Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144570.roa
File:                     AS144570.roa (raw, json)
Hash identifier:          GedcMY9n4sn/F44kvvmto9SvZJV0VlWF9jXZHdn6vXU=
Subject key identifier:   33:7B:22:49:19:C6:03:40:70:DF:6D:B1:AE:5E:32:3F:E4:3D:19:E1
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3ABF39500C886EFFAE757CF470DE989407C890CB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144570.roa
Signing time:             Mon 25 May 2026 02:22:29 +0000
ROA not before:           Mon 25 May 2026 02:17:29 +0000
ROA not after:            Mon 24 May 2027 02:22:29 +0000
asID:                     144570
IP address blocks:        240a:a780::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:bf:39:50:0c:88:6e:ff:ae:75:7c:f4:70:de:98:94:07:c8:90:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 02:17:29 2026 GMT
            Not After : May 24 02:22:29 2027 GMT
        Subject: CN=337B224919C6034070DF6DB1AE5E323FE43D19E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:34:fb:a4:2a:dc:ea:d8:6b:0c:e2:95:91:ee:
                    a1:17:a8:14:ad:bc:cc:6a:ce:e6:da:a2:fb:3e:1c:
                    0a:9d:c0:29:30:f0:17:96:0d:70:19:02:e6:42:55:
                    03:9f:81:5e:90:38:ce:5f:16:6f:7a:28:84:5f:88:
                    44:bf:0d:de:72:d1:fb:6d:c6:8b:9f:74:b6:8d:a2:
                    ce:67:25:6b:59:59:59:5a:a3:1d:78:3f:43:9a:e7:
                    39:e0:9d:e7:4d:8f:c5:47:de:b3:a9:ce:e9:e8:ca:
                    f0:d5:d6:79:af:f3:0e:55:13:fb:1f:e5:53:65:d9:
                    0b:04:97:b5:dc:50:ff:9f:0d:58:a3:bc:4c:a7:cb:
                    6d:b8:ed:4e:1d:e0:05:e0:ad:50:7e:c5:87:8a:8d:
                    88:fb:79:4f:65:47:cd:6e:36:4b:53:06:95:9b:15:
                    3c:49:f1:aa:28:68:e7:cb:86:8b:4a:fa:4e:a1:94:
                    aa:d1:c5:aa:5e:86:99:1c:5d:96:f6:60:83:a7:7f:
                    10:25:fc:74:12:98:f5:02:40:81:7c:dd:53:d8:67:
                    9e:a5:da:e2:bb:05:a1:bb:40:09:a8:a5:03:72:9b:
                    f1:fe:88:55:a8:e1:d2:a2:5e:a3:ed:36:7e:ea:93:
                    6d:f8:aa:ee:92:9a:da:88:f5:f9:01:4d:c2:fe:28:
                    89:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:7B:22:49:19:C6:03:40:70:DF:6D:B1:AE:5E:32:3F:E4:3D:19:E1
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144570.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a780::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:9c:36:23:af:b9:ee:df:57:00:e7:e6:ae:73:c5:ae:c0:8c:
         0a:65:64:ce:50:51:9b:20:a9:f8:84:ad:b6:84:be:d0:24:09:
         46:55:08:ff:be:00:84:16:d3:b3:4c:9c:a6:d3:33:92:0b:f8:
         3f:42:de:f9:d2:e1:93:2f:27:d1:6f:c7:a2:37:bc:7c:14:9a:
         26:1f:14:70:86:2f:42:23:d7:2e:21:38:cf:33:e5:d8:e3:52:
         c6:54:e3:73:b8:6f:ac:f4:ff:2b:8f:c6:d0:a2:be:8b:11:92:
         2a:fd:dc:54:3e:6f:b8:a0:64:f6:ca:15:8d:8c:4b:0b:4f:4b:
         43:9b:c9:d7:ba:a7:4a:b1:2b:6e:ce:dd:3f:af:32:f1:12:10:
         b5:cf:21:20:c1:0b:35:d3:68:9e:45:43:67:8a:a6:4b:37:29:
         f4:7c:94:ad:e4:a5:73:22:3a:52:61:f5:65:da:26:ca:dc:83:
         0e:c8:46:40:d7:4c:d6:8a:13:4c:07:1f:cf:01:b3:f4:bf:d7:
         b5:9f:62:ac:6b:fd:17:40:3d:3e:e9:2d:27:3c:82:61:4f:e5:
         00:0d:d1:eb:c7:e0:4c:f0:40:89:fc:f7:43:38:4c:fe:cb:06:
         08:17:82:ca:b2:c4:37:24:77:0b:df:7b:ab:bc:f8:22:81:29:
         a8:46:42:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----