Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144634.roa
File:                     AS144634.roa (raw, json)
Hash identifier:          pCgR34S8IY4I9vL5+GXTjTO4B4qTg9bj1STUKphBUIA=
Subject key identifier:   59:7F:CB:C8:7E:EB:07:E7:50:F3:00:92:2F:8E:C0:7D:C0:58:14:8B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1057FE4DBC185BEF2671B74459B634094B4B807D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144634.roa
Signing time:             Fri 22 May 2026 06:46:09 +0000
ROA not before:           Fri 22 May 2026 06:41:09 +0000
ROA not after:            Fri 21 May 2027 06:46:09 +0000
asID:                     144634
IP address blocks:        240a:a7c0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:57:fe:4d:bc:18:5b:ef:26:71:b7:44:59:b6:34:09:4b:4b:80:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:09 2026 GMT
            Not After : May 21 06:46:09 2027 GMT
        Subject: CN=597FCBC87EEB07E750F300922F8EC07DC058148B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:aa:be:7b:58:01:21:f5:f8:76:01:85:44:ce:
                    b4:be:6e:a6:8e:38:58:78:25:9e:5d:18:0f:f1:50:
                    ab:ce:9d:a3:04:18:dd:98:8d:41:3d:e7:7a:8e:cd:
                    40:54:8e:92:95:1d:ad:77:4f:5d:2f:df:4c:e6:df:
                    86:79:08:e2:a8:fa:22:b0:0d:6d:c8:52:db:e1:bd:
                    2a:46:5f:94:41:84:1d:ca:4f:e4:7c:1f:f1:58:a2:
                    32:74:64:92:10:40:a3:58:84:09:85:d2:7e:33:1a:
                    c3:a2:6e:b4:22:cc:16:cc:16:b2:d9:93:89:27:d5:
                    15:3c:19:13:21:76:37:1a:f3:89:84:a9:d7:60:62:
                    a1:c3:74:7e:21:42:5c:51:7b:70:71:ed:9f:ac:56:
                    0b:13:61:05:8e:18:85:9d:20:24:48:2d:45:c8:63:
                    58:48:02:fd:57:1b:17:9e:a1:2b:49:b8:ab:38:e4:
                    61:66:19:1e:89:bd:d1:1e:71:c9:79:08:ed:7c:ff:
                    38:54:55:34:7d:d6:da:f6:fe:58:1f:9b:f0:3f:78:
                    cc:fe:3e:ef:d1:65:56:1a:98:88:7e:2c:15:49:be:
                    a5:76:8d:9c:b5:3f:68:2c:72:6c:b2:03:57:6f:a3:
                    af:ad:28:5c:fb:df:f0:d1:50:99:5e:b3:15:62:40:
                    27:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:7F:CB:C8:7E:EB:07:E7:50:F3:00:92:2F:8E:C0:7D:C0:58:14:8B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:6f:b7:1a:36:ed:28:4a:0b:d1:61:cf:cc:a7:48:a5:0d:15:
         da:e3:1f:17:7f:df:5b:bc:a9:12:55:8e:a6:e3:e0:37:9d:a3:
         0c:ca:01:35:69:62:1d:96:3d:e3:bd:fa:89:b0:e8:43:ef:82:
         dd:20:6b:38:9b:85:a0:48:21:2e:55:94:53:35:cd:75:20:3e:
         0b:7e:75:5a:92:7c:87:31:11:12:a6:3e:83:9f:6e:99:39:af:
         cc:7e:63:8c:ea:46:e8:c6:86:09:71:ea:37:ad:7c:b9:54:8e:
         09:94:a1:7d:76:f6:02:36:4a:d1:f2:6a:20:64:d7:a3:95:a4:
         ac:28:82:a5:2f:84:bf:62:cd:3b:84:8b:5a:2f:fa:ca:96:b4:
         77:13:41:35:39:8d:78:5b:12:89:50:e1:7c:41:ea:f9:ad:2c:
         34:d3:4d:29:66:a1:a0:3e:fe:23:97:7b:2b:9b:4d:c9:33:c5:
         a3:77:67:52:2a:2b:d4:66:29:6b:f4:c0:2f:12:66:81:1e:83:
         95:13:8a:96:f9:4c:33:6d:46:44:9f:fe:c6:21:cd:55:4e:50:
         12:1f:ec:64:9d:b6:52:34:66:bd:ed:6a:ea:39:a6:35:2a:82:
         6d:de:cc:62:ec:e0:44:c6:85:f7:1f:10:4f:49:3a:4f:bf:9b:
         d3:5a:51:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----