Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144506.roa
File:                     AS144506.roa (raw, json)
Hash identifier:          oTmoQYhpjiiK7/dN3TPQ3uZtYN5BFEznJ+9v/LtA5uM=
Subject key identifier:   8C:8C:CB:78:85:DD:8F:87:E9:9B:5A:64:D4:7F:59:15:07:55:58:AA
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       13623F02FC4FAA353A830801A965954779376205
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144506.roa
Signing time:             Fri 22 May 2026 06:58:41 +0000
ROA not before:           Fri 22 May 2026 06:53:41 +0000
ROA not after:            Fri 21 May 2027 06:58:41 +0000
asID:                     144506
IP address blocks:        240a:a740::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:62:3f:02:fc:4f:aa:35:3a:83:08:01:a9:65:95:47:79:37:62:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:41 2026 GMT
            Not After : May 21 06:58:41 2027 GMT
        Subject: CN=8C8CCB7885DD8F87E99B5A64D47F5915075558AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:08:b5:8c:91:36:aa:ee:c1:8f:c6:76:8d:77:
                    61:bf:f2:76:1f:14:ea:e5:ed:59:c8:c1:a3:e9:50:
                    9c:27:ac:f4:7c:f6:85:3a:60:ee:4f:aa:dd:c7:ba:
                    38:68:6b:8d:dd:6c:20:60:12:de:cb:5f:6d:1a:b5:
                    2e:80:05:02:ce:11:ca:7c:d5:dc:8c:ff:4c:26:25:
                    e6:94:28:70:08:33:fd:c0:f6:ec:d4:af:0a:15:c5:
                    03:b7:74:e2:0c:49:ad:99:d4:bf:7f:31:0d:ab:61:
                    6b:41:a9:7e:84:a2:e0:ec:cd:4f:9a:42:fc:8b:b0:
                    d8:cc:73:cd:65:66:77:8a:10:8c:ac:fd:e3:4a:e0:
                    9b:db:57:a0:47:70:02:85:d2:c2:67:99:67:5b:02:
                    57:8f:1e:02:9f:c1:6d:73:6c:81:da:09:1e:66:34:
                    ef:af:4e:c1:c8:31:83:b3:19:ee:09:38:fd:11:24:
                    49:f5:87:fe:49:cf:2a:54:da:d2:3f:93:d8:79:74:
                    91:09:f0:19:cb:ce:59:da:db:b9:f4:af:e2:07:61:
                    84:60:5f:bd:ad:85:48:bb:28:13:8c:b4:dd:36:3a:
                    f9:b2:2e:5c:3c:87:ba:77:43:2a:d3:14:f6:2c:25:
                    3f:a8:7e:0a:17:75:8f:0c:a9:ad:78:1e:4d:af:a0:
                    b5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8C:CB:78:85:DD:8F:87:E9:9B:5A:64:D4:7F:59:15:07:55:58:AA
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144506.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a740::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:27:e6:c2:7b:0c:b1:c7:10:2e:59:e5:d1:42:51:44:6e:bf:
         0f:d6:74:56:c9:9f:3a:11:0e:8d:c5:79:d3:cd:12:8a:b1:d5:
         e2:2c:fd:f8:6a:42:30:66:3d:b1:14:1d:63:d4:c0:e8:63:ca:
         a1:0c:11:13:8a:8a:d0:75:fc:a3:de:18:03:9f:b4:ab:9e:3a:
         f4:a9:47:c5:bf:de:04:53:87:cd:6c:f7:9d:f6:33:a3:53:9b:
         81:02:d4:48:47:e1:71:62:b0:ca:0a:ff:be:3a:ad:9f:2b:77:
         0f:e8:eb:32:39:cf:89:bb:86:2b:2e:4c:f4:b7:4e:a8:52:ca:
         58:59:86:50:09:6f:8e:2b:92:dc:74:ea:2d:09:36:82:9f:6e:
         08:c7:a2:2b:b0:5b:8b:57:e4:18:00:c2:ac:e3:36:f3:08:0e:
         97:4d:f6:20:16:09:91:11:46:7b:9a:69:23:78:ca:61:1f:76:
         ce:83:3e:37:85:8b:19:be:99:eb:65:77:a0:15:4d:5c:ea:c2:
         4b:e7:33:1a:72:92:91:ce:1a:cd:7a:d9:28:33:b6:18:e4:59:
         ab:ff:67:59:b5:4e:21:11:f7:b0:60:18:19:99:b0:a9:c1:60:
         ab:82:a3:3d:2f:d9:44:4d:44:97:23:5c:d7:e3:b8:60:c5:6a:
         8b:23:f8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----