Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144464.roa
File:                     AS144464.roa (raw, json)
Hash identifier:          c3BcEPQ2TJtKRrD4m+PNmVO/SK0lhDrK1zQ4PLgZ21M=
Subject key identifier:   94:49:E7:39:73:3A:D6:0B:E7:4C:50:0F:2B:52:33:25:70:A2:C9:6C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7F117EE8FC73357EC1F689CB779815535B919AC6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144464.roa
Signing time:             Fri 22 May 2026 07:40:44 +0000
ROA not before:           Fri 22 May 2026 07:35:44 +0000
ROA not after:            Fri 21 May 2027 07:40:44 +0000
asID:                     144464
IP address blocks:        240a:a716::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:11:7e:e8:fc:73:35:7e:c1:f6:89:cb:77:98:15:53:5b:91:9a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:35:44 2026 GMT
            Not After : May 21 07:40:44 2027 GMT
        Subject: CN=9449E739733AD60BE74C500F2B52332570A2C96C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:93:e6:ed:6e:4a:6b:fb:4c:17:43:20:c7:c4:
                    0e:d5:05:6a:d7:4b:80:93:e1:ed:36:cf:5a:21:d9:
                    10:e0:93:90:f6:fe:ef:37:65:a5:54:fb:d8:fa:b6:
                    fb:a9:f9:3c:6e:21:4c:f6:d6:07:8a:a7:52:c6:a1:
                    1d:1b:b7:e3:74:1a:58:3c:4a:11:2e:c9:74:2f:eb:
                    6c:b2:39:83:3a:89:df:6c:88:2d:a2:3f:9a:a7:d8:
                    4d:e6:e2:0f:4b:cb:11:83:22:14:aa:86:fd:50:e1:
                    34:80:69:fd:1b:5d:d0:ca:d0:23:59:6a:5d:a9:fb:
                    b7:2b:e0:d5:c7:22:14:2d:fd:a9:d7:9d:e5:2c:1b:
                    2b:90:39:e7:dc:2b:9a:18:23:ad:f5:65:cd:d1:70:
                    a1:86:4e:47:41:9e:82:c0:0e:91:d2:2d:fa:40:08:
                    db:00:a3:9d:63:6d:8e:ba:75:24:f8:58:88:73:bc:
                    0c:b7:46:94:6c:13:a5:e4:a0:d2:6c:5f:63:47:98:
                    a4:ec:61:73:d0:05:f0:2d:d1:46:b1:49:ef:85:b7:
                    ae:4e:9f:8f:4b:87:f9:48:82:77:c4:d7:b5:03:ee:
                    67:14:fe:d6:10:9c:fe:4f:63:61:cc:de:32:05:75:
                    0e:31:be:db:51:48:e0:5e:6e:51:1a:26:88:2c:e2:
                    85:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:49:E7:39:73:3A:D6:0B:E7:4C:50:0F:2B:52:33:25:70:A2:C9:6C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144464.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a716::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:ae:79:75:68:36:67:05:27:26:21:b7:22:40:04:42:67:9a:
         3d:26:b5:49:00:20:78:f5:8d:24:0c:15:ca:bb:ee:c3:a9:09:
         3b:bc:2b:bf:2c:44:3b:4b:8c:7d:c0:7d:ed:ea:e9:fb:a9:1f:
         de:d7:ed:0d:5f:50:5d:bd:28:c0:ee:0e:91:da:f2:15:f4:47:
         b4:ac:7c:ab:43:a8:1f:68:cc:31:6a:a4:30:d9:f3:48:41:54:
         29:29:1b:90:a2:8a:f7:88:8c:74:ce:b7:86:a7:ca:6d:ab:5e:
         88:44:33:63:f9:b9:a4:0a:cd:11:ff:bd:cb:97:96:c6:35:1c:
         ee:e9:3a:69:60:38:37:03:f1:9c:32:64:6c:5f:1f:09:aa:09:
         d2:4e:ef:c8:e8:4c:2a:de:9c:a5:48:cd:08:f5:db:3d:f5:4c:
         cd:fa:46:98:f5:cd:bf:75:e2:1d:ea:a1:27:87:a1:13:25:19:
         26:80:f0:ae:8b:02:7a:d3:08:53:2e:97:f2:70:02:e7:9e:c1:
         46:8b:f6:2d:28:62:31:28:7f:22:2c:a1:1d:2a:94:44:7c:d7:
         d6:53:5c:e0:59:d8:10:0a:7c:19:07:9c:47:6a:ec:f3:26:55:
         21:38:65:e9:d9:0a:1c:93:89:70:00:be:9d:18:1f:40:7a:d5:
         32:cf:54:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----