Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144657.roa
File:                     AS144657.roa (raw, json)
Hash identifier:          LGcp9Q5uYjxi6pQ0lIxh68hEB60x88DMN5oko/Qt8VA=
Subject key identifier:   8A:B2:30:8B:B3:DC:23:6C:8B:A0:29:59:89:F8:86:2F:58:F5:36:0E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7940928CE54F7340140A33AB98A33EC31368E270
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144657.roa
Signing time:             Mon 25 May 2026 03:19:20 +0000
ROA not before:           Mon 25 May 2026 03:14:20 +0000
ROA not after:            Mon 24 May 2027 03:19:20 +0000
asID:                     144657
IP address blocks:        240a:a7d7::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:40:92:8c:e5:4f:73:40:14:0a:33:ab:98:a3:3e:c3:13:68:e2:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:20 2026 GMT
            Not After : May 24 03:19:20 2027 GMT
        Subject: CN=8AB2308BB3DC236C8BA0295989F8862F58F5360E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:aa:f3:6b:40:f9:2e:bb:51:cd:02:9d:ce:2e:
                    90:12:38:c3:fb:4e:74:39:c8:c4:37:dd:4a:5e:72:
                    9a:e4:12:76:ea:eb:df:df:10:22:23:47:c0:5a:26:
                    57:1e:66:02:b6:5a:b7:38:66:9f:3d:2f:fc:47:90:
                    e5:02:c6:cf:29:04:2a:0f:21:e8:a2:3a:9f:7f:e7:
                    bb:13:7b:68:e9:a8:8b:7f:a5:a2:61:ca:0e:6b:df:
                    df:7b:c3:74:e6:43:cf:67:de:ba:e1:89:4c:2f:da:
                    d1:7e:64:9d:ce:7b:4f:f7:d3:62:eb:df:29:cb:39:
                    35:f6:e3:2d:85:db:ca:50:8f:d8:9f:78:00:f3:85:
                    c1:c9:7e:b3:8d:7d:6a:56:a8:a9:b3:15:61:96:26:
                    c6:ef:86:d3:b0:19:9b:2e:95:9f:f4:9c:42:7d:9e:
                    84:0d:2e:d3:ac:95:a9:c9:9b:1f:8a:ab:6e:da:03:
                    39:8c:31:e1:04:65:5f:9e:b9:a1:a6:fa:ee:84:62:
                    2d:df:6c:36:37:8c:04:69:0f:a2:c4:42:40:ae:84:
                    57:3e:1a:b0:c4:b3:e6:89:54:a7:8f:16:a5:ba:ae:
                    e1:7f:4a:57:fa:00:36:3e:47:c3:ea:4b:13:16:ad:
                    a6:b5:8e:dd:d4:5f:70:5d:c6:ce:68:80:df:b7:d3:
                    2b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B2:30:8B:B3:DC:23:6C:8B:A0:29:59:89:F8:86:2F:58:F5:36:0E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144657.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a7d7::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:8f:ab:66:d2:ef:b1:73:ab:e2:18:1b:16:44:54:de:fd:f9:
         40:56:ac:ca:29:e4:a0:c4:f9:37:06:03:b0:96:1f:ef:12:32:
         c6:09:fe:92:ae:cf:7c:b8:8e:4f:20:11:c3:97:19:c9:1b:0b:
         f3:ff:e9:db:50:19:3c:c1:83:70:ac:ca:5d:d7:4f:71:d6:ca:
         3e:a8:17:12:77:d5:8c:db:e4:74:04:b2:4c:74:16:65:bb:c8:
         37:50:2b:2f:f5:0c:5e:1c:99:56:64:dd:7f:4b:91:3d:be:4e:
         12:41:33:b0:c6:27:2d:c5:59:af:58:d1:1e:bb:38:00:70:62:
         57:ee:22:a6:d4:12:d2:69:e7:45:c0:ec:88:a6:12:11:7d:41:
         00:43:dd:bd:92:26:97:4a:f3:47:ff:95:2f:fb:ba:06:9b:94:
         0f:5d:47:54:ce:d2:e9:02:ef:15:76:97:94:7b:5a:3e:43:e7:
         e5:0d:15:1f:94:4d:1b:d7:cb:35:c7:0c:c3:ca:e9:dd:fd:0c:
         b8:75:5a:01:90:1a:fc:f0:1b:37:76:71:f4:64:be:0d:1a:ff:
         1a:91:74:b4:ec:99:c2:0b:8a:ae:ec:cf:e3:9c:ac:9d:75:35:
         47:fa:33:3d:63:1a:bd:79:70:1a:4d:aa:4a:34:e0:59:2c:a2:
         58:37:b4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----