Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144757.roa
File:                     AS144757.roa (raw, json)
Hash identifier:          6IGZzq1v9do8qUU5KGwqXlVOA+EIjUJhddx20X+biXI=
Subject key identifier:   FE:E9:FB:CF:8B:35:EB:E5:A1:48:9A:E6:7F:CE:D7:48:E4:86:DF:36
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0700BE536C4158420D9AFF223E01982232023F8F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144757.roa
Signing time:             Fri 22 May 2026 07:41:10 +0000
ROA not before:           Fri 22 May 2026 07:36:10 +0000
ROA not after:            Fri 21 May 2027 07:41:10 +0000
asID:                     144757
IP address blocks:        240a:a83b::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:00:be:53:6c:41:58:42:0d:9a:ff:22:3e:01:98:22:32:02:3f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:36:10 2026 GMT
            Not After : May 21 07:41:10 2027 GMT
        Subject: CN=FEE9FBCF8B35EBE5A1489AE67FCED748E486DF36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:86:f5:f4:c3:c4:88:b5:06:ed:ac:cb:9e:c6:
                    05:ab:9a:18:e9:d7:fd:4d:25:a9:c6:42:a7:4c:3d:
                    fa:29:e5:1e:3a:59:25:a1:8a:a1:af:fd:9a:bd:35:
                    ad:27:df:94:27:77:cd:f6:1d:d0:09:b4:a7:1f:63:
                    73:7b:86:07:ba:10:34:c4:2a:9c:73:44:ed:37:da:
                    7e:d4:24:87:8a:83:05:24:6d:51:77:93:ee:01:ca:
                    24:38:f7:da:c2:41:47:ce:15:e6:6a:c3:34:b0:03:
                    18:1a:35:77:c5:21:e5:68:86:40:34:89:34:cc:1f:
                    2e:76:c4:f2:93:00:1c:21:e6:16:18:0f:7a:53:01:
                    c8:27:c7:69:c4:03:ab:30:a6:67:ff:8f:10:77:7d:
                    ad:9f:1c:19:2e:cf:4c:e0:a8:98:c4:9b:df:b7:25:
                    3b:cd:85:b9:0f:1a:ea:be:04:42:cc:1a:ec:a6:cd:
                    7d:4f:af:66:fa:51:47:ba:ab:36:2f:d7:ad:8b:f8:
                    93:7b:5a:8f:79:bc:19:b4:25:ef:be:c7:71:0d:a8:
                    5e:6e:f4:e6:8c:26:4e:31:0b:05:aa:ac:96:0d:7b:
                    02:17:c1:88:54:5f:b6:88:aa:f2:ea:c4:d2:c9:26:
                    6a:ca:35:f1:02:ad:67:6e:74:b4:34:7d:1c:63:65:
                    fd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E9:FB:CF:8B:35:EB:E5:A1:48:9A:E6:7F:CE:D7:48:E4:86:DF:36
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144757.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a83b::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:db:0a:6a:77:20:a3:8f:54:a9:15:63:20:9a:68:51:5b:d7:
         e3:8d:f9:64:49:0e:e0:1e:19:93:a9:9b:00:ce:b0:7c:42:0f:
         09:67:ff:0a:2e:60:8c:b2:2c:15:57:c4:56:18:4f:bf:87:22:
         58:9e:8c:2d:4e:72:7b:1a:26:3b:df:b7:48:55:39:90:52:5e:
         66:a7:a8:47:78:ff:fb:53:4e:63:91:65:a3:f7:e9:50:42:bd:
         88:54:5b:f3:df:10:d3:94:b2:48:f1:e1:ed:43:34:e5:17:ec:
         18:f0:97:15:d4:34:89:90:70:bd:aa:e1:d0:64:de:58:69:f5:
         62:16:f5:43:94:4b:d8:fa:3a:29:cc:31:46:d1:83:d6:83:77:
         fe:d0:03:a7:49:f3:ea:f4:99:4e:4c:51:0a:6b:c1:7e:89:94:
         74:c7:95:36:c0:e0:86:05:14:6d:c0:7c:67:20:43:d8:11:fd:
         18:fd:98:ee:87:29:87:5b:58:71:8d:b4:dc:3b:7c:00:34:77:
         a7:4c:4e:e2:b7:51:4b:c8:e9:60:22:3e:d4:30:d3:47:26:85:
         e1:23:db:be:83:17:9a:94:c3:0e:6f:37:1a:29:a9:ab:f0:e8:
         af:2a:d0:02:15:62:e3:05:10:39:50:47:f4:c3:71:5b:53:f8:
         0c:02:33:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----