Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144753.roa
File:                     AS144753.roa (raw, json)
Hash identifier:          FZRRbT0vIeu5vTG+SDywTcM8IQefs39qPLP07H/0s3k=
Subject key identifier:   96:A1:4C:4E:4F:C2:36:FE:C9:CA:DA:64:40:9E:BE:E0:FA:41:27:B0
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       285D92B8373C8935E714FFABF09194FC6F1C40B6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144753.roa
Signing time:             Fri 22 May 2026 07:32:39 +0000
ROA not before:           Fri 22 May 2026 07:27:39 +0000
ROA not after:            Fri 21 May 2027 07:32:39 +0000
asID:                     144753
IP address blocks:        240a:a837::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:5d:92:b8:37:3c:89:35:e7:14:ff:ab:f0:91:94:fc:6f:1c:40:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:39 2026 GMT
            Not After : May 21 07:32:39 2027 GMT
        Subject: CN=96A14C4E4FC236FEC9CADA64409EBEE0FA4127B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:50:47:56:e0:b0:43:09:bd:e5:e5:2d:09:fa:
                    d1:9d:d3:5c:3d:1f:e1:39:21:dc:05:8e:ba:ed:bd:
                    1c:62:16:07:9e:7a:15:b1:56:7e:61:97:1e:02:1f:
                    12:f9:1f:e9:01:10:fd:90:9e:c1:ca:ef:fb:b0:2f:
                    d3:90:c9:00:bd:ba:3b:19:0f:63:9d:b9:f0:43:bc:
                    13:ad:33:2c:50:18:d4:0b:dd:99:f6:bc:47:fa:3a:
                    6a:e4:f1:29:93:24:9d:03:eb:9e:7d:54:53:ec:50:
                    88:94:e1:87:56:68:e4:1a:04:d4:ed:79:47:4b:e6:
                    ca:b9:9d:67:d8:68:7f:10:20:0d:9b:93:34:3a:bf:
                    c5:57:a6:75:60:2c:42:49:c9:02:dc:bf:1b:fa:5e:
                    ef:e0:14:68:10:e5:7c:eb:39:f8:91:08:ea:68:0c:
                    91:85:b8:74:76:a5:b2:32:f3:4a:3e:c9:cb:a7:35:
                    ad:b5:19:ab:2c:38:17:8a:0b:e7:7b:18:a9:ef:14:
                    bf:e1:5e:44:58:40:fe:99:aa:9a:51:a5:9c:bd:af:
                    2f:5d:cc:23:d3:b8:0e:56:fd:e3:18:cd:34:76:6a:
                    f9:b4:0e:c9:ec:50:da:63:f5:1d:18:89:a9:5f:ca:
                    13:c3:25:9a:8d:7e:1c:b4:19:f3:6e:b5:50:9a:19:
                    86:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A1:4C:4E:4F:C2:36:FE:C9:CA:DA:64:40:9E:BE:E0:FA:41:27:B0
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144753.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a837::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:85:61:85:49:38:4a:3f:e9:9a:b1:0d:5b:0d:48:03:50:a4:
         71:44:33:43:85:89:07:7e:22:44:ab:78:d2:bd:bc:8a:9a:34:
         fe:6c:0f:46:c8:92:78:93:03:a7:df:85:e3:80:7a:99:3a:ba:
         b5:22:62:fb:77:7d:9a:0b:cb:5d:33:ec:0f:34:24:2b:75:3b:
         13:ee:3e:28:79:51:6a:a1:2e:6b:83:5c:81:f4:3c:76:0c:d3:
         21:a8:ae:e2:ff:84:db:99:4d:61:4d:69:ab:2c:2b:0c:ee:37:
         ad:71:1f:fb:19:73:7a:08:71:68:fd:0a:92:6c:24:86:57:b1:
         2f:e7:28:49:47:ce:44:ec:41:c6:fd:8f:be:fe:ac:a6:90:13:
         9d:2c:cf:55:ba:01:97:96:0d:d7:78:4c:a7:69:c2:8e:cd:b2:
         6c:38:fc:b3:b1:11:68:ba:7e:cf:f8:cb:cd:2f:4a:1e:25:ee:
         f4:3f:ed:12:db:8d:22:04:62:53:69:cb:2f:5c:16:93:51:c2:
         68:24:e9:e6:af:9f:f5:5c:ba:6a:60:b5:55:f3:36:e7:91:47:
         d5:a1:b8:ca:af:95:bf:05:af:87:f1:cc:57:43:26:63:22:55:
         12:60:6c:f0:d0:37:26:5c:6d:df:95:06:83:a8:a4:39:a0:78:
         6d:6d:45:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----