Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144476.roa
File:                     AS144476.roa (raw, json)
Hash identifier:          TvB/K+EmkRl9LtAjQ3MC0fj7qKef3Cbnocka/DjZm9c=
Subject key identifier:   39:CD:8B:09:F9:52:3C:3B:0F:92:FB:BF:19:D5:8E:30:F7:85:3D:4E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0E5B5501C92ADDDFDE7EE79A22683DEC2D77B9B5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144476.roa
Signing time:             Tue 26 May 2026 01:13:33 +0000
ROA not before:           Tue 26 May 2026 01:08:33 +0000
ROA not after:            Tue 25 May 2027 01:13:33 +0000
asID:                     144476
IP address blocks:        240a:a722::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:5b:55:01:c9:2a:dd:df:de:7e:e7:9a:22:68:3d:ec:2d:77:b9:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:08:33 2026 GMT
            Not After : May 25 01:13:33 2027 GMT
        Subject: CN=39CD8B09F9523C3B0F92FBBF19D58E30F7853D4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ce:56:17:ed:bf:d8:c3:3c:f0:31:52:e1:26:
                    36:92:28:f4:82:34:31:c5:3f:2a:55:2f:26:e8:cd:
                    b6:14:17:fd:8d:1d:9d:1f:78:33:23:59:a2:b9:dc:
                    e0:72:80:14:20:14:bf:6b:f6:6f:b6:70:c5:10:75:
                    fe:1e:4b:63:0a:d0:96:96:b5:8a:07:96:83:3e:ce:
                    0d:d1:22:b5:e8:63:93:d4:b2:4a:f6:5c:a3:85:4b:
                    d9:b5:e0:49:e4:08:47:1d:3c:bc:cc:73:6a:19:cf:
                    8e:93:8a:78:22:17:dc:0d:21:65:6a:3b:79:4f:c7:
                    f5:29:ea:88:93:f0:71:6f:6e:31:b5:71:54:2e:f2:
                    02:d8:d7:51:aa:6c:47:27:48:84:33:84:4c:cd:0a:
                    13:36:d3:fb:88:6c:2b:54:94:7e:74:e1:2b:a6:a3:
                    90:f3:df:4b:5c:f2:07:71:a9:3b:35:0f:4a:fe:8c:
                    e0:74:8c:e2:ae:00:6f:50:3d:e9:f2:7f:8a:27:07:
                    d0:52:14:83:63:52:47:ba:de:e1:ab:8e:12:1f:b8:
                    b3:1c:66:2e:19:ef:40:e4:00:b0:44:c9:40:56:09:
                    c2:ae:bf:dd:8f:20:91:95:bf:98:c9:32:1e:c8:82:
                    e9:12:18:d3:d3:4a:1a:c2:5a:39:94:91:44:e0:56:
                    c0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:CD:8B:09:F9:52:3C:3B:0F:92:FB:BF:19:D5:8E:30:F7:85:3D:4E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144476.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a722::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:ce:a4:51:66:9f:31:e6:c1:61:0e:77:c4:6e:b4:e4:31:ed:
         a6:c2:bd:a3:b6:83:02:cc:67:89:67:2f:07:13:1d:02:7d:83:
         10:75:29:57:a0:2d:8e:5d:bd:93:a5:e2:18:91:f0:e3:fa:17:
         d2:07:e3:de:2a:e9:cf:12:82:b7:d3:8e:01:50:30:14:79:9a:
         7d:cf:cf:4f:ef:c3:fc:fb:e9:00:70:00:b4:f0:36:38:c6:43:
         01:52:ed:44:3c:69:1d:ff:88:6e:da:93:1b:1a:06:5d:40:5b:
         9b:77:0f:fe:7e:8f:74:76:4a:0c:64:06:1c:de:28:53:8a:71:
         90:3d:45:b3:a6:06:12:53:4d:d3:60:5b:76:98:28:af:0b:7f:
         df:b0:82:88:cc:63:2b:d2:97:be:9b:c0:78:37:b3:69:4a:5e:
         b7:96:70:b3:93:78:52:76:0b:c6:d1:f6:8a:e1:23:1c:80:7c:
         b7:dd:9f:47:81:f4:d7:c0:19:f7:47:79:8e:59:26:c1:04:6c:
         d5:83:b1:ba:33:d2:03:42:02:3f:5f:80:4a:ff:99:0b:85:78:
         07:39:b7:18:b7:ad:7d:6f:89:5b:dd:78:33:6f:c6:01:ca:cb:
         14:63:dd:02:89:01:94:da:5c:34:69:6b:95:ec:ed:59:f1:bd:
         ea:50:40:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----