Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144485.roa
File:                     AS144485.roa (raw, json)
Hash identifier:          riSlHy/f1MqtC0NhranW0wrKnITfO2T1Zm9mGm6CpIE=
Subject key identifier:   93:AA:6E:B9:F0:4B:6E:51:93:F6:BD:9F:46:3D:AF:C9:94:BA:24:1A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4A1A4AE783F197D01E0DC2FABC30FF8575F60BFA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144485.roa
Signing time:             Fri 22 May 2026 07:32:17 +0000
ROA not before:           Fri 22 May 2026 07:27:17 +0000
ROA not after:            Fri 21 May 2027 07:32:17 +0000
asID:                     144485
IP address blocks:        240a:a72b::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:1a:4a:e7:83:f1:97:d0:1e:0d:c2:fa:bc:30:ff:85:75:f6:0b:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:17 2026 GMT
            Not After : May 21 07:32:17 2027 GMT
        Subject: CN=93AA6EB9F04B6E5193F6BD9F463DAFC994BA241A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:34:7f:7e:40:0f:43:da:1a:3b:e1:5f:42:7e:
                    f4:9b:78:f8:39:72:cc:03:d1:6a:74:1a:50:e2:3b:
                    bf:44:ab:30:2b:b0:4c:3e:22:89:6a:0f:08:59:e3:
                    9a:79:c1:a2:3b:23:b6:05:ae:36:d8:f0:61:20:93:
                    eb:b5:7a:1d:f3:c1:cd:8e:b1:2e:ac:76:28:31:02:
                    f5:c7:15:ae:94:70:5c:7f:c1:23:fd:b4:cf:5c:5b:
                    fa:fa:bf:7c:bb:d8:f9:d5:82:43:5c:2a:a1:8b:43:
                    2a:f9:44:d7:0c:2c:20:89:9f:3f:08:96:60:92:ad:
                    a2:7a:c5:d6:12:89:6f:6c:ff:ba:fd:f0:09:27:90:
                    d9:f8:ca:92:66:2a:ec:fd:b2:f2:b8:46:55:25:e7:
                    7b:0a:47:bf:40:7c:91:e2:aa:5b:f9:f6:25:c8:e5:
                    1f:6f:3d:1f:71:72:be:c0:c6:c4:8b:06:fe:ed:08:
                    dd:ec:6b:5a:b2:0f:b3:36:22:93:3c:26:6c:9e:b2:
                    bd:18:b1:73:9b:fe:81:0d:38:2b:97:90:8f:2e:ad:
                    e5:8b:16:fb:5b:92:15:a4:a4:f8:90:de:c8:7c:14:
                    87:1f:79:5f:af:6b:05:ac:14:a3:88:ff:e3:e8:d0:
                    98:d4:1c:49:ea:c2:6d:72:d9:aa:88:dc:98:97:61:
                    23:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AA:6E:B9:F0:4B:6E:51:93:F6:BD:9F:46:3D:AF:C9:94:BA:24:1A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144485.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a72b::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:7f:76:de:ae:fd:b9:e9:ab:49:02:65:10:ef:41:6d:2c:58:
         9c:5d:d4:7d:d8:2e:71:a3:8e:48:1d:c3:8d:aa:58:dd:1a:0a:
         16:33:15:ef:e1:fe:72:9e:90:1f:7d:59:97:13:49:b5:34:b6:
         cb:f3:d2:d3:34:bc:42:39:12:bf:f2:40:97:d0:94:ec:cb:e2:
         9b:28:30:03:89:a5:df:03:e1:8a:f1:21:09:3b:d6:79:e4:0c:
         aa:c3:6c:21:16:a8:8c:bd:ae:0d:42:aa:e6:0f:c4:94:2f:61:
         f8:ce:b6:7b:ef:bc:ef:02:ad:ca:14:a1:e8:ed:a0:cd:40:49:
         dd:2d:4b:b1:89:e2:01:99:9b:0c:4f:7d:c3:d9:46:92:5c:45:
         8b:86:1a:be:ce:a9:f6:51:a3:78:3c:26:53:26:17:e4:ba:cb:
         8c:9c:0c:22:9b:e1:b5:a8:03:dd:aa:de:59:8d:50:f2:f5:33:
         93:06:6e:e5:80:9e:20:e2:25:b0:f6:fd:ce:92:ff:85:88:fc:
         71:d8:a3:5d:59:d6:92:c7:04:96:03:54:21:87:08:23:cd:19:
         72:2d:88:45:cd:51:a5:fb:2a:3b:4e:de:27:6a:ec:61:63:d8:
         87:ad:5e:9e:7b:2d:7b:cf:50:83:64:77:d2:04:a1:0d:9a:1f:
         ce:ae:aa:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----