Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144463.roa
File:                     AS144463.roa (raw, json)
Hash identifier:          opIXFWKO2igEiIB8Vh2wLCD1Hk4Nckj+OtAkDjLr9ig=
Subject key identifier:   1F:FE:9A:CD:51:3D:8D:E2:9C:82:6E:81:5A:0F:E1:E3:9F:EC:EC:E4
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       34C5F4180CBB3EE6794B9674DDAE631351E180F2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144463.roa
Signing time:             Fri 22 May 2026 07:41:07 +0000
ROA not before:           Fri 22 May 2026 07:36:07 +0000
ROA not after:            Fri 21 May 2027 07:41:07 +0000
asID:                     144463
IP address blocks:        240a:a715::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:c5:f4:18:0c:bb:3e:e6:79:4b:96:74:dd:ae:63:13:51:e1:80:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:36:07 2026 GMT
            Not After : May 21 07:41:07 2027 GMT
        Subject: CN=1FFE9ACD513D8DE29C826E815A0FE1E39FECECE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:97:06:c4:33:85:04:25:4c:3d:4e:c9:c7:11:
                    9e:ee:cd:0b:5f:b0:5f:18:64:f3:42:d6:ae:61:50:
                    01:0a:4f:f9:89:a8:c5:95:cc:44:33:d7:fa:6b:02:
                    0b:77:5e:51:71:94:13:a3:1c:de:f9:d0:b7:48:bc:
                    f7:58:40:b3:fc:a8:d2:2f:0b:b6:bc:fe:69:4f:c9:
                    a0:58:7e:97:f6:88:2b:44:8d:08:7b:c4:52:fc:3e:
                    15:bc:be:f6:ac:ec:5e:9f:20:70:e3:8b:44:d4:97:
                    07:47:b6:12:21:5d:59:06:07:e9:a5:6b:1c:5d:0a:
                    9e:bb:b3:91:b1:6f:e5:78:bf:54:68:b9:a1:08:f9:
                    92:fb:00:48:b5:d0:41:c7:8d:e9:11:c8:47:b0:57:
                    df:f7:c6:3f:d5:43:e7:df:e5:c0:31:6b:33:50:94:
                    35:b8:36:fd:c5:b1:34:18:a3:2b:57:48:5b:be:af:
                    75:f0:23:d2:05:db:53:d5:d9:ec:48:52:20:27:50:
                    f5:c4:32:e3:94:df:5b:d0:c7:de:1e:37:35:7f:1a:
                    65:f0:82:1b:38:50:da:76:37:eb:2a:01:35:73:4d:
                    0f:24:8c:a7:d9:2a:66:74:9c:4e:72:58:e3:e7:43:
                    4b:07:e5:02:9a:91:49:a9:ec:37:78:8d:c9:50:ac:
                    7d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:FE:9A:CD:51:3D:8D:E2:9C:82:6E:81:5A:0F:E1:E3:9F:EC:EC:E4
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144463.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a715::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:d0:82:d3:e5:4d:4f:0b:03:5c:ca:92:8d:4d:82:60:93:4d:
         64:3a:ca:82:13:30:cf:e9:fa:d2:94:5c:f4:a8:1b:f6:37:46:
         66:37:97:b8:1c:75:0d:ae:10:88:a3:96:e1:ae:08:69:76:79:
         d3:97:c9:1b:84:a9:77:0e:ad:48:d2:4c:60:cd:33:02:d9:7f:
         61:0c:e7:24:42:a8:6a:7f:1d:7d:e3:a2:22:51:b1:0f:8a:e9:
         1a:cb:05:10:a5:f1:ab:98:ea:ab:f9:1b:b7:55:4c:2f:b0:41:
         cc:a2:b7:3f:6d:1b:d5:b5:51:2a:d0:70:30:87:43:36:6f:11:
         69:7e:57:c2:eb:df:4c:e4:07:f3:5b:ff:51:e2:bf:47:fd:b0:
         62:65:ca:5c:5a:6b:e5:1f:24:9f:ba:51:45:33:60:62:7b:04:
         77:4e:03:f7:57:9f:2f:49:8d:8c:c1:f3:36:48:f0:c5:1a:d0:
         58:00:f1:e6:02:9c:84:71:ec:05:1a:9f:e4:20:64:77:36:34:
         01:3a:bf:93:c4:0a:8c:a3:3f:eb:fe:10:a1:32:7b:6a:3e:af:
         f1:c1:26:cd:6b:40:c6:90:59:b3:20:d1:d3:a7:ec:f0:aa:48:
         7c:90:34:0a:49:38:5b:02:d5:7b:7c:ab:e1:ab:82:3e:73:97:
         ba:bb:19:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----