Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144655.roa
File:                     AS144655.roa (raw, json)
Hash identifier:          jdt9DQQO9drEkd6o+ke+AogrnbrlRc0TFAcJqE9fUPM=
Subject key identifier:   D0:A3:02:9A:F1:B9:42:BD:7F:CF:33:9D:EC:E5:89:D9:2A:3A:6B:C7
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       39271D2C485A00C27221F16167F46D09F6691ACC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144655.roa
Signing time:             Fri 22 May 2026 06:58:39 +0000
ROA not before:           Fri 22 May 2026 06:53:39 +0000
ROA not after:            Fri 21 May 2027 06:58:39 +0000
asID:                     144655
IP address blocks:        240a:a7d5::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:27:1d:2c:48:5a:00:c2:72:21:f1:61:67:f4:6d:09:f6:69:1a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:39 2026 GMT
            Not After : May 21 06:58:39 2027 GMT
        Subject: CN=D0A3029AF1B942BD7FCF339DECE589D92A3A6BC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9f:5d:63:33:2a:08:ef:25:66:57:4f:20:59:
                    bf:92:a7:34:aa:e1:11:b1:a3:26:ce:09:5a:4a:8c:
                    e7:7d:61:1c:47:0c:e6:cd:dc:45:37:cc:5a:fa:01:
                    b0:11:88:a8:c2:31:47:de:51:a0:03:3e:ca:3f:b5:
                    25:ae:ad:7f:a9:da:fa:db:59:59:3a:fe:77:74:f3:
                    31:1d:d8:39:a7:f0:39:1d:6c:76:2f:e9:43:5f:55:
                    a7:95:dc:7e:8a:cd:82:29:6e:84:71:ab:86:b5:27:
                    79:92:a5:98:20:49:e0:d0:9a:bc:b1:a2:d9:55:bb:
                    ec:35:05:8a:9d:dc:c9:b2:a5:a3:a6:a3:79:77:c1:
                    01:cd:88:b3:ae:73:ce:12:5d:f5:16:cd:5c:21:20:
                    f5:de:99:f8:ac:c0:f2:54:9e:ad:10:3f:12:67:6a:
                    07:33:93:56:be:de:22:8e:31:ea:62:1f:01:de:ee:
                    47:d5:7f:35:c8:63:f0:ae:0b:1b:c6:ae:df:b7:23:
                    8e:ad:6d:b9:09:78:b5:54:db:b3:0a:fb:17:49:01:
                    40:40:83:56:c3:a1:ac:23:c4:d8:32:e5:c4:6e:c1:
                    5e:f2:ed:bd:71:ba:b4:7c:4b:18:b5:25:f2:03:ae:
                    b3:9e:59:89:4d:aa:2e:2b:8b:3b:e4:d6:5d:96:a4:
                    34:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A3:02:9A:F1:B9:42:BD:7F:CF:33:9D:EC:E5:89:D9:2A:3A:6B:C7
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144655.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a7d5::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:97:a0:13:76:14:34:64:57:e2:71:4e:8d:c9:99:3d:cd:3a:
         3b:8e:fe:c6:83:52:60:95:9e:86:a6:f4:86:64:14:b5:1a:e2:
         15:9c:9f:8f:8a:04:79:4e:c3:dc:39:0d:f1:09:41:07:e3:64:
         95:a6:a6:b9:1f:8b:74:b4:d5:7b:13:8f:2b:99:5d:89:52:eb:
         75:27:59:da:5c:c3:f3:43:50:4d:10:1f:72:62:fb:1c:fd:ed:
         56:64:3e:fc:94:7e:13:6f:15:46:61:a2:5e:27:a2:86:c0:cf:
         9b:e6:12:23:fb:c6:78:ce:f8:e9:33:62:a5:4e:90:84:ff:64:
         b3:12:fa:f3:f5:a9:e9:77:92:bc:4a:73:39:f7:81:51:bf:ea:
         47:f5:cf:dc:36:87:af:65:50:66:15:ab:cd:12:82:64:22:89:
         33:40:46:80:57:68:66:8c:7d:20:57:fc:a0:bc:7c:22:e5:45:
         50:ee:82:37:bc:6d:6b:b4:20:22:76:d3:d1:6e:97:20:27:cb:
         e4:8c:7c:54:46:82:b6:22:b8:ea:2f:55:b4:64:d6:bc:a5:bb:
         1b:e9:da:0c:a2:96:b1:b7:91:ab:4f:2f:0a:cb:4f:4b:91:ab:
         0f:2a:c2:79:7a:b0:9b:80:46:2c:b5:63:70:36:c9:5d:d3:58:
         09:fc:13:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----