Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144715.roa
File:                     AS144715.roa (raw, json)
Hash identifier:          Ds/edO808/4ke3czJmNeDFW1ynPx7Elh4usRHDF/lLo=
Subject key identifier:   B6:1B:58:80:5E:87:A2:38:FB:6B:F6:66:71:6A:F3:A3:75:BC:19:A5
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4883DF5C81D4140D83677241507BD3CE6E10BB61
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144715.roa
Signing time:             Fri 22 May 2026 04:08:22 +0000
ROA not before:           Fri 22 May 2026 04:03:22 +0000
ROA not after:            Fri 21 May 2027 04:08:22 +0000
asID:                     144715
IP address blocks:        240a:a811::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:83:df:5c:81:d4:14:0d:83:67:72:41:50:7b:d3:ce:6e:10:bb:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:03:22 2026 GMT
            Not After : May 21 04:08:22 2027 GMT
        Subject: CN=B61B58805E87A238FB6BF666716AF3A375BC19A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:54:02:a2:a3:a8:fc:7d:3e:16:48:5a:3e:c2:
                    5d:ec:49:92:75:53:3c:a2:36:fd:c5:0b:dd:22:e6:
                    e0:45:70:f4:4b:b6:63:6e:db:6a:32:32:88:56:22:
                    8a:de:18:7b:02:bc:a9:b8:32:1e:51:de:e2:46:56:
                    ec:f2:3f:44:6d:2c:69:8d:39:bd:97:1b:72:c6:a3:
                    74:22:ae:48:d9:35:fb:6d:d0:56:3e:e4:bb:2b:34:
                    0f:a8:50:ad:09:8c:0d:80:ea:93:b9:a7:73:67:b6:
                    82:18:83:39:70:7b:ec:fc:98:f2:f0:45:a3:37:98:
                    42:59:2f:84:89:b0:f6:c9:0d:b6:be:40:9a:4c:88:
                    1d:00:08:f0:8e:52:74:bd:e6:bd:62:a5:9b:d8:3f:
                    24:4e:0b:25:bb:90:29:ae:6c:b5:f2:28:ab:eb:54:
                    29:c8:6e:44:a7:f8:ab:da:e1:14:b6:4c:35:1e:b6:
                    93:9b:c0:e2:7f:22:78:72:02:ea:91:38:ed:16:7d:
                    fc:0f:2d:27:5c:c1:df:2d:33:a7:fd:69:8c:81:1d:
                    0c:bd:12:15:d3:f5:2a:cf:99:81:ed:54:48:46:68:
                    b6:63:4a:68:29:86:b0:de:3a:44:b6:41:8f:5f:7f:
                    11:e2:db:a2:e2:16:2d:5f:aa:d2:fd:88:2f:e2:61:
                    28:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:1B:58:80:5E:87:A2:38:FB:6B:F6:66:71:6A:F3:A3:75:BC:19:A5
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144715.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a811::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:d4:54:d1:d2:ab:9b:e2:45:f9:e2:33:01:52:5c:5a:9c:67:
         da:df:f4:1a:4a:06:e6:88:ab:91:b5:38:58:c7:ff:d8:f6:54:
         0e:9a:76:bc:3c:bf:85:57:4a:93:fe:c9:fa:53:bf:ad:f7:97:
         2b:17:ab:47:93:2d:e3:5b:4d:b0:af:11:9a:a2:a1:5f:b4:6b:
         98:f6:30:8d:2b:e5:53:07:63:08:80:43:51:cf:96:49:c9:73:
         39:85:4c:06:38:d2:bf:31:b4:67:de:06:74:23:13:a0:13:69:
         e9:b1:82:67:ee:e0:2a:72:11:c5:84:e6:4d:9f:fa:c6:22:ac:
         95:dd:b9:35:87:dc:b1:38:da:7c:ed:03:7c:70:6c:7f:38:c7:
         7d:78:8f:ec:bb:6f:6e:2f:d1:53:62:4a:05:62:1d:30:94:c2:
         5f:b9:c6:eb:ac:50:16:e2:ed:ab:10:69:1a:aa:ec:ee:14:87:
         52:41:3b:53:87:42:cc:ff:cc:49:eb:b5:f9:ec:c5:0d:43:9e:
         cf:af:80:53:ff:eb:3d:a5:83:47:6a:b8:d7:47:ff:b0:a5:84:
         e5:33:10:06:51:a2:0e:25:99:14:c7:8c:e6:bd:09:99:c3:64:
         ac:90:59:cf:61:1d:1f:d4:b1:48:bb:ae:49:70:af:93:2d:a8:
         bc:c7:4c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----