Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144690.roa
File:                     AS144690.roa (raw, json)
Hash identifier:          qz/4nvbGz39QhK9ciJZQJM6WyKpYxRxXapLlzKk2BJc=
Subject key identifier:   C7:B0:88:98:4B:AD:33:B0:9F:00:0F:5D:2E:35:77:0E:23:60:6D:31
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       451AEC2B74F4FD4D0BA27B9F977A58C6A7A151AD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144690.roa
Signing time:             Tue 26 May 2026 06:12:31 +0000
ROA not before:           Tue 26 May 2026 06:07:31 +0000
ROA not after:            Tue 25 May 2027 06:12:31 +0000
asID:                     144690
IP address blocks:        240a:a7f8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:1a:ec:2b:74:f4:fd:4d:0b:a2:7b:9f:97:7a:58:c6:a7:a1:51:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:07:31 2026 GMT
            Not After : May 25 06:12:31 2027 GMT
        Subject: CN=C7B088984BAD33B09F000F5D2E35770E23606D31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:25:2e:69:f3:66:71:49:f0:9d:09:14:7f:e1:
                    84:9f:e8:f7:83:1b:11:6a:ef:2c:aa:02:71:5f:52:
                    96:01:05:0c:ac:9b:dd:27:84:c8:6c:6b:d0:97:fa:
                    ab:28:a5:dc:25:d9:d8:fd:7b:dc:73:8e:2c:15:69:
                    cf:ee:94:91:5c:68:dd:5b:e3:62:dd:f9:c4:42:8f:
                    30:02:ae:74:4c:ca:e7:1c:ad:fb:6d:b5:31:87:76:
                    ef:66:aa:4d:39:a5:a5:21:8d:90:c5:7f:d8:68:bb:
                    42:46:63:bd:21:0c:a8:bd:e6:1e:45:92:ab:e2:4d:
                    cc:0b:91:2c:73:41:89:fb:87:ce:50:5f:1f:2e:64:
                    22:dd:71:78:43:ed:0b:59:e4:be:71:7c:cc:49:6c:
                    26:44:38:d3:d1:db:68:e8:5e:ac:fe:d1:79:69:01:
                    06:5c:b6:78:7c:24:09:ae:09:09:d2:2e:c1:d9:53:
                    c4:0e:9d:2d:29:e0:35:24:47:87:3a:1d:40:28:6d:
                    57:4d:f8:3c:be:0b:97:52:5e:62:fe:30:52:7b:5d:
                    85:67:cc:4d:e0:26:35:18:97:d5:25:d1:d1:e9:3f:
                    5f:b1:77:3e:1a:7e:cf:a2:38:96:d8:7d:b3:42:61:
                    3e:76:c2:83:93:ac:80:a3:ef:73:e5:4d:0a:e1:ab:
                    df:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B0:88:98:4B:AD:33:B0:9F:00:0F:5D:2E:35:77:0E:23:60:6D:31
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144690.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a7f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:5e:f9:5d:3e:f6:64:57:bb:85:e5:8c:88:5e:d7:93:54:06:
         6f:ce:91:07:f3:99:1b:d3:52:dc:21:74:c5:4f:46:cb:77:6c:
         4d:d9:7c:f2:53:4a:a8:d3:7b:13:1c:a4:81:c0:66:3d:05:ba:
         be:ff:68:91:dc:b8:99:3d:6d:c5:1c:a8:01:8e:a4:76:58:d0:
         c7:1a:27:f0:ab:c8:b7:1a:89:9e:95:34:25:eb:88:5c:b8:bc:
         5b:0f:06:c3:66:4a:03:10:cf:f1:9f:f0:2d:dd:16:c3:ea:2d:
         bd:a4:74:5b:a6:f7:e9:d2:1f:4b:30:3f:eb:bd:e3:3a:98:bf:
         de:f1:af:a1:07:06:62:a9:98:41:dc:f1:f8:45:35:c4:4c:db:
         68:81:76:4f:21:00:fb:b4:b8:12:b2:bd:16:35:68:48:a5:ea:
         8d:ad:22:fc:c0:67:95:d6:df:1e:35:33:e0:f1:98:6a:ca:38:
         42:11:c2:46:8e:6b:92:47:26:c2:ab:07:d7:8c:ee:bc:9a:07:
         77:fd:f0:3b:eb:40:84:7d:29:4b:a9:e5:4d:64:85:2f:4e:df:
         fc:8f:3f:7b:f7:0b:78:46:84:b1:2e:f7:81:28:b4:f7:df:cb:
         b8:6f:c8:24:58:5b:35:98:c9:2c:20:30:32:23:fa:c7:77:0e:
         cc:fe:6f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----