Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144573.roa
File:                     AS144573.roa (raw, json)
Hash identifier:          YL/SXq9nC4SGF+sLGMjjjo7Te4gHkhc9vq+VMzP7u+c=
Subject key identifier:   AB:18:D9:12:B8:F7:86:88:90:5B:40:4A:51:87:FF:B9:19:D2:F1:2D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       46DD6F10F04A91BBD0B89657C655D067EE6E9428
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144573.roa
Signing time:             Mon 25 May 2026 06:28:28 +0000
ROA not before:           Mon 25 May 2026 06:23:28 +0000
ROA not after:            Mon 24 May 2027 06:28:28 +0000
asID:                     144573
IP address blocks:        240a:a783::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:dd:6f:10:f0:4a:91:bb:d0:b8:96:57:c6:55:d0:67:ee:6e:94:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:28 2026 GMT
            Not After : May 24 06:28:28 2027 GMT
        Subject: CN=AB18D912B8F78688905B404A5187FFB919D2F12D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5b:89:51:e9:6d:47:e7:ec:0b:ba:e3:dd:41:
                    c2:eb:08:70:83:a0:dc:b4:7a:48:84:98:c9:95:af:
                    25:8e:c1:8f:17:db:83:db:c2:44:fd:34:d5:4a:a0:
                    f2:b0:02:dc:57:a0:3f:d3:45:dc:6c:39:e1:64:75:
                    3e:3e:55:84:ab:9d:0f:a0:72:26:46:12:cf:ea:c0:
                    7c:56:0b:bd:5b:8c:8d:8b:a6:45:61:3e:03:e3:64:
                    aa:17:da:df:df:21:04:e7:fe:e7:42:b7:c8:bd:f6:
                    b1:26:0f:df:83:84:a0:3c:19:47:a0:fa:9b:43:14:
                    e5:14:81:87:f5:d2:2d:fd:75:5c:03:b7:17:b8:e4:
                    3e:41:bc:1c:2e:cb:78:13:a8:db:f3:0a:d0:0c:9a:
                    1f:f9:ed:e3:ab:52:02:62:df:f4:83:16:05:6c:56:
                    07:f8:50:0d:82:79:07:25:17:e9:0c:bd:ed:fc:27:
                    06:8d:a2:25:cd:29:3f:80:70:5f:ed:ff:06:ed:ac:
                    a6:75:e3:6d:9e:fb:f0:08:1a:c6:05:ae:2d:82:3d:
                    0a:f8:86:3d:a5:4c:b7:bd:f7:51:b6:9e:d0:f2:30:
                    ba:dc:61:31:ae:b2:66:2d:fc:53:7e:8c:54:9d:e4:
                    b6:50:a5:76:f8:2e:cd:e4:ee:7b:50:d4:1d:55:ee:
                    13:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:18:D9:12:B8:F7:86:88:90:5B:40:4A:51:87:FF:B9:19:D2:F1:2D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144573.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a783::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:f4:47:a4:8a:84:57:ce:21:1d:11:c4:6f:bd:c9:13:dd:a3:
         e9:83:0d:e5:96:80:20:bf:f2:f6:3f:de:8a:d9:e9:69:7f:dc:
         a1:24:e8:24:32:3e:46:e9:dd:59:ea:5e:cf:e5:8d:f1:6f:29:
         97:30:27:8c:bf:e0:0c:a4:a2:14:42:34:46:b8:02:fc:f3:98:
         f6:21:9c:3c:15:ef:23:92:bc:a4:53:a7:3e:61:c2:dc:12:bd:
         3c:26:0d:78:ed:b5:f7:4c:ef:14:fa:87:2c:42:69:25:75:3b:
         9d:76:35:d9:24:b7:84:6b:60:6a:ca:2b:0e:c5:04:42:21:f5:
         42:2c:51:20:74:06:c1:33:c0:01:d7:6b:d3:57:c1:61:4d:40:
         00:8f:b0:7a:3c:21:b4:e1:e7:e8:a1:97:27:75:8a:e8:6c:c7:
         85:3a:84:19:36:05:31:c8:14:b3:4b:59:7a:24:ca:2c:31:39:
         ae:da:61:54:00:b6:8c:d3:4c:b2:55:b2:6f:64:30:a4:b4:08:
         79:64:4e:a3:c3:87:67:70:60:a7:f9:2a:08:33:c9:6c:16:87:
         73:2a:3a:3c:27:ed:8d:59:cf:cc:9b:4d:52:77:29:4d:ed:00:
         08:57:9a:8f:8c:51:fb:f1:f0:79:ec:0c:e9:ec:c1:7d:7a:6a:
         09:3e:f0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----