Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144754.roa
File:                     AS144754.roa (raw, json)
Hash identifier:          o2379CaUlcFqDk/6cc1VEA67YAzJUDCO991xJxS8a1E=
Subject key identifier:   86:D9:5D:72:50:E9:4F:4D:F2:F3:98:00:F5:D0:6F:9D:6D:00:04:56
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       515951EF1360621810DA68AEAA17F0ADE190483B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144754.roa
Signing time:             Fri 22 May 2026 04:26:46 +0000
ROA not before:           Fri 22 May 2026 04:21:46 +0000
ROA not after:            Fri 21 May 2027 04:26:46 +0000
asID:                     144754
IP address blocks:        240a:a838::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:59:51:ef:13:60:62:18:10:da:68:ae:aa:17:f0:ad:e1:90:48:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:21:46 2026 GMT
            Not After : May 21 04:26:46 2027 GMT
        Subject: CN=86D95D7250E94F4DF2F39800F5D06F9D6D000456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1a:90:ec:31:d8:f4:35:d9:4c:20:55:94:34:
                    e6:2d:6a:18:b7:a2:14:ed:9d:67:29:fc:2f:b6:e0:
                    9c:2f:96:9c:85:9f:6d:a0:a2:8d:27:4f:f9:a9:e2:
                    e8:b7:d6:5a:ba:e4:4c:5a:9a:53:17:2c:d4:47:15:
                    c4:e6:92:4c:76:cf:d6:ab:2e:6d:30:bb:67:2d:38:
                    af:f2:65:2f:b7:be:96:44:92:7f:1d:4e:ba:12:75:
                    09:9e:2c:a9:3e:62:37:47:57:c6:f6:0e:81:8b:8e:
                    ee:e2:fc:a2:2d:e3:37:d9:9a:5d:7e:c8:d9:a7:4f:
                    18:83:06:00:6d:02:ed:13:12:0e:a4:8c:39:03:cd:
                    00:b7:2a:ef:0e:cc:fc:55:b0:29:cd:63:66:1a:36:
                    af:cb:ae:6c:42:47:a1:c4:9e:18:61:9e:5c:4f:81:
                    4e:8f:a2:8b:f5:bc:a5:83:2d:ec:0a:23:eb:e5:eb:
                    08:f9:1f:99:a6:1f:6c:53:34:6e:12:b4:ef:5c:da:
                    c0:a4:88:b1:76:35:5c:c5:93:4e:54:ab:bb:80:bc:
                    7a:d5:00:b3:6c:0a:9d:6c:5d:94:72:d9:80:9b:db:
                    cc:04:2c:a0:5c:50:0b:25:e2:e6:22:5a:26:4b:c4:
                    31:9d:6c:aa:c4:4b:77:a5:5c:b6:02:8a:f3:25:76:
                    15:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D9:5D:72:50:E9:4F:4D:F2:F3:98:00:F5:D0:6F:9D:6D:00:04:56
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144754.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a838::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:71:1c:32:8b:b3:54:54:d9:92:c7:a6:87:9f:97:77:b1:61:
         cd:9b:aa:6a:53:ca:36:0a:5c:71:0c:ae:4b:dc:72:d2:30:d3:
         0c:d8:d3:91:fc:26:63:23:ce:29:5c:bc:29:b1:07:de:4a:b2:
         e9:23:b9:a1:10:d7:7d:85:ce:10:8f:f8:8b:a7:9f:8c:40:e9:
         6a:f6:60:db:60:9e:97:7a:be:79:27:ff:6a:fe:ba:e1:c8:09:
         62:81:d6:47:37:df:15:d7:f6:e5:40:37:d9:eb:2c:f5:d9:fa:
         dc:ff:42:8a:40:a4:fd:fe:10:11:81:46:75:ea:7b:75:27:9d:
         a6:31:00:b0:02:eb:52:91:98:c2:58:c2:ac:23:03:cf:ff:43:
         d2:11:1f:a1:e6:2f:65:e7:73:6b:5c:bd:4b:03:c0:60:fe:da:
         df:5d:73:75:8a:70:17:6c:e7:25:59:74:ed:52:80:9e:0a:20:
         ec:f2:8c:0d:fe:9a:b8:ef:3d:e1:53:79:8d:23:52:e0:87:f0:
         57:aa:1b:34:08:01:81:d8:43:0c:7e:95:d1:46:d0:ce:2e:2d:
         67:c4:af:37:1b:c9:39:61:bf:f0:ad:11:ac:16:69:af:fc:99:
         5b:57:df:7f:95:d4:cc:87:f1:06:5a:c0:79:fd:51:29:ff:2f:
         b1:da:25:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----