Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144660.roa
File:                     AS144660.roa (raw, json)
Hash identifier:          naeGaOR2phHtYvvCcX20+PEt9hCK5oPtao3cDJWWI14=
Subject key identifier:   5F:5A:2C:1A:B8:21:3D:10:8F:9A:9F:F3:BC:F6:3A:D3:6E:66:95:60
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       41AA6055AB0B367CB9771DB06DC76502EB1706B1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144660.roa
Signing time:             Fri 22 May 2026 06:27:50 +0000
ROA not before:           Fri 22 May 2026 06:22:50 +0000
ROA not after:            Fri 21 May 2027 06:27:50 +0000
asID:                     144660
IP address blocks:        240a:a7da::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:aa:60:55:ab:0b:36:7c:b9:77:1d:b0:6d:c7:65:02:eb:17:06:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:22:50 2026 GMT
            Not After : May 21 06:27:50 2027 GMT
        Subject: CN=5F5A2C1AB8213D108F9A9FF3BCF63AD36E669560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:73:34:0c:3b:19:82:98:28:be:b3:dc:0c:80:
                    11:35:69:18:8c:d3:c4:f5:83:e6:e9:d5:a6:ba:70:
                    71:af:6b:d7:eb:96:78:80:b1:05:c7:94:7a:ef:8a:
                    d2:ab:05:06:7b:6e:6d:61:62:e6:e3:83:94:09:ef:
                    0d:2c:b0:24:7a:0b:f3:62:06:03:da:99:83:9f:9a:
                    b2:4a:18:cd:db:f6:72:2f:98:db:84:4f:b6:9f:1f:
                    9d:1f:fa:21:6d:1b:a8:32:51:2c:b7:bf:0d:f1:d8:
                    3b:e3:4c:ee:bf:1d:f6:65:ec:2f:98:8e:86:8c:09:
                    59:a1:9f:da:01:27:18:27:cb:68:d5:63:8f:25:f0:
                    1c:54:7a:d5:b7:b7:db:e0:f4:c2:b3:db:1a:cd:89:
                    28:65:e7:93:9e:16:52:39:61:bd:f6:8f:13:f2:09:
                    08:a7:75:d5:45:97:28:54:4e:33:95:73:ca:2e:b1:
                    48:2e:30:c0:52:f5:26:00:a1:9f:f1:fb:f6:d9:21:
                    5f:1c:07:d9:8e:11:15:36:dd:e0:62:9e:2f:03:db:
                    68:2c:63:d7:46:7d:ab:01:4d:9e:91:b6:8c:d2:2f:
                    7d:a1:dd:dd:48:27:03:95:70:e1:13:39:1c:91:7f:
                    f2:88:ee:60:80:9d:a7:17:fd:70:b0:6b:73:b6:fd:
                    10:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5A:2C:1A:B8:21:3D:10:8F:9A:9F:F3:BC:F6:3A:D3:6E:66:95:60
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144660.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a7da::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:6d:f0:d2:1a:e9:f0:f2:ab:aa:b0:11:56:ce:ae:c6:64:4f:
         df:9e:7c:7a:40:1d:b6:13:c5:eb:55:72:37:3c:3a:b1:93:01:
         ce:e3:51:df:fa:81:5b:3c:f5:66:e5:09:31:6c:81:f6:f4:47:
         c1:69:19:62:65:01:9d:71:e7:63:de:7f:82:5e:98:5f:b1:d5:
         9e:f6:31:04:4c:5e:2f:50:a3:88:9f:b6:45:db:71:2a:3e:fb:
         b8:17:44:2f:7d:75:03:06:13:0c:01:62:72:c1:73:f8:15:86:
         76:60:df:72:f0:cb:50:0f:90:8d:1c:0d:9c:8a:f8:04:fc:d1:
         fc:2f:7a:53:6a:5e:17:e8:a7:0e:96:c3:c0:32:da:70:f7:4c:
         2d:ed:a6:28:3a:4c:64:14:7c:f9:22:22:e3:b5:f4:50:4f:79:
         c3:7c:29:ff:a6:95:6a:bd:99:05:6d:c7:5b:54:e2:14:df:95:
         6f:0f:71:05:5c:e0:15:49:14:c3:01:52:77:4d:67:57:93:9c:
         2c:bb:15:f5:d7:3c:b8:d8:88:ae:0c:49:02:8f:29:19:2e:a0:
         ec:e8:e1:4b:60:c8:98:94:5f:55:50:61:2a:e0:ef:39:7e:4d:
         c3:13:fe:8b:b2:c8:02:72:0d:83:0d:74:5c:6e:0a:77:dc:d6:
         fb:68:e1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----