Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144606.roa
File:                     AS144606.roa (raw, json)
Hash identifier:          jSEfrEXZSCSKhCvpJR/pC0fRzSIZoP/xNNRx5wpzgUU=
Subject key identifier:   F6:35:CD:D5:87:49:6C:84:3C:8A:E9:3F:1C:1E:91:22:F8:1B:11:86
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3C99EF5C6EA431C55A4C5844E66A10A48513EA17
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144606.roa
Signing time:             Fri 22 May 2026 07:40:45 +0000
ROA not before:           Fri 22 May 2026 07:35:45 +0000
ROA not after:            Fri 21 May 2027 07:40:45 +0000
asID:                     144606
IP address blocks:        240a:a7a4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:99:ef:5c:6e:a4:31:c5:5a:4c:58:44:e6:6a:10:a4:85:13:ea:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:35:45 2026 GMT
            Not After : May 21 07:40:45 2027 GMT
        Subject: CN=F635CDD587496C843C8AE93F1C1E9122F81B1186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c5:5c:5c:6c:ab:03:1a:9b:9a:49:4a:a5:6a:
                    84:43:33:0b:bf:61:65:56:98:91:32:98:e6:01:59:
                    2f:8d:61:16:62:9e:d5:81:5f:eb:9d:07:72:e5:5c:
                    81:e3:8a:2f:cd:36:1e:60:3e:05:59:66:f7:da:4a:
                    60:e2:d2:6e:3a:99:13:6a:56:82:5b:aa:bf:a4:73:
                    ab:eb:d2:79:b4:d7:7c:b0:68:44:c5:63:3d:a3:1f:
                    7c:6e:9c:ba:51:5c:16:dc:d4:81:2e:a9:72:13:1a:
                    16:1b:ef:76:e2:9b:77:8c:ae:42:f8:24:d5:2c:81:
                    a6:fe:ea:45:81:10:a8:49:34:91:0d:d2:89:9f:b3:
                    81:b8:c3:0b:70:13:cd:0b:95:88:d2:12:96:a9:c0:
                    e0:d0:47:3e:31:96:3f:8a:d4:2d:1b:8b:fb:7a:3e:
                    16:15:49:a4:fa:75:eb:8a:35:c0:c4:de:ad:df:52:
                    0e:ba:fc:57:41:86:2e:0d:04:5d:20:a4:20:ae:8d:
                    64:ae:bb:fd:15:95:44:96:6c:e0:66:0b:f8:ed:da:
                    c4:9a:fc:c8:51:14:71:1f:65:42:84:30:ad:0c:62:
                    f0:93:0a:e5:1f:36:cf:13:9f:ad:e7:c2:6b:22:87:
                    a8:58:9b:b9:8e:eb:5d:aa:e8:5f:f7:fd:a6:ff:8f:
                    4f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:35:CD:D5:87:49:6C:84:3C:8A:E9:3F:1C:1E:91:22:F8:1B:11:86
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144606.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a7a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:26:47:dd:a0:74:27:56:34:0e:5c:48:fa:b4:1f:12:e7:17:
         a7:8d:52:67:df:c0:a9:da:03:3e:9f:8f:e7:6f:f9:54:50:a7:
         1f:9f:af:32:5c:2f:e5:7d:f4:7f:fa:1a:a1:96:39:89:5c:fe:
         5e:97:2d:c3:94:d5:ee:63:95:61:f8:b6:f7:06:35:a8:bc:f4:
         49:b0:76:74:b6:46:2c:b9:47:c4:5f:10:5a:fc:3f:e2:02:d0:
         d2:d5:30:cb:b4:42:45:38:c9:e0:7d:db:9f:90:fa:6a:61:ec:
         69:4a:89:3a:8a:eb:f8:55:d9:e6:2a:d7:74:f0:61:46:7a:0f:
         b1:0d:e8:bd:90:85:9e:be:56:ca:d7:c9:12:a9:d2:cb:2e:89:
         03:10:ba:23:7e:48:df:ae:f0:c1:d9:69:72:c9:7a:4d:09:89:
         70:53:a8:8a:79:a8:44:7d:9e:ea:88:03:67:2f:a4:97:cc:a0:
         66:ca:b2:7d:89:51:57:9a:42:08:37:8e:73:5f:1a:4b:7e:09:
         9c:d0:39:b6:2e:ee:5e:c1:7b:06:46:b2:e5:4a:c7:5a:8c:49:
         fd:48:56:99:be:1c:51:af:e2:41:64:56:40:8b:b9:7f:c2:b2:
         19:65:e3:e0:b9:43:f4:8e:5d:eb:10:91:d6:56:c6:dc:40:2e:
         1e:b7:e9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----