    13:cc:80:cf:ee:24:ea:73:ec:23:92:48:8e:b1:cb:
                    5e:b8:65:ea:76:fe:04:54:68:a0:2d:74:a7:ee:a8:
                    0c:b9:82:bd:9b:63:64:81:9c:cb:68:21:b3:59:2f:
                    7c:26:6d:9d:18:47:f4:22:2a:f3:7b:f0:f1:5b:be:
                    9a:96:ef:ad:7e:d4:a8:98:6e:a8:a6:2d:45:63:9f:
                    51:bb:68:e8:57:8c:5a:56:4b:3a:08:e1:f1:03:30:
                    68:ce:d9:05:92:9b:cb:46:1e:68:50:79:40:c1:36:
                    6b:f4:c1:dd:67:e3:53:03:9e:a9:30:ff:af:d0:ba:
                    f9:b7:d5:6b:ff:a1:6c:a1:2f:08:f6:e6:fd:27:7c:
                    69:66:4b:1a:87:61:27:18:85:be:be:63:c5:2a:ad:
                    4a:77:a3:35:d6:ad:64:a2:f5:7f:fd:b5:a5:57:16:
                    4c:bb:c7:6e:14:7a:d9:9b:af:53:00:e6:7b:e6:55:
                    d4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:68:B6:4A:11:6C:2F:EB:1F:CB:67:40:D9:90:D5:51:2F:61:5D:D2
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144455.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a70d::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:c0:c1:26:10:5a:45:0d:5f:77:6e:0b:4e:3e:26:7f:6f:ea:
         6a:6c:1d:38:db:f9:f7:1f:fe:7f:6d:33:bc:d6:29:27:6e:66:
         7e:5d:46:51:4c:73:fd:f5:d2:e9:3a:b3:1f:93:b0:55:bd:d8:
         ac:4d:7d:56:a1:f8:c1:2e:3f:46:ce:60:c8:35:e9:de:55:d5:
         3b:db:8a:96:e2:78:c1:d7:8e:6e:eb:cb:f9:bf:69:3d:a8:60:
         be:b6:f2:a2:48:35:e1:b2:ec:3c:68:89:5c:6b:33:a7:f1:a2:
         8b:6b:1d:10:5d:a0:55:2f:f5:a8:a4:a3:ff:4a:5e:21:f6:d5:
         3f:d7:a8:0a:eb:02:b8:45:3c:45:9a:2a:4b:5f:70:43:a0:3c:
         74:62:d7:55:9c:81:9d:d6:af:b7:ee:7e:0a:c0:74:ea:cc:d3:
         b0:a2:d7:82:68:12:9a:31:34:97:fc:c3:6f:12:5d:85:31:0d:
         4f:eb:64:0a:3f:3e:de:e9:0e:8f:bf:5e:76:94:44:dc:b7:76:
         8d:f8:6a:8e:e8:59:dd:99:ed:79:a8:d6:1e:39:8b:80:09:85:
         82:b2:8f:57:b3:19:3e:29:ad:66:0d:f3:cd:a0:85:5a:c3:d1:
         79:85:87:90:17:35:7d:bf:26:4f:da:5c:f6:bc:64:60:80:d4:
         92:d7:aa:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----