Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144488.roa
File:                     AS144488.roa (raw, json)
Hash identifier:          8whOcdejx2IWn1tGfGFDWecEMQkh8lhFXRLncricoNM=
Subject key identifier:   8F:BE:60:85:98:D8:A4:5F:A7:B1:ED:5F:18:CE:72:F9:DA:7B:2F:66
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3FD7E22820FCF872B49A53E9556A5BF4664ED7D2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144488.roa
Signing time:             Tue 26 May 2026 03:16:35 +0000
ROA not before:           Tue 26 May 2026 03:11:35 +0000
ROA not after:            Tue 25 May 2027 03:16:35 +0000
asID:                     144488
IP address blocks:        240a:a72e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:d7:e2:28:20:fc:f8:72:b4:9a:53:e9:55:6a:5b:f4:66:4e:d7:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:11:35 2026 GMT
            Not After : May 25 03:16:35 2027 GMT
        Subject: CN=8FBE608598D8A45FA7B1ED5F18CE72F9DA7B2F66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:34:98:93:cd:0c:58:63:6e:cb:b9:6f:72:2e:
                    4d:ee:4d:64:cb:58:54:fa:49:a2:f5:80:1a:8b:da:
                    78:02:06:c6:ac:4d:72:39:5e:37:22:3b:73:d1:ab:
                    ca:0e:90:43:2d:c1:67:78:f9:fb:8a:c4:31:22:1f:
                    98:d8:9f:66:31:87:51:cb:c7:0a:ce:fe:13:b6:c1:
                    af:5d:93:2e:84:d6:99:d0:27:e2:48:9a:88:75:05:
                    7a:3e:01:4d:bd:fd:ef:c2:92:b8:1b:28:56:ce:31:
                    a2:62:57:86:c7:cb:b3:3f:de:23:16:99:10:17:d0:
                    28:c3:e3:f0:6e:aa:79:fb:f1:09:08:91:d9:f1:84:
                    ee:ac:55:fc:c9:a5:6d:df:d4:45:88:af:3c:2e:de:
                    53:f1:78:61:c3:b7:07:59:8b:51:c1:e4:52:91:0d:
                    7a:13:9a:bb:9f:93:19:17:98:ca:3b:06:6a:81:3f:
                    27:28:6e:b0:29:41:28:ef:2a:b0:1b:6a:f8:06:bf:
                    10:ff:f7:f6:dc:3d:42:da:14:4d:fc:3d:ee:63:10:
                    29:fb:88:4b:38:85:ad:eb:e8:f9:c8:6e:6e:9b:8e:
                    c6:ae:95:ce:81:d1:36:92:23:93:c0:3a:89:21:86:
                    09:bd:8b:4c:99:3a:f1:46:a8:45:26:b2:6f:df:4d:
                    fa:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:BE:60:85:98:D8:A4:5F:A7:B1:ED:5F:18:CE:72:F9:DA:7B:2F:66
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144488.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a72e::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:30:42:9a:a6:36:b1:aa:d2:86:a5:f6:34:42:dd:20:4f:7d:
         38:71:26:15:c4:49:45:b8:62:55:aa:bf:c4:44:30:e7:74:ec:
         30:cf:4f:04:a3:14:14:77:b8:25:fa:e3:3d:7d:f1:07:f4:ee:
         b3:fb:99:19:22:c6:30:cc:31:e6:69:f6:60:80:fb:fc:16:21:
         27:83:28:64:75:85:63:c4:72:17:23:b2:25:91:10:3f:8d:ca:
         79:ca:74:b1:bf:7f:cf:5f:f7:5d:46:89:15:fa:dc:88:c5:73:
         ac:be:ad:a6:fe:52:e9:a9:e1:1b:18:16:9e:90:65:cd:2e:4f:
         ef:96:fe:6d:e2:12:ec:8b:9f:9c:54:5b:20:e5:4e:74:07:2f:
         39:eb:c3:4d:d9:05:72:95:66:75:20:6e:75:3b:b0:94:e3:c1:
         3e:ae:a9:f4:ce:57:c6:04:ef:75:7b:72:f6:86:ea:a7:69:a2:
         f5:89:3f:ac:02:04:c8:ff:3c:81:f2:53:d5:5f:ff:7e:eb:4c:
         b8:3a:a0:22:1c:5b:4b:6a:fd:c9:d7:e9:69:70:60:9d:eb:f3:
         ed:6f:d9:fd:b0:84:3b:4f:39:de:91:24:28:91:d1:24:d1:ec:
         26:c8:63:77:1d:d4:50:57:a3:96:3c:6c:3a:eb:94:e0:3f:81:
         45:a1:4c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----