Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144556.roa
File:                     AS144556.roa (raw, json)
Hash identifier:          sIg8aDC41AcM7efNaURH1BAwF/JJrTyOYQWA/FYtZjk=
Subject key identifier:   2A:3B:2B:8C:A3:C7:9E:78:2A:ED:81:93:5A:34:B9:BA:23:40:63:C8
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7DEBF0B5F033F6DF51001DF341AE10A7CD4665E7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144556.roa
Signing time:             Fri 22 May 2026 07:32:16 +0000
ROA not before:           Fri 22 May 2026 07:27:16 +0000
ROA not after:            Fri 21 May 2027 07:32:16 +0000
asID:                     144556
IP address blocks:        240a:a772::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:eb:f0:b5:f0:33:f6:df:51:00:1d:f3:41:ae:10:a7:cd:46:65:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:16 2026 GMT
            Not After : May 21 07:32:16 2027 GMT
        Subject: CN=2A3B2B8CA3C79E782AED81935A34B9BA234063C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:12:dd:07:e1:27:fb:0d:d9:5b:33:93:e4:46:
                    a6:23:ed:f9:34:45:54:49:e1:c7:43:e1:00:b0:88:
                    a0:6b:54:98:b4:73:60:57:03:64:11:77:1c:a0:32:
                    6c:e2:17:0d:73:8c:b6:8e:85:d4:02:87:b3:44:d0:
                    20:a0:a7:15:f9:ef:2a:25:e0:b6:ed:a4:94:25:3b:
                    da:f5:c9:4e:94:a2:e2:c0:b2:41:10:64:b4:b8:21:
                    7c:21:d6:22:70:be:18:f6:7d:97:c3:8b:96:98:5f:
                    18:3c:36:b1:5a:12:3b:f3:0c:1c:40:68:60:6c:70:
                    b3:19:68:40:4d:09:fc:3a:28:f8:5e:42:cd:96:68:
                    25:26:3d:d1:c5:92:29:6d:36:cc:df:14:36:36:a4:
                    34:72:c4:fe:df:49:f3:65:c3:d5:76:15:27:2d:a2:
                    4a:c5:ba:87:84:da:a8:b6:32:0d:14:f3:2b:ff:a4:
                    ee:52:7d:18:a6:f9:2e:77:51:e6:d4:46:c9:ba:59:
                    6f:aa:d3:cb:6d:19:51:60:7e:e3:a7:eb:ab:15:85:
                    e4:8d:2e:ca:ce:45:8d:d1:e1:d2:5f:1c:7c:77:f6:
                    13:4f:09:b6:84:af:9f:de:80:d5:6c:f0:8b:be:7f:
                    00:7f:73:3c:6a:96:a0:b9:f1:5c:c7:f4:7d:52:22:
                    ab:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:3B:2B:8C:A3:C7:9E:78:2A:ED:81:93:5A:34:B9:BA:23:40:63:C8
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144556.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a772::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:73:bd:8a:d0:92:65:f5:ea:9d:81:67:20:d5:6a:f4:8d:f2:
         83:e7:f4:5f:75:8f:36:ae:c4:41:6f:7e:15:39:6e:ed:06:68:
         8c:ff:ed:6c:4a:4f:49:75:2f:c6:18:93:95:76:1e:c5:be:13:
         89:37:99:39:f4:46:7d:f4:dc:03:c5:5e:79:55:90:c7:9f:6f:
         0d:1b:79:1e:44:78:23:98:48:2f:c5:a1:9e:a8:e3:33:3f:c1:
         50:73:c8:25:ed:47:15:9d:16:26:68:e4:72:1f:35:4e:11:9b:
         e5:6a:70:46:60:6b:57:49:91:b0:40:83:c3:57:10:db:b9:38:
         41:0e:9b:b4:78:e9:66:36:54:d2:8e:16:b6:5f:cd:7f:4b:fb:
         f2:2c:d5:1d:43:54:70:b1:06:e4:1d:d9:e6:65:3e:d8:cf:7f:
         d8:46:12:b8:bc:e4:ef:9d:68:79:88:b6:24:33:a7:bc:62:0c:
         b6:1e:02:2e:d8:f3:68:0d:1f:20:f7:a3:ea:d3:9d:77:98:85:
         1f:b2:90:85:e4:c2:7d:a7:07:32:64:9e:f9:a9:2e:5a:9a:c7:
         94:ed:ab:bb:f7:cc:0e:dd:7b:41:bd:a9:c2:f2:cf:33:16:53:
         6c:7a:73:a1:27:01:b2:3a:be:b7:62:1d:76:8e:2d:c7:37:92:
         fa:2b:73:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----