Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144599.roa
File:                     AS144599.roa (raw, json)
Hash identifier:          KxMkY+qLVYCFyQbPUKNybMh6pd5rUMD0g/HgoJkIcwY=
Subject key identifier:   53:D5:23:34:D0:3E:D6:74:FB:F7:9D:D5:23:2B:49:9B:63:BA:23:EB
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1DC14E514DE50EC0952FE7B9F7CF152B27FB3E7B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144599.roa
Signing time:             Fri 22 May 2026 07:08:46 +0000
ROA not before:           Fri 22 May 2026 07:03:46 +0000
ROA not after:            Fri 21 May 2027 07:08:46 +0000
asID:                     144599
IP address blocks:        240a:a79d::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:c1:4e:51:4d:e5:0e:c0:95:2f:e7:b9:f7:cf:15:2b:27:fb:3e:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:03:46 2026 GMT
            Not After : May 21 07:08:46 2027 GMT
        Subject: CN=53D52334D03ED674FBF79DD5232B499B63BA23EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3e:52:7d:d3:01:4e:d0:2d:09:7a:32:50:4f:
                    2e:3f:39:c8:67:63:96:85:bf:5f:1f:d6:71:1c:73:
                    76:0a:e2:45:77:d7:1d:27:99:19:30:09:d3:43:d7:
                    d8:3a:3e:33:44:04:e0:cc:b7:b5:c2:92:b0:13:ef:
                    0e:e3:25:5b:bc:8c:bb:77:b7:b1:3f:c4:60:75:d3:
                    74:04:65:21:1a:c8:55:2f:13:7b:de:91:d3:2e:a1:
                    97:76:17:3e:9d:ba:d0:7b:16:58:3e:e9:b7:31:2c:
                    2a:bd:30:d6:70:f4:f6:52:44:1c:62:2e:c8:6f:a9:
                    bb:01:d0:94:79:d0:26:11:61:f5:a5:6d:da:05:54:
                    e9:45:cf:36:e4:ca:56:8b:97:11:0d:84:4e:70:6d:
                    1a:cb:c8:49:e4:58:66:05:68:8a:1f:22:20:0b:93:
                    97:5e:30:fd:66:a1:3c:ec:18:0a:d0:12:26:09:29:
                    85:45:79:4c:d0:79:4d:1b:ca:41:cb:20:8e:5a:4f:
                    8f:88:b7:2c:0d:9b:79:e3:c7:ba:1f:32:f4:08:b3:
                    31:71:6f:ea:f8:41:9a:ef:66:bc:a9:0e:0a:bf:68:
                    e1:ad:c8:3d:b0:27:d6:6d:9d:cf:74:bd:37:5b:3a:
                    83:b0:12:17:65:9f:ae:64:01:1c:36:20:21:b0:84:
                    63:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D5:23:34:D0:3E:D6:74:FB:F7:9D:D5:23:2B:49:9B:63:BA:23:EB
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144599.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a79d::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:84:da:1e:82:1c:41:66:e4:a1:2e:c4:ae:d5:ea:bc:66:29:
         8d:00:dd:f9:31:05:37:3d:6c:2e:cb:50:64:8c:f8:02:5b:27:
         0a:e9:42:4a:67:11:40:93:4f:8b:91:55:64:b1:ec:0f:f3:34:
         26:6b:f2:a2:17:d5:6f:0f:d4:92:3e:73:41:e6:06:62:a2:02:
         21:84:9c:45:19:cc:cf:06:82:e4:57:a7:96:65:bf:52:75:81:
         ff:17:2f:b9:5f:9e:a0:df:6a:10:c8:29:02:a7:7e:45:98:25:
         d9:56:c1:d3:6d:7c:bb:57:fb:19:e3:73:ed:ee:7e:10:b8:81:
         ac:d6:a5:67:b6:78:05:d4:c3:9c:79:ab:30:99:24:6d:9a:d6:
         59:a9:c5:17:a1:34:1f:0b:fa:45:04:d4:38:0e:26:a7:c1:f0:
         d2:a7:41:f9:61:cf:20:e8:46:eb:c4:86:64:5f:39:b2:cb:11:
         e0:78:38:b0:04:4f:f3:af:7e:f6:27:86:ff:e9:cf:81:85:66:
         8d:ec:35:8e:e1:59:a9:53:c9:a9:cd:82:20:bb:c7:ec:ff:3f:
         0b:70:f6:8d:cf:4c:1e:6d:cb:62:59:92:03:a3:b3:0b:f0:75:
         28:36:e2:ef:28:52:7d:e6:96:56:21:c3:1d:1a:5d:45:a7:61:
         24:60:05:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----