Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144473.roa
File:                     AS144473.roa (raw, json)
Hash identifier:          1Q26NHX0+LEtLfBm5JhIuvLBMmrscQGRN4FN/RPTlSw=
Subject key identifier:   42:E5:27:E6:C9:8F:C1:3A:24:C5:6D:ED:59:B4:66:1F:E1:53:19:3E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1027D5117C25DCBFA2748A1201332757FB7C2A24
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144473.roa
Signing time:             Fri 22 May 2026 02:48:04 +0000
ROA not before:           Fri 22 May 2026 02:43:04 +0000
ROA not after:            Fri 21 May 2027 02:48:04 +0000
asID:                     144473
IP address blocks:        240a:a71f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:27:d5:11:7c:25:dc:bf:a2:74:8a:12:01:33:27:57:fb:7c:2a:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:43:04 2026 GMT
            Not After : May 21 02:48:04 2027 GMT
        Subject: CN=42E527E6C98FC13A24C56DED59B4661FE153193E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e2:bd:4a:99:c0:7a:54:64:d5:48:5e:85:4d:
                    6b:f1:e3:95:1b:7d:bd:44:8a:5d:01:96:8a:fd:06:
                    7e:15:ab:35:3a:69:6a:6c:a7:b3:4c:96:42:02:20:
                    83:1b:d8:b1:10:09:a9:c9:4c:3e:5f:74:16:ba:e7:
                    d4:56:ff:62:dd:8a:02:56:f3:65:56:0b:59:a5:af:
                    3c:86:52:bf:2e:41:7a:8a:65:37:fd:b3:d5:f5:e4:
                    7b:ca:6d:2d:18:13:43:d9:b0:fd:ae:88:aa:d0:ae:
                    9a:aa:47:3b:91:49:71:bd:f0:8d:39:a6:3e:a9:d0:
                    e2:48:5c:87:48:87:7d:c2:39:a1:e7:f2:2b:39:d8:
                    fc:71:d1:13:fe:dc:97:30:e9:f2:db:e5:18:ff:29:
                    87:9d:d0:94:6a:b9:81:c4:41:18:ef:5a:c7:e2:13:
                    39:bd:03:f1:04:68:c0:b2:3d:56:45:b3:b1:42:d2:
                    f7:b3:10:81:55:4b:e5:c4:7a:31:cd:ba:09:e5:4d:
                    78:f4:fc:1f:4d:c0:f3:c7:31:d8:8d:67:82:30:53:
                    c5:04:91:8a:0a:61:2b:27:88:b6:d8:45:2d:03:2a:
                    ec:b1:a5:e0:53:ba:b1:c2:ee:14:da:ae:57:d0:50:
                    ed:34:35:e8:cc:a0:9d:03:1b:f5:ed:4c:c3:da:a4:
                    5f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E5:27:E6:C9:8F:C1:3A:24:C5:6D:ED:59:B4:66:1F:E1:53:19:3E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144473.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a71f::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:44:8d:36:f6:42:63:bf:17:80:eb:48:5c:ab:65:b8:03:94:
         5d:f5:a2:72:e0:5a:71:a4:5c:05:5a:5a:86:67:32:11:62:79:
         22:cf:47:de:28:69:92:0d:df:26:d4:6a:49:90:6f:ac:ce:b6:
         46:9c:83:1a:11:2b:74:ad:29:d1:e4:c0:30:1d:48:5a:ef:9d:
         7e:6a:d7:d9:b7:a8:d3:51:80:fc:89:d8:02:4a:b6:7c:37:d9:
         f0:53:9e:42:4c:9e:60:b4:c5:f5:30:fc:e0:27:56:3b:35:f4:
         03:6b:aa:1b:ae:9d:d6:d9:e4:a1:83:04:2a:8a:25:e6:8a:7b:
         97:0e:37:74:ac:50:71:86:c1:44:f9:3c:4a:15:41:46:59:48:
         f8:3e:7f:5d:0b:5a:39:1f:b4:f6:46:4a:78:bd:f6:b2:bf:9e:
         8b:ed:b3:8a:77:c4:0a:e4:ee:78:56:c2:7f:98:11:3a:bb:88:
         52:5d:50:6f:72:61:7e:4d:5e:85:a9:cc:1d:d8:3a:9e:d0:9b:
         44:ee:30:36:12:89:25:a2:3f:58:6b:8c:ab:cd:b3:50:21:ed:
         9a:e2:7f:8b:4b:41:a9:1b:8c:0e:e2:71:54:cd:75:46:ae:3d:
         70:13:92:f2:9e:c2:1a:e5:a9:32:06:de:f9:4d:b7:2c:cd:b5:
         b6:5f:f4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----