Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144480.roa
File:                     AS144480.roa (raw, json)
Hash identifier:          Yr7gpTzJUZ+TS1zzl/X6j1JtpLfN4YcCHF7hlw0HohY=
Subject key identifier:   15:06:3D:30:46:A8:AC:3C:8B:77:9F:60:7A:18:D9:F8:6E:32:33:81
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2DB68CF1928D007C82D888D89F8BCC8F2B492DE3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144480.roa
Signing time:             Mon 25 May 2026 02:22:11 +0000
ROA not before:           Mon 25 May 2026 02:17:11 +0000
ROA not after:            Mon 24 May 2027 02:22:11 +0000
asID:                     144480
IP address blocks:        240a:a726::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:b6:8c:f1:92:8d:00:7c:82:d8:88:d8:9f:8b:cc:8f:2b:49:2d:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 02:17:11 2026 GMT
            Not After : May 24 02:22:11 2027 GMT
        Subject: CN=15063D3046A8AC3C8B779F607A18D9F86E323381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7a:6f:b4:f0:8c:b1:a9:e1:33:b4:d3:41:d5:
                    4f:ee:6f:db:fa:54:09:13:28:15:de:f6:d6:57:97:
                    42:82:f6:bd:87:f2:d5:7b:cc:63:d9:c9:52:c4:b4:
                    b6:c4:4d:39:1e:d8:fd:0d:aa:7f:36:9f:75:d6:9f:
                    1d:60:be:a9:4d:07:a2:fc:3e:cd:6d:5a:cc:47:57:
                    ee:ca:36:4b:24:29:76:f0:c3:f0:fe:a9:f1:ae:1b:
                    a1:2b:bf:50:f1:68:8a:fe:3f:84:6e:8c:89:c4:40:
                    40:b5:3f:ae:b6:0f:c0:82:54:21:de:dc:5e:21:08:
                    8b:73:77:69:d7:5a:c7:89:f7:fd:4c:7f:b7:8b:74:
                    d7:f3:a2:c7:34:25:a8:86:8c:d4:f1:c5:e3:4a:cd:
                    16:3c:cb:b4:12:79:15:f5:67:3c:58:c6:8e:6e:65:
                    4e:69:c0:b0:8e:4c:6d:e8:9f:00:48:21:55:82:57:
                    c3:bf:65:99:f6:4c:38:94:37:77:ec:e3:4f:ef:05:
                    8b:f2:2a:3f:d5:8e:ef:83:f2:3b:a9:fd:03:db:0b:
                    e5:7a:3e:10:7a:46:a5:29:7e:7d:04:09:c7:4b:8f:
                    14:22:12:ca:45:8e:b2:e2:ea:44:30:a0:29:fa:09:
                    ed:8d:c7:28:1c:65:16:68:d8:eb:a5:bb:2b:b8:be:
                    f5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:06:3D:30:46:A8:AC:3C:8B:77:9F:60:7A:18:D9:F8:6E:32:33:81
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144480.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a726::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:97:bf:32:c4:f4:8e:f4:3d:eb:ef:a9:b0:59:2d:be:8b:e7:
         83:4a:00:cd:87:54:a7:59:2d:df:83:73:10:6f:29:b1:fc:f9:
         54:25:ee:a4:e3:e5:f3:85:88:f6:c0:a3:d3:ab:76:17:01:d2:
         db:5e:3f:39:dd:38:9a:9d:51:62:6a:51:f4:38:d7:10:09:21:
         bd:ca:2f:81:fe:f5:1f:bf:53:db:5e:c6:60:db:a8:3b:77:d5:
         53:70:d6:22:35:58:52:bd:8c:cf:99:b0:6c:a4:f9:85:1f:98:
         c3:cf:fc:dc:4b:89:ef:b8:c1:26:9f:f7:a5:9e:2a:bf:c3:af:
         c3:99:40:c0:29:17:fb:45:ad:f8:7f:e9:4b:6c:ec:64:85:5e:
         a0:de:41:4b:88:42:3d:b4:68:b3:b1:f2:f9:35:cb:70:0a:32:
         28:8a:23:15:27:cf:e4:03:d1:3f:5c:98:08:24:fe:d1:f1:cb:
         a1:5c:1f:55:c2:94:8e:d1:c8:36:de:6a:3d:07:17:91:e2:c9:
         fd:5b:36:70:c2:45:28:2d:d4:e1:ba:ba:d1:4e:b0:90:96:7c:
         cc:2c:a7:9c:e7:47:5a:e1:5a:13:a5:e5:67:57:d9:d2:f6:fe:
         cb:15:d7:17:b6:f7:7d:f4:2d:e4:17:4d:2f:34:89:dc:2e:93:
         71:57:ae:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----