Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144587.roa
File:                     AS144587.roa (raw, json)
Hash identifier:          hUEkmAY7M7mEB61eZVTgDch5ZPCxdFBW12GV0vWzd5I=
Subject key identifier:   0F:69:83:45:EB:DA:25:13:F0:C2:7D:8D:D2:CE:6F:B5:A8:23:DA:F9
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       157817E59BE56967FAF77C85B4EEB13369998D5F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144587.roa
Signing time:             Fri 22 May 2026 06:58:17 +0000
ROA not before:           Fri 22 May 2026 06:53:17 +0000
ROA not after:            Fri 21 May 2027 06:58:17 +0000
asID:                     144587
IP address blocks:        240a:a791::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:78:17:e5:9b:e5:69:67:fa:f7:7c:85:b4:ee:b1:33:69:99:8d:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:17 2026 GMT
            Not After : May 21 06:58:17 2027 GMT
        Subject: CN=0F698345EBDA2513F0C27D8DD2CE6FB5A823DAF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:73:8f:05:a2:d7:77:df:50:8a:23:e0:9b:d9:
                    32:60:dc:ac:8e:52:54:9e:dd:c5:1c:b3:a7:1e:bb:
                    4a:54:56:ac:88:9b:23:6a:54:9c:cc:fb:87:8b:19:
                    e6:0a:23:10:8a:64:1b:5e:b0:77:d4:3b:bf:13:9c:
                    56:85:c2:a7:22:ca:4f:53:15:c7:56:7a:24:97:d2:
                    cf:90:aa:0b:14:8e:da:bb:0f:9d:c0:44:11:d1:da:
                    3f:4e:97:da:1e:d4:dd:59:23:fe:b2:04:78:2a:16:
                    aa:29:d9:80:09:64:41:96:39:47:84:77:69:f3:8f:
                    15:a7:62:40:36:c4:93:10:5e:d9:49:51:77:27:a4:
                    5b:85:d0:a4:f5:49:4a:a1:f4:c2:6e:0a:51:84:a7:
                    f3:b8:e4:a0:5e:09:77:38:ce:ab:21:8d:d8:f5:58:
                    3e:bc:ca:b8:89:66:88:50:58:35:44:65:2a:d4:c2:
                    f4:5e:3b:d4:4c:95:5b:59:3b:2b:2f:3e:ac:6f:10:
                    b2:f0:79:70:2e:ce:e3:9d:d7:e1:98:8e:b6:2d:4e:
                    2c:ab:2b:e5:d0:dc:53:e9:2a:6e:4b:03:c8:ec:2a:
                    82:2a:11:6b:54:01:24:77:9a:79:1b:c9:ed:96:3b:
                    89:3b:53:fe:dc:e3:02:ae:c8:b6:89:8b:67:75:a2:
                    69:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:69:83:45:EB:DA:25:13:F0:C2:7D:8D:D2:CE:6F:B5:A8:23:DA:F9
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144587.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a791::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:16:7f:6f:e0:8f:f7:db:75:0a:a3:15:3d:1f:84:30:91:4e:
         78:88:5f:b8:58:76:66:89:9c:cc:8f:b6:98:ae:64:1b:c6:2b:
         7c:44:f7:ae:78:77:c4:b8:5a:01:ca:d9:b1:a1:c7:6d:6f:ba:
         7e:b7:59:3f:e2:b8:ab:4b:15:fa:57:b5:b4:91:fa:41:de:1c:
         ee:3e:d8:9a:d1:3c:f6:73:ae:05:d6:ea:5d:a5:a7:eb:17:a7:
         19:b2:98:6c:ec:53:b5:77:73:3c:90:2d:35:6d:ee:b5:9b:25:
         38:d8:13:9d:59:2a:04:35:af:dd:8a:2c:91:4e:75:71:30:3e:
         7b:00:ee:80:79:db:0d:f2:37:b9:63:17:d8:3e:16:a8:f3:1c:
         59:1d:a4:20:6d:f2:b7:74:0c:50:a7:6f:89:2c:48:8a:6d:7f:
         cd:be:4f:92:44:81:44:de:ce:67:d0:ac:9f:06:9d:ce:f3:10:
         97:c1:1e:00:bb:27:78:66:fd:e7:93:a2:bf:80:ef:30:6d:05:
         bd:60:0e:9c:a0:df:7f:d4:cb:84:57:ed:0b:99:54:05:15:d1:
         56:0e:58:7b:20:f5:5c:ee:83:b9:9b:1a:31:f0:2b:56:b0:0f:
         27:fc:f1:d3:61:fa:1d:2d:6a:15:bd:25:4e:03:5e:95:51:73:
         e4:09:e5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----