Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144613.roa
File:                     AS144613.roa (raw, json)
Hash identifier:          5WMS/NyofrqDaVHfqOTb0m96qgu3EKs0iEltA7cRHwE=
Subject key identifier:   BA:89:1D:B3:F2:A9:C2:A6:89:7A:0E:90:D6:2C:7F:B7:8D:ED:7F:09
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       43337491FBE6BD777C4A60535D728F2AD04DF902
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144613.roa
Signing time:             Tue 26 May 2026 01:13:31 +0000
ROA not before:           Tue 26 May 2026 01:08:31 +0000
ROA not after:            Tue 25 May 2027 01:13:31 +0000
asID:                     144613
IP address blocks:        240a:a7ab::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:33:74:91:fb:e6:bd:77:7c:4a:60:53:5d:72:8f:2a:d0:4d:f9:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:08:31 2026 GMT
            Not After : May 25 01:13:31 2027 GMT
        Subject: CN=BA891DB3F2A9C2A6897A0E90D62C7FB78DED7F09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b7:7d:40:ff:b7:e8:88:3e:b7:e4:ef:e4:3c:
                    d1:25:b2:d8:06:2d:90:93:1f:31:e6:07:85:fa:45:
                    66:33:66:cf:9b:ea:5d:49:c9:f8:be:29:23:13:35:
                    a7:8c:69:05:1c:36:8e:27:40:a2:ec:2e:47:66:87:
                    36:a7:35:06:e2:d1:7d:66:d8:db:fd:e3:98:e7:5b:
                    42:25:01:6d:1c:ba:42:60:0a:84:7b:69:12:73:56:
                    8a:62:3f:52:57:51:fc:09:75:c8:23:32:39:c0:d1:
                    e4:34:e9:21:f7:e3:db:3d:5f:3e:8d:89:2a:a4:72:
                    93:6d:bb:34:25:a2:a3:c7:d2:16:6f:51:e2:5f:02:
                    0e:33:7b:9b:c6:f8:d3:41:e6:e5:26:4f:0f:e8:a5:
                    31:de:a2:6a:89:ec:e7:32:10:76:b0:d9:8f:8b:dd:
                    3f:3e:7e:92:42:cb:41:10:28:12:1a:f4:36:c2:ea:
                    80:3a:7b:a2:e4:0d:c2:7e:68:48:01:66:ad:54:ed:
                    ab:a3:9a:85:02:f7:45:76:13:b5:a7:73:1e:3f:7e:
                    be:4a:60:81:42:b4:f6:a5:1f:1d:c2:e2:57:2d:59:
                    91:57:da:0c:81:8e:6b:15:bc:7b:ec:2d:ca:ca:76:
                    dd:41:fd:08:7e:b6:b5:69:8e:9a:48:07:86:b6:e3:
                    95:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:89:1D:B3:F2:A9:C2:A6:89:7A:0E:90:D6:2C:7F:B7:8D:ED:7F:09
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144613.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a7ab::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:c3:88:ae:a0:66:99:97:88:86:d7:45:eb:9e:2c:85:dc:02:
         d9:ea:ad:c0:e5:fa:0a:3b:36:85:c8:c5:e8:53:f9:6a:c1:af:
         2b:bf:a9:54:62:ed:ac:c5:9f:be:d0:17:35:79:84:6e:ec:15:
         01:3d:61:c3:52:dd:da:27:69:26:06:3c:6b:f7:f0:3e:24:62:
         df:ce:d3:0f:3d:a1:1a:76:ae:3e:f9:59:3b:e8:d0:ee:37:22:
         e0:e8:fb:f3:09:76:e5:ed:59:75:da:b4:3b:cd:25:29:8d:9a:
         9f:7f:34:55:9e:ad:de:4b:c3:28:0d:a4:1a:7f:bf:8a:4c:e5:
         8e:87:f0:72:26:23:b3:43:9b:74:4b:2b:c7:9f:ce:f6:91:e2:
         45:ab:c2:24:29:62:10:30:fa:ea:dc:03:37:ef:b8:1c:75:fa:
         27:d1:80:31:20:95:60:e1:30:24:4d:3a:7a:85:29:f3:75:96:
         6b:f0:14:0e:e9:84:fa:65:10:66:4d:9c:65:be:3c:55:68:e3:
         d4:01:e4:ab:b2:54:ca:81:9f:4d:00:c2:55:93:5d:09:ad:d0:
         4e:3d:33:7d:bb:05:0b:ef:4a:9f:32:37:7b:aa:79:14:b4:4b:
         6c:58:82:34:9a:28:5d:a5:48:fc:a4:e3:c8:d3:73:0b:5f:be:
         2f:81:4d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----