Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144622.roa
File:                     AS144622.roa (raw, json)
Hash identifier:          qMjdc/0kDm4jY9LJ61spP22wWlO+vGshY/l3HX3aiB8=
Subject key identifier:   E6:28:A8:CF:1E:20:0B:F1:C3:64:9F:5E:C2:7B:BA:9E:B0:6B:28:16
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       10AD242C94DC7D5F2CEF0A07793B26B3B39B775E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144622.roa
Signing time:             Fri 22 May 2026 04:08:29 +0000
ROA not before:           Fri 22 May 2026 04:03:29 +0000
ROA not after:            Fri 21 May 2027 04:08:29 +0000
asID:                     144622
IP address blocks:        240a:a7b4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ad:24:2c:94:dc:7d:5f:2c:ef:0a:07:79:3b:26:b3:b3:9b:77:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:03:29 2026 GMT
            Not After : May 21 04:08:29 2027 GMT
        Subject: CN=E628A8CF1E200BF1C3649F5EC27BBA9EB06B2816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b4:e1:37:03:88:3e:74:32:44:ce:af:99:fd:
                    88:aa:f3:da:af:e8:3f:e1:75:81:17:71:e6:c0:9a:
                    f5:7f:20:f8:b2:51:c4:8e:12:ed:ad:01:67:71:70:
                    3f:d3:10:88:b9:14:27:06:15:17:02:c8:94:f3:1d:
                    14:43:ec:42:4a:7e:07:65:be:67:a8:3d:f8:5a:92:
                    2e:be:1b:da:1c:c3:f8:a7:48:c7:51:4c:99:f0:d2:
                    86:57:e2:55:d9:37:3c:47:18:10:58:64:27:22:78:
                    ae:34:42:34:cb:09:6c:6f:bd:71:8e:3e:58:38:f9:
                    5b:9a:b6:ba:13:77:eb:19:66:d3:8c:45:45:8d:2c:
                    7e:8a:20:8e:58:74:b8:64:c8:44:a1:31:fe:e0:ee:
                    48:45:17:c7:c4:39:33:5d:c8:1c:28:16:4f:85:d9:
                    e9:38:1e:2f:05:37:53:11:c5:13:1d:4a:18:e7:58:
                    7b:e0:c8:0b:8e:81:ac:3d:f5:da:f6:3e:5e:a5:a1:
                    1b:da:c4:0a:ca:b2:78:b2:f6:db:f9:e4:36:7c:07:
                    07:57:85:c8:2f:93:4c:b1:e3:da:94:84:3f:46:ce:
                    7e:fc:9e:da:57:37:03:81:cb:47:cd:5b:ce:a2:97:
                    14:41:7b:e0:8d:45:c7:a1:98:b4:55:6f:2e:17:22:
                    c3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:28:A8:CF:1E:20:0B:F1:C3:64:9F:5E:C2:7B:BA:9E:B0:6B:28:16
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144622.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a7b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:e0:90:71:99:0c:b1:32:de:60:01:7a:1a:58:1c:19:97:e4:
         63:a5:03:51:31:b2:41:25:c1:b3:ca:21:15:3a:2a:ad:0e:e8:
         27:df:c6:a9:72:20:42:41:2c:fb:d6:37:13:92:93:fc:c8:7f:
         74:f5:72:ed:a8:b2:e0:77:f5:ba:60:77:db:99:f0:0d:01:49:
         7d:d6:98:bc:35:c1:ec:59:fe:ca:52:72:5c:9d:0f:a7:45:69:
         38:58:34:52:f8:d9:c9:32:5a:44:4b:60:13:ab:1d:f2:4e:40:
         ad:8c:6f:19:39:18:14:0e:64:ae:0a:b5:9f:08:84:e9:e6:a8:
         e0:b6:b8:df:af:1b:b6:60:52:48:c7:44:6d:d8:63:10:5d:56:
         7d:ba:6e:29:6d:71:4b:1c:27:5d:b7:81:6a:36:bf:c6:91:bc:
         5b:2d:6b:7e:bd:7b:3f:d7:17:23:f9:c6:73:6e:f4:10:62:e5:
         fd:20:52:d2:ed:bf:d4:d2:88:86:f0:9e:04:ba:6b:ba:b6:25:
         e6:10:fb:29:95:4c:fc:42:62:6a:3e:99:6c:1b:e7:20:38:85:
         f6:2d:2f:d9:d7:e4:f9:61:7c:78:94:b1:6d:5a:5f:37:e5:e4:
         c3:32:1b:d9:f2:ba:93:2b:36:8f:93:75:c2:78:0e:df:43:b9:
         77:5d:0d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----