Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144635.roa
File:                     AS144635.roa (raw, json)
Hash identifier:          O+lv4i7BB2eoIahycZ0WBP0+clVMf+uZVbkGR9/Cu4o=
Subject key identifier:   5D:EC:D8:D1:F3:9D:48:AF:80:6A:E5:19:74:EE:D4:8E:54:F9:18:DD
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       652C8A93924C873C275835BDA40F3B2B182D9D23
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144635.roa
Signing time:             Mon 25 May 2026 06:28:29 +0000
ROA not before:           Mon 25 May 2026 06:23:29 +0000
ROA not after:            Mon 24 May 2027 06:28:29 +0000
asID:                     144635
IP address blocks:        240a:a7c1::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:2c:8a:93:92:4c:87:3c:27:58:35:bd:a4:0f:3b:2b:18:2d:9d:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:29 2026 GMT
            Not After : May 24 06:28:29 2027 GMT
        Subject: CN=5DECD8D1F39D48AF806AE51974EED48E54F918DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3e:0c:37:4d:df:86:1c:98:b4:e1:61:a1:f1:
                    4f:ca:af:a4:81:b6:d9:ae:ed:5b:df:90:2c:eb:99:
                    db:63:14:ee:df:ea:c7:6c:42:7b:70:34:6d:7f:21:
                    b3:5e:04:2a:a4:f5:e4:04:a7:8f:66:85:1b:07:df:
                    0f:8c:69:95:54:e4:8f:ff:5a:d6:57:e1:d2:be:0e:
                    ec:01:02:c9:61:68:f8:3f:b1:3b:5e:2e:30:48:ad:
                    df:44:97:75:38:51:c2:60:ba:75:3d:4f:7b:48:aa:
                    34:10:26:a3:36:77:87:dc:2a:22:bc:1c:88:17:88:
                    04:e9:f6:8d:bd:b3:29:84:73:4f:2c:79:a4:e2:dc:
                    49:d3:62:c9:c4:25:7a:95:d5:ec:3f:a3:a5:ee:cd:
                    6d:41:e6:80:98:32:68:41:9d:e5:cb:59:66:37:65:
                    d4:f5:6c:51:a4:f1:bd:d0:5d:bc:c2:44:4f:fe:a3:
                    e9:3b:fd:d0:29:4e:6a:6e:bf:e7:ce:4d:8d:69:ac:
                    3b:0a:be:1e:80:80:51:d3:9c:e7:bd:21:d2:9e:73:
                    31:1d:c6:5e:76:47:f5:9d:27:a9:fa:b0:0d:6b:d7:
                    3b:f7:ef:18:01:f2:57:73:a7:8f:a7:73:be:39:a5:
                    e4:fb:c0:84:af:3f:1c:c4:4b:d2:ae:14:0a:79:69:
                    f9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:EC:D8:D1:F3:9D:48:AF:80:6A:E5:19:74:EE:D4:8E:54:F9:18:DD
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a7c1::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:64:8b:dc:48:cc:a4:23:14:9f:c3:86:94:c5:14:46:1f:c9:
         e8:57:fc:81:ef:5c:14:5e:f7:eb:e1:cb:df:fc:c8:d8:9e:3f:
         d4:6b:c8:cf:9b:ec:70:05:27:cc:1a:79:b9:0a:7a:59:0b:50:
         41:49:59:d2:6d:f0:80:68:1a:be:5f:3e:40:ce:7d:3c:ed:5a:
         8a:3a:fc:04:f9:d7:bb:93:b4:18:dd:19:48:c5:bb:19:2a:18:
         fb:36:e2:22:67:9b:0d:7c:11:5e:be:cf:5c:99:2c:57:4b:f4:
         4a:b4:cc:cc:5b:e7:7d:17:54:20:06:e9:9f:63:5a:f0:bb:64:
         f6:a2:ff:64:f0:f0:71:ea:8a:41:dd:ee:3e:9d:72:07:bf:f9:
         86:5f:f6:78:49:14:f3:ae:3c:9f:c7:c9:84:51:8e:30:b9:13:
         73:42:77:07:0c:28:9f:25:c9:fa:a0:e0:99:70:43:b4:c3:be:
         8d:d1:88:5f:ff:b8:1d:30:52:0e:bb:59:4a:29:a5:f6:e7:b6:
         05:6d:8c:cc:e8:88:f3:cf:37:e4:34:44:8b:02:bb:30:39:c3:
         6d:59:42:b3:04:6f:e1:a0:41:78:3b:c3:07:40:51:95:4e:58:
         63:39:26:13:f5:80:68:a2:d6:cd:8b:08:19:c4:7e:93:14:33:
         b3:55:41:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----