Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144533.roa
File:                     AS144533.roa (raw, json)
Hash identifier:          uAkdCfmqd7xwtVeFuXk8I3u8ExLoifScFzZ1ibx9s/k=
Subject key identifier:   F9:B1:B0:86:65:5F:9B:ED:2F:CE:58:28:FE:45:C9:21:C6:DE:CF:90
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0B97EF3171C3FC4CFDF6F0E9078287D33715AB2F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144533.roa
Signing time:             Tue 26 May 2026 06:30:46 +0000
ROA not before:           Tue 26 May 2026 06:25:46 +0000
ROA not after:            Tue 25 May 2027 06:30:46 +0000
asID:                     144533
IP address blocks:        240a:a75b::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:97:ef:31:71:c3:fc:4c:fd:f6:f0:e9:07:82:87:d3:37:15:ab:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:46 2026 GMT
            Not After : May 25 06:30:46 2027 GMT
        Subject: CN=F9B1B086655F9BED2FCE5828FE45C921C6DECF90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1a:81:9b:73:d6:b1:54:d5:fd:f5:78:ec:d9:
                    09:28:d2:b4:67:db:16:a7:c4:58:ba:a5:1f:d6:87:
                    79:d1:eb:85:eb:3b:52:23:fb:38:0a:2e:05:b6:6f:
                    e5:04:37:5b:6a:bc:ea:d7:de:84:12:08:02:1b:80:
                    4a:a0:65:c7:de:b1:1a:f4:6e:55:d6:18:ba:4a:17:
                    bc:6d:33:d9:98:93:d5:0e:38:05:3d:9f:02:94:c9:
                    1f:c2:49:22:2e:e9:29:20:47:fd:d6:1d:1a:69:7a:
                    63:5a:db:fe:fc:b7:a4:66:27:c9:3f:9f:55:32:23:
                    be:3b:ca:f9:d8:23:d1:d8:43:1f:93:3e:ea:8f:bb:
                    cd:fe:f7:e2:be:d5:2e:3f:54:4d:c4:4a:e1:eb:96:
                    b8:0b:36:aa:36:f0:cb:fd:4f:7a:28:0f:09:ae:07:
                    f5:17:49:39:b5:1d:fc:fc:40:1a:4b:92:c1:96:14:
                    92:96:54:18:52:ae:9f:b2:b6:d6:15:a9:fe:1d:4d:
                    02:f7:de:96:83:8f:54:6c:6f:8b:8e:86:1e:51:dc:
                    2d:a1:db:24:43:db:c2:47:dc:50:9f:da:4b:54:c1:
                    64:87:dc:ac:85:28:38:c4:c0:8e:b7:e6:91:39:3f:
                    63:27:e5:e7:dd:5d:96:3e:d7:1e:3d:e8:68:72:ed:
                    54:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B1:B0:86:65:5F:9B:ED:2F:CE:58:28:FE:45:C9:21:C6:DE:CF:90
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a75b::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:0e:70:45:fb:a6:22:ca:83:af:cb:35:57:94:a9:5d:03:87:
         35:90:a2:11:2c:02:8c:4f:5d:1f:97:fa:50:c6:f1:55:e5:33:
         6c:15:14:e0:4f:3b:15:99:34:0c:1a:4d:de:d4:5b:07:2a:f8:
         db:0a:46:f5:16:31:9a:75:72:f5:19:df:22:c8:b7:66:3e:b6:
         f2:d4:4c:9d:f9:a8:54:17:83:a2:5a:6d:f6:33:e6:d8:5f:6b:
         7a:e2:09:2c:ab:9b:5a:e1:a7:52:1d:f9:59:ce:79:f2:13:c2:
         be:2b:e0:3a:6c:1b:84:8f:e4:56:77:e3:45:19:a5:a7:88:0a:
         e7:31:75:46:3c:4d:a1:11:e4:74:97:98:c4:a0:8c:d5:38:9c:
         b4:8d:a6:24:f7:e6:75:05:47:52:80:e6:97:35:36:5d:5b:8f:
         85:95:47:e6:d4:a0:d2:4a:49:6f:d8:6f:0a:b6:56:0e:3c:32:
         f7:58:a9:dc:7f:cc:b7:c2:82:22:87:7a:86:a5:b2:3f:f7:97:
         e1:f4:b2:d0:89:13:76:d0:1c:26:2a:24:18:86:a5:d8:b7:18:
         b1:e4:f9:75:6f:eb:bf:7b:2c:38:f1:cb:66:bd:42:e3:c9:f2:
         79:98:1d:f9:59:29:80:00:b1:40:f2:bd:4f:36:0e:92:d9:68:
         b9:9e:c9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----