Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144752.roa
File:                     AS144752.roa (raw, json)
Hash identifier:          rTCAjcNulXbEc/yQDQbd5+YoGlAm/zcPaV5yCZ1vdZ0=
Subject key identifier:   6B:C1:7E:70:24:94:5B:B3:47:B5:1B:9E:18:9B:40:17:83:09:10:2A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       64D3FCF9025715DD2E296D59D8A628A0BB99113C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144752.roa
Signing time:             Mon 25 May 2026 06:28:29 +0000
ROA not before:           Mon 25 May 2026 06:23:29 +0000
ROA not after:            Mon 24 May 2027 06:28:29 +0000
asID:                     144752
IP address blocks:        240a:a836::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:d3:fc:f9:02:57:15:dd:2e:29:6d:59:d8:a6:28:a0:bb:99:11:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:29 2026 GMT
            Not After : May 24 06:28:29 2027 GMT
        Subject: CN=6BC17E7024945BB347B51B9E189B40178309102A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:81:81:29:ee:b2:5a:6c:6e:1f:f4:f5:eb:42:
                    da:35:aa:06:d1:f3:2f:d3:4a:c0:37:f1:39:c1:36:
                    78:8d:76:de:65:65:51:1a:a9:d0:09:77:8f:ec:11:
                    9a:1b:dc:bb:78:62:f3:fd:32:55:98:8c:26:b5:93:
                    1d:99:c9:9a:e8:d0:3c:d9:57:dd:11:c0:df:be:f5:
                    a4:d7:06:23:39:d3:ba:18:b6:a9:31:70:cb:06:7e:
                    b0:8c:33:2d:a5:26:11:65:d3:50:95:91:91:8d:a4:
                    33:e2:11:89:07:61:76:d3:f2:be:4d:3a:c3:9e:de:
                    e0:e7:6a:a5:2f:93:86:31:2d:ad:d0:da:cc:4d:91:
                    73:ef:45:a7:c6:30:59:77:a9:c1:01:a8:a0:b2:34:
                    04:0b:a9:24:88:2a:18:9c:80:56:b9:0d:dc:17:c9:
                    af:47:de:05:42:da:37:95:a2:90:80:88:a1:5d:e8:
                    55:da:25:32:2b:f6:e9:58:cb:94:97:c7:db:62:26:
                    0e:1d:b7:71:37:0d:af:d7:9c:9d:7b:5c:0a:e1:f6:
                    1a:c0:f2:ae:24:d8:0e:9f:73:af:11:62:64:85:82:
                    98:82:31:65:39:2c:10:b6:da:bd:3d:3c:38:87:a7:
                    53:f7:c9:48:cb:b3:09:ba:ec:9e:73:42:bc:1b:a8:
                    9d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C1:7E:70:24:94:5B:B3:47:B5:1B:9E:18:9B:40:17:83:09:10:2A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144752.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a836::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:af:dc:88:a1:3c:1d:1f:ed:44:7c:37:a8:a0:a5:c6:38:c1:
         a6:f2:c5:e7:fb:e7:19:3c:67:94:39:15:2b:53:cf:fc:1c:1b:
         0b:88:f3:33:9c:fe:55:29:c9:63:30:99:f5:1b:59:d5:60:b2:
         78:46:e8:42:c3:b5:5e:4e:87:04:7b:ef:4b:60:a1:42:07:56:
         1a:23:60:36:38:dd:20:25:be:05:26:94:ea:4a:95:9d:f7:12:
         11:fa:33:b3:3d:6f:12:1c:37:40:3e:19:d3:24:62:fd:51:39:
         5c:08:5a:95:ce:bc:60:7a:79:bb:9c:21:97:73:c8:43:98:dc:
         37:23:b0:7c:a7:67:b3:e0:47:cd:8c:17:a7:10:c9:da:d2:07:
         8f:f9:4d:fb:de:a0:a9:0c:3d:26:cf:88:ef:1e:64:82:1e:1a:
         7d:70:ae:ec:af:c1:60:44:31:c2:85:55:5a:e8:7d:89:5f:37:
         99:8b:11:a8:1c:6a:e9:d0:0b:b6:89:31:4b:d5:4b:6d:42:d3:
         44:56:48:b2:0d:0d:fe:dd:05:9f:c1:97:b6:14:ce:5f:dc:47:
         e3:e2:65:df:b5:03:fa:56:cd:5a:eb:d6:a7:ed:75:5b:59:e4:
         19:02:cb:a6:c8:90:32:70:15:d0:99:ca:9b:34:8c:82:b5:ea:
         e0:88:a7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----