Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144511.roa
File:                     AS144511.roa (raw, json)
Hash identifier:          o7QfVIM0rEi1TdwPnZKnH9hOlC49SOMz4mPXVXlTTJY=
Subject key identifier:   E6:14:24:C4:F9:88:79:1F:9F:F5:07:6E:A0:15:36:3F:C1:A9:2D:F4
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1720CD1AF93C4D131B9105D2140D4C0015B8F349
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144511.roa
Signing time:             Mon 25 May 2026 01:50:55 +0000
ROA not before:           Mon 25 May 2026 01:45:55 +0000
ROA not after:            Mon 24 May 2027 01:50:55 +0000
asID:                     144511
IP address blocks:        240a:a745::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:20:cd:1a:f9:3c:4d:13:1b:91:05:d2:14:0d:4c:00:15:b8:f3:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:45:55 2026 GMT
            Not After : May 24 01:50:55 2027 GMT
        Subject: CN=E61424C4F988791F9FF5076EA015363FC1A92DF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cf:4f:e5:41:37:65:3f:11:d9:d3:a0:32:03:
                    79:77:46:cb:e5:64:c6:93:27:72:b0:23:b0:00:22:
                    d7:59:af:fc:b3:ef:5d:cf:95:f2:3f:b5:62:16:23:
                    80:1d:b0:7a:1d:41:3a:49:0b:13:5e:53:78:49:3d:
                    86:01:50:e2:2b:dc:35:f4:2f:cb:c2:b1:dc:5a:59:
                    c5:ab:2f:3b:f6:80:c0:1e:f0:85:fe:7e:6e:a8:f4:
                    60:e7:a4:d4:30:3c:4a:b6:f9:28:d7:3f:d0:0c:bb:
                    83:0c:95:a4:84:bf:82:3a:9b:29:71:7d:c3:fa:d9:
                    6b:ec:e7:f5:2b:8a:d2:26:61:b1:d6:e7:1c:29:79:
                    fc:37:f9:37:af:f7:ec:88:77:27:74:76:82:bb:b4:
                    52:13:75:b8:47:10:d2:8e:03:c2:5c:97:07:46:05:
                    c6:2d:ae:38:f8:88:80:33:65:10:be:e2:f5:ee:a8:
                    b0:fe:58:7c:7c:7d:b4:bf:d5:b4:ab:72:33:a0:92:
                    6b:70:7b:12:5d:e7:6b:8e:29:ae:78:06:6a:1b:9c:
                    c5:85:fe:b2:72:07:aa:ee:4c:6f:bc:c6:28:62:d3:
                    a6:1c:88:bf:87:e6:18:3c:03:20:8a:f0:26:3f:bf:
                    17:7b:fe:39:5a:f6:ae:5b:8d:1a:d9:c9:c3:67:6f:
                    b4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:14:24:C4:F9:88:79:1F:9F:F5:07:6E:A0:15:36:3F:C1:A9:2D:F4
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144511.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a745::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:3e:88:35:db:3a:97:29:a7:88:65:98:d8:25:c7:81:1f:18:
         16:3f:3b:a2:1b:b6:c2:6f:1f:52:1a:5a:e7:33:7a:ea:13:08:
         d4:14:dc:4f:06:3b:71:23:65:60:9e:dc:c0:71:46:bf:a6:bc:
         ac:19:1b:43:b7:8b:4c:b2:20:a0:86:52:16:7a:d9:3e:35:31:
         75:af:0e:49:c4:cf:96:1e:6a:75:fd:31:a7:e7:e9:96:85:5b:
         a1:b7:c6:48:6b:ae:be:3f:2c:9f:f0:d1:e6:8e:82:a1:9b:17:
         0c:a8:c3:31:dc:96:fb:fc:6d:42:f9:56:2c:f8:74:c9:8f:68:
         2e:e7:fa:53:00:ae:e5:79:b9:a2:35:a9:02:ed:1d:40:71:24:
         29:0d:87:ee:28:b4:5a:cf:fd:96:f0:6f:cf:f1:2c:1b:ca:21:
         07:e2:93:70:29:c3:d2:8a:a0:73:31:ed:64:53:b0:ae:12:0c:
         13:84:bb:a2:1b:7e:29:27:45:8a:11:8c:94:a9:0b:81:70:a4:
         b9:19:63:f8:7b:e6:03:d3:da:0e:97:51:d1:17:f6:eb:47:bf:
         0d:d0:0a:f5:76:ad:fc:5c:59:58:6d:51:54:b8:bd:35:34:69:
         4f:b2:41:5a:c5:bb:c5:cd:53:f8:12:26:2b:d4:1b:7c:24:cd:
         fe:97:8d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----