Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144695.roa
File:                     AS144695.roa (raw, json)
Hash identifier:          /WxDuX1h70x9Y6tlJ/F5E5zweP0uBpMYakWtGdpC2Lc=
Subject key identifier:   65:AA:87:80:14:1B:4A:12:32:86:F3:80:8D:36:38:9E:5A:7E:44:C3
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7B3CA88958CCB8A478F7395943FAE06A7868523C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144695.roa
Signing time:             Fri 22 May 2026 01:50:45 +0000
ROA not before:           Fri 22 May 2026 01:45:45 +0000
ROA not after:            Fri 21 May 2027 01:50:45 +0000
asID:                     144695
IP address blocks:        240a:a7fd::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:3c:a8:89:58:cc:b8:a4:78:f7:39:59:43:fa:e0:6a:78:68:52:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:45 2026 GMT
            Not After : May 21 01:50:45 2027 GMT
        Subject: CN=65AA8780141B4A123286F3808D36389E5A7E44C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:70:c0:33:c5:83:76:ac:18:2f:9d:55:41:08:
                    8c:54:f1:ac:20:19:99:dd:5d:05:8a:30:ff:50:a2:
                    39:b0:0d:fc:ca:99:f2:cb:d5:13:25:88:e5:b6:92:
                    0c:fd:89:3e:36:7f:f0:4a:83:10:3b:e5:7c:c8:59:
                    4f:70:0a:e8:8e:74:a3:21:fc:c2:8d:49:12:20:72:
                    3a:33:3b:07:9b:46:97:50:2b:38:a4:3f:48:a1:68:
                    9a:79:30:86:ad:79:27:27:8a:4b:16:94:e0:cf:b5:
                    e0:9a:02:a4:d6:84:da:ac:3a:2f:8f:9e:0c:88:92:
                    a6:24:fa:e8:b8:8e:22:d8:db:b4:6d:02:14:32:2a:
                    a1:7d:fc:f5:49:9a:d6:79:d6:4b:8f:42:f6:af:ff:
                    a5:50:af:c3:c5:11:8e:3d:96:16:43:ab:c3:d6:d9:
                    81:5b:0d:72:ec:88:5c:31:4c:1b:62:ce:4f:f6:7d:
                    b5:5b:b4:53:4d:b0:3d:d2:ab:ca:94:31:28:9b:b1:
                    84:30:75:b6:7f:0f:14:b3:36:54:64:bd:14:36:bf:
                    c4:70:d4:5a:30:e2:47:b5:58:69:04:e0:88:1e:98:
                    3e:77:4e:82:41:fc:4d:48:58:2a:db:e1:c4:b6:8e:
                    7b:f2:e8:9c:bd:fc:59:73:c0:b3:cc:ee:a4:0a:82:
                    fd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:AA:87:80:14:1B:4A:12:32:86:F3:80:8D:36:38:9E:5A:7E:44:C3
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144695.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a7fd::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:01:0f:da:21:08:b3:52:15:17:cd:b3:85:2f:e8:7e:e8:43:
         c5:8d:c1:a9:6e:e8:d2:8a:c1:69:9d:70:04:eb:d5:87:dc:e7:
         72:74:11:b6:22:c9:98:90:0c:de:13:28:3d:34:a5:fd:39:e7:
         88:89:48:34:c4:6e:bd:ab:16:6c:5b:10:56:9e:98:7a:43:2a:
         04:db:78:95:8c:c1:11:8a:89:01:4b:a3:47:ba:05:37:be:02:
         cc:97:31:31:36:36:b6:24:18:fe:81:eb:88:05:c5:9b:69:bd:
         17:89:b3:e6:60:92:ce:bf:b6:19:bf:82:5b:74:78:54:64:80:
         de:d4:dd:c8:7f:7d:cf:12:df:6c:0c:dc:08:33:4d:55:77:89:
         28:1a:98:40:a4:04:f1:f1:53:c4:02:04:67:46:0f:94:9a:a6:
         26:e6:56:a9:2c:9b:1e:cc:33:4f:f8:fc:4d:ee:99:90:cd:e4:
         fe:94:ea:cc:0d:e8:03:9e:f4:49:37:14:e8:a7:28:d4:04:90:
         68:bf:81:e1:6e:fd:aa:2b:96:ff:04:f9:d2:cf:0f:6e:f1:a5:
         58:7d:32:5e:51:60:21:53:6d:07:4f:ac:51:fd:3e:2e:5c:1a:
         66:e1:d6:7c:df:0a:f2:9a:5d:fa:fe:90:8c:19:d2:76:29:38:
         d8:0b:2b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----