Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144661.roa
File:                     AS144661.roa (raw, json)
Hash identifier:          pzEv/VbMpdbLQMgvWJBomgUnfXZG83zDKD5513LLuAE=
Subject key identifier:   75:7C:EE:51:67:66:86:1A:B3:FB:B2:FF:B6:27:E3:2E:3B:37:52:52
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       081DC10DD5D6DDABDAC4FB1E4E4656F4349D0E3B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144661.roa
Signing time:             Fri 22 May 2026 06:46:29 +0000
ROA not before:           Fri 22 May 2026 06:41:29 +0000
ROA not after:            Fri 21 May 2027 06:46:29 +0000
asID:                     144661
IP address blocks:        240a:a7db::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:1d:c1:0d:d5:d6:dd:ab:da:c4:fb:1e:4e:46:56:f4:34:9d:0e:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:29 2026 GMT
            Not After : May 21 06:46:29 2027 GMT
        Subject: CN=757CEE516766861AB3FBB2FFB627E32E3B375252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:99:f5:dd:20:78:b4:82:e2:5f:b4:c3:8c:9b:
                    36:f7:2b:bf:a8:ad:1c:35:3a:35:49:c8:37:50:d4:
                    06:5a:a3:58:e4:02:61:a1:ff:91:c8:cb:b9:8c:dc:
                    28:ec:0b:65:af:e1:ae:10:ae:85:30:bb:4e:c9:ae:
                    3f:28:dd:3c:29:15:69:c6:a6:00:21:86:20:6e:b5:
                    97:ca:f2:07:61:83:16:5f:c7:37:eb:4d:7f:b5:a8:
                    a2:14:60:88:81:a4:27:ee:65:af:3a:e0:eb:65:fd:
                    74:7b:b3:f8:38:50:50:7e:c8:da:b5:b6:7b:a8:33:
                    9e:2f:b2:e8:40:55:a1:28:20:3a:a1:cd:8a:ee:57:
                    12:e1:ab:b2:da:bc:a7:0b:e4:d6:ff:da:5f:e2:b0:
                    88:a2:53:ee:1f:97:63:bc:70:0d:6e:29:dc:ab:a5:
                    87:64:9f:d9:10:1f:61:6b:4b:fa:80:5c:5a:df:5a:
                    20:e9:a2:10:06:a9:30:40:c0:a0:a7:b4:98:18:2d:
                    4c:c9:9f:fa:6a:3c:4e:41:f1:b0:d5:db:ee:28:28:
                    39:4a:86:00:90:88:d3:86:7d:47:b0:52:55:7d:87:
                    8f:cf:f1:92:a9:9f:b0:05:7b:8c:37:ec:7f:ef:76:
                    da:d3:fe:fb:30:ca:bf:10:cf:ce:31:95:3c:ef:30:
                    aa:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:7C:EE:51:67:66:86:1A:B3:FB:B2:FF:B6:27:E3:2E:3B:37:52:52
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144661.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a7db::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:a1:06:5c:17:d4:ab:83:1d:04:3e:d4:ec:f2:4a:a2:5f:90:
         c5:8a:36:a9:3b:4f:16:cf:ec:f9:bc:3b:15:6e:6b:e3:3f:f0:
         6b:4a:bc:27:ff:18:0b:06:84:8a:21:f9:b5:b6:bb:cf:87:56:
         57:2d:f6:8a:4b:f0:6d:f2:51:0a:a0:2d:d5:f1:61:cc:61:c3:
         a5:c6:df:a8:11:53:3a:f4:c3:9d:ba:61:ce:b8:40:79:13:96:
         8a:eb:77:5c:89:5d:0c:f1:18:a8:24:8a:b4:ca:74:30:e1:0f:
         fa:08:b4:89:8d:fe:be:f9:6f:ce:51:91:a7:64:3e:a7:d7:00:
         d1:1f:3b:69:5e:e5:3b:c6:9b:7c:34:16:59:9c:0a:98:ff:8f:
         8b:e3:79:91:8e:cf:ff:de:ed:c7:61:19:15:12:9e:bb:27:90:
         1e:6f:81:04:d6:8e:6b:0b:c3:6a:05:8b:4a:79:34:db:6f:6e:
         9c:3d:ed:a7:af:51:19:08:43:3e:d6:a9:6a:f3:e6:89:a6:d6:
         4a:eb:6f:d7:a5:ea:ec:7f:dc:94:25:2f:47:8e:97:07:d7:e9:
         b6:e2:c7:94:bd:6a:c5:b8:82:fc:dc:30:c6:56:65:b2:e5:93:
         c5:78:7d:07:ae:46:63:18:da:47:fa:a7:71:f2:8b:5e:73:73:
         76:7b:a6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----