Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144676.roa
File:                     AS144676.roa (raw, json)
Hash identifier:          gG/s6HlW6UbEIrrvV97jX+heuWNaWOEn2gwpDqIZX8g=
Subject key identifier:   1A:BF:A7:D2:EB:DF:C5:3C:80:9E:01:F6:0C:8B:60:34:AD:50:43:6A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       14C4F6DB3E13F6BD3B1564CFF1988F7457F08D8D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144676.roa
Signing time:             Fri 22 May 2026 07:08:46 +0000
ROA not before:           Fri 22 May 2026 07:03:46 +0000
ROA not after:            Fri 21 May 2027 07:08:46 +0000
asID:                     144676
IP address blocks:        240a:a7ea::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:c4:f6:db:3e:13:f6:bd:3b:15:64:cf:f1:98:8f:74:57:f0:8d:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:03:46 2026 GMT
            Not After : May 21 07:08:46 2027 GMT
        Subject: CN=1ABFA7D2EBDFC53C809E01F60C8B6034AD50436A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5b:1a:df:3c:26:8c:ef:75:02:f0:31:de:61:
                    69:33:a5:a0:6f:54:5c:0f:eb:a2:bc:d6:42:77:e2:
                    39:2f:62:f6:9d:46:3b:a9:9a:f3:13:95:98:d2:7d:
                    8c:83:4b:41:29:d8:f0:eb:d0:18:26:5e:54:f9:a3:
                    39:d5:40:21:89:b2:41:ed:13:0a:f0:18:07:d3:9a:
                    3c:20:5d:89:01:84:62:b1:b4:63:c6:3b:f8:1d:c9:
                    18:2b:13:0f:02:4a:c9:d3:b0:56:23:c6:f6:01:3d:
                    3d:d3:0a:c9:45:d5:a8:56:a4:a8:42:a3:f8:c6:d3:
                    b2:b2:e7:6c:d8:7f:5a:f6:89:c4:53:ba:31:1c:d7:
                    f6:aa:c8:7e:21:fb:13:f0:44:3b:c6:0c:17:de:94:
                    f2:5a:20:dc:d9:b8:7e:76:24:30:09:d0:99:a5:04:
                    48:a8:d5:37:5b:cf:e2:21:ea:e4:f9:9e:54:60:2a:
                    0f:f2:50:42:a6:c8:2d:cc:56:db:89:08:57:a9:3d:
                    79:8c:44:26:5e:14:35:72:1a:77:99:b9:af:12:54:
                    c9:7e:93:54:51:4a:3b:47:9e:1f:46:9e:fc:2c:9f:
                    57:23:f8:2d:72:cd:c1:56:85:6c:7c:f9:97:58:6e:
                    fa:ed:3a:00:5b:e7:08:ae:d4:82:13:c8:4f:d3:c9:
                    4d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:BF:A7:D2:EB:DF:C5:3C:80:9E:01:F6:0C:8B:60:34:AD:50:43:6A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144676.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a7ea::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:c7:ce:59:6c:3b:b3:7c:77:04:e3:99:91:1d:56:31:fb:93:
         df:ae:2d:4b:a2:2d:1c:3b:b5:5f:0c:c3:b6:f7:7a:1a:be:16:
         8c:86:ef:24:ec:ce:3f:cc:f1:63:a8:e5:a0:1f:d3:b6:24:8b:
         c3:25:5c:47:5a:e2:e2:2e:77:13:b6:e3:ed:3e:94:d3:64:c6:
         c6:9a:33:49:8e:09:cf:7c:5b:44:6e:1d:20:79:3b:03:f4:ec:
         f1:97:c9:0b:e2:ee:a1:de:55:35:75:29:ae:21:e6:bd:33:93:
         b1:80:83:38:58:d3:07:db:e6:61:18:aa:4b:47:b2:1d:8e:1d:
         08:6e:c3:e5:c3:36:83:a1:fb:67:57:5e:cb:64:ce:5c:f1:2f:
         ae:f2:5a:fb:0b:f7:0d:06:28:cf:cf:ac:d3:e1:0d:a1:a7:18:
         fa:65:93:33:27:c0:70:90:d2:78:d2:9c:43:67:9a:e4:24:d9:
         31:b9:40:8c:b7:07:33:27:88:6e:8a:e4:23:ee:5c:d3:e3:e3:
         b6:87:4f:64:b0:05:9d:d8:ee:a2:f3:08:80:bc:e2:fd:ae:74:
         66:ca:8d:33:be:2c:e5:06:1c:93:2d:7c:0c:9a:dd:fe:5f:3b:
         ad:b8:c9:94:9b:37:cd:4e:38:eb:b8:5d:a1:e7:4d:8d:f5:c1:
         46:16:dd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----