Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144656.roa
File:                     AS144656.roa (raw, json)
Hash identifier:          i8sQpkyGoY/wxQsVF4TKRswvUDA/267kPgxgdjxEiZw=
Subject key identifier:   44:CD:AC:0E:5A:65:81:E7:1F:40:0B:E4:0F:79:76:8E:22:DB:81:95
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       168E61182CAF2EBC61DF0F73CD3F206C100EE00E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144656.roa
Signing time:             Mon 25 May 2026 01:20:11 +0000
ROA not before:           Mon 25 May 2026 01:15:11 +0000
ROA not after:            Mon 24 May 2027 01:20:11 +0000
asID:                     144656
IP address blocks:        240a:a7d6::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:8e:61:18:2c:af:2e:bc:61:df:0f:73:cd:3f:20:6c:10:0e:e0:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:15:11 2026 GMT
            Not After : May 24 01:20:11 2027 GMT
        Subject: CN=44CDAC0E5A6581E71F400BE40F79768E22DB8195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b8:ff:cf:ec:7e:4e:bd:e5:14:0d:93:b2:eb:
                    e4:a8:08:be:47:2e:a9:cb:44:23:1d:34:d0:ef:9a:
                    76:60:22:c2:14:94:fc:04:4a:e7:ae:47:58:03:c6:
                    fb:8a:ea:73:fd:b8:62:60:91:0e:73:2c:30:e1:b8:
                    dc:9e:60:0f:fe:d3:51:ad:a3:04:10:c0:db:db:51:
                    fe:28:23:c8:66:17:d2:21:f7:5c:df:34:5c:76:77:
                    8a:7b:91:12:8e:7b:d6:e6:bf:ce:c7:3b:d5:2e:8f:
                    60:32:a2:50:9a:d2:f2:ee:c4:d4:0c:52:a9:32:73:
                    96:99:00:2a:dc:9c:02:e5:9b:ef:aa:f5:f4:11:91:
                    3e:f4:62:2c:63:fa:c1:e4:57:03:85:41:44:84:a4:
                    3c:d4:78:ce:b6:b6:25:77:4d:0d:c6:bd:c2:0c:a9:
                    c6:e9:3b:6e:34:0f:72:3e:59:96:3b:b8:de:e4:89:
                    5f:3f:45:f6:50:57:33:b8:e0:4b:ab:a3:0f:2e:2e:
                    6c:36:e2:11:40:26:b0:fe:c5:c2:4a:17:cb:95:19:
                    0f:a0:1b:b2:99:02:0b:aa:ea:29:1d:55:72:39:22:
                    37:20:f5:b9:f5:c0:04:97:44:d4:79:d3:21:5d:d5:
                    43:db:95:39:17:3c:2d:ff:c1:4d:a6:94:29:81:e6:
                    42:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:CD:AC:0E:5A:65:81:E7:1F:40:0B:E4:0F:79:76:8E:22:DB:81:95
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144656.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a7d6::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:ee:29:86:b4:a3:a0:df:3a:ce:f6:2e:7a:6f:1a:e8:9a:97:
         d8:2c:f3:db:06:bc:e4:ac:b7:8d:7c:e2:ca:ae:27:65:cc:f6:
         43:4c:1e:be:22:a8:1c:f7:30:99:aa:d3:bd:e3:13:c0:4d:60:
         39:f0:ff:cd:29:52:20:4b:9e:7d:52:00:04:ed:da:7a:2f:66:
         61:c8:55:7e:03:2e:1c:eb:97:e3:0a:10:a1:4b:58:5d:2f:f7:
         36:5b:33:ef:e2:c0:d5:4a:80:6a:1a:92:31:90:db:6e:5a:c6:
         db:31:c2:3c:21:85:94:36:5d:9b:25:75:9b:db:1e:b0:9a:ca:
         8d:b3:3c:5e:da:1d:4e:fc:1e:79:8d:de:52:49:6b:69:02:36:
         31:29:c8:ac:b1:46:50:fe:63:be:8f:a4:90:7f:23:db:61:63:
         fb:82:68:5c:bd:3a:0a:8a:f5:8b:12:58:11:1d:62:0f:9b:b1:
         47:8d:99:cb:5f:35:ae:5e:fc:89:cf:96:e2:e6:83:d5:8b:af:
         29:26:48:cc:02:2e:3a:2a:f1:26:38:74:3a:ae:a2:a9:87:9b:
         2a:27:76:c3:6a:6d:d0:94:90:14:a8:92:8c:a3:9a:61:ce:a4:
         48:f5:cc:eb:1f:5a:b2:96:f1:e6:17:fb:ec:ff:34:94:9b:56:
         32:b2:a0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----