Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144694.roa
File:                     AS144694.roa (raw, json)
Hash identifier:          yCJMV0D++BOol9KTudY/0WlTo0GaCllQwBmhlNiajL0=
Subject key identifier:   C9:40:E9:C8:C2:CE:FC:AA:2E:20:9C:5F:7A:2B:AA:58:48:C1:0E:AA
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6ABE209BFEF87B3ACF2A32FB20728476D14E9FD2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144694.roa
Signing time:             Fri 22 May 2026 07:24:31 +0000
ROA not before:           Fri 22 May 2026 07:19:31 +0000
ROA not after:            Fri 21 May 2027 07:24:31 +0000
asID:                     144694
IP address blocks:        240a:a7fc::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:be:20:9b:fe:f8:7b:3a:cf:2a:32:fb:20:72:84:76:d1:4e:9f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:19:31 2026 GMT
            Not After : May 21 07:24:31 2027 GMT
        Subject: CN=C940E9C8C2CEFCAA2E209C5F7A2BAA5848C10EAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:03:20:cf:0f:6d:99:cb:d0:46:67:08:1b:48:
                    d1:c7:bf:d0:c0:28:a6:79:98:a7:da:4c:2c:3f:68:
                    6c:dc:39:97:a5:4c:a3:db:e4:ed:66:c0:b9:69:65:
                    5d:f9:c1:36:06:4c:1c:5c:46:6f:af:f5:89:37:e8:
                    dc:ca:b0:49:56:6f:ed:b9:e4:a1:22:c1:13:23:27:
                    68:5a:76:b3:74:e1:1f:f1:f7:90:42:31:52:78:c5:
                    ec:a9:4e:10:b6:20:ae:59:b2:6a:06:2f:cf:68:15:
                    2a:22:97:05:c3:8b:28:a0:d7:15:4b:bb:39:54:7c:
                    5a:15:b3:e9:cf:01:e4:f9:df:24:df:ab:61:5e:1d:
                    6f:ab:71:91:dc:43:9f:35:91:01:82:b7:60:32:b6:
                    a6:ef:07:25:72:d8:f3:29:63:19:c5:f8:6e:26:5f:
                    3c:df:17:c2:cf:06:77:49:43:2c:49:2c:70:84:c8:
                    0d:1a:60:06:49:7d:cb:91:ad:49:7d:34:9d:36:a0:
                    e9:53:de:16:6a:6a:f9:13:06:f8:96:a4:9a:4a:d9:
                    e9:7c:f4:dc:62:e7:f6:b6:25:5c:a2:20:e0:5a:61:
                    2b:ac:1c:9b:e7:69:7f:3c:5a:ca:17:67:32:13:24:
                    52:24:63:2c:c4:47:25:8c:07:cf:5d:43:91:e9:b7:
                    6c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:40:E9:C8:C2:CE:FC:AA:2E:20:9C:5F:7A:2B:AA:58:48:C1:0E:AA
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144694.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a7fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:7d:88:84:00:e2:00:2e:ad:ae:55:d3:55:a3:fe:20:30:79:
         2c:df:88:e8:c9:24:64:73:93:42:74:5e:25:c0:3d:30:e9:84:
         78:15:2a:f8:88:ce:dd:63:98:e3:55:19:5c:f4:01:3d:a4:1e:
         42:f3:ec:e3:c9:d7:dc:0a:db:88:8b:2a:60:10:f2:28:3a:f7:
         50:89:7f:68:a1:6a:01:ff:ad:23:a8:4e:4d:c7:87:9c:db:90:
         12:68:fb:47:5d:d5:3e:d4:48:25:11:ff:70:15:ca:28:75:4c:
         6f:09:36:c4:9e:4e:12:e5:73:34:3d:3b:6c:ec:9f:f1:bf:83:
         55:81:38:5a:2b:81:e1:d4:3b:53:3a:41:f5:ca:94:1c:59:d2:
         1b:12:99:0f:32:2e:d3:3c:c7:9e:aa:ce:36:08:5e:20:74:1e:
         39:e9:87:d6:46:b4:35:b0:d3:33:1a:4b:5d:9e:f8:10:f6:d3:
         6b:01:80:19:73:f6:4d:33:b8:62:dc:0f:4f:73:c9:34:14:76:
         67:aa:02:95:33:57:b9:7d:e0:1c:79:40:c2:ac:31:2d:89:31:
         b8:16:0f:67:52:b2:68:10:5f:00:92:de:8c:15:cd:b4:d5:55:
         65:f8:bc:a7:7e:c7:aa:0d:ab:8a:35:d1:23:ed:4c:22:6d:8c:
         79:63:70:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----