Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144758.roa
File:                     AS144758.roa (raw, json)
Hash identifier:          uAgJOA/TPjbRgZhNYbB0z+/rpcQTKscZmrs3luSbWHY=
Subject key identifier:   74:D5:9F:A4:77:3D:0F:50:F7:F5:FE:18:1E:6E:18:E6:CC:04:2A:FD
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       61EC86735274B768F183B97A35AC9AEF298BE791
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144758.roa
Signing time:             Mon 25 May 2026 01:51:36 +0000
ROA not before:           Mon 25 May 2026 01:46:36 +0000
ROA not after:            Mon 24 May 2027 01:51:36 +0000
asID:                     144758
IP address blocks:        240a:a83c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ec:86:73:52:74:b7:68:f1:83:b9:7a:35:ac:9a:ef:29:8b:e7:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:36 2026 GMT
            Not After : May 24 01:51:36 2027 GMT
        Subject: CN=74D59FA4773D0F50F7F5FE181E6E18E6CC042AFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:7c:a7:96:4a:49:77:68:fd:e4:3e:79:1c:ee:
                    0d:fa:08:bc:87:02:f9:09:15:6d:00:20:1e:66:63:
                    e5:e5:1c:9d:f1:bb:f1:9d:b2:2a:1e:75:93:7a:00:
                    12:38:2c:13:e7:5d:5c:45:45:5f:61:35:6f:73:ce:
                    71:5e:43:f3:a4:46:3c:f8:cb:c6:09:8e:bf:b6:5c:
                    dd:5e:5e:de:4c:ca:fc:ed:f8:e1:3a:c5:c1:e6:34:
                    94:68:84:37:f6:bb:14:44:ac:1c:3b:0c:8f:85:63:
                    3a:d8:f3:38:50:4d:bf:26:09:38:f0:93:e0:24:54:
                    6a:16:7d:10:ee:e6:08:d6:8a:a0:76:a0:e0:ab:de:
                    32:25:7c:61:8d:9d:a2:57:c4:d3:fc:3c:3f:85:d1:
                    f1:b8:72:cc:9d:27:f4:6f:e4:3b:34:1c:8b:25:b9:
                    74:cd:df:bb:ff:0b:c4:73:bb:a1:b2:e9:16:8f:74:
                    dd:8e:f8:1b:e0:bd:6e:27:0b:49:9a:45:06:34:81:
                    7b:b9:ca:00:6a:d6:d2:ec:c4:5e:10:f9:97:cf:30:
                    3b:90:ee:19:67:ef:18:00:cd:f0:9c:d8:bd:87:dd:
                    fa:b1:ef:21:1b:88:ad:3d:41:9e:6e:d4:1c:97:11:
                    7e:c6:a6:6c:20:0a:eb:42:f4:28:4e:aa:cc:fa:72:
                    46:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D5:9F:A4:77:3D:0F:50:F7:F5:FE:18:1E:6E:18:E6:CC:04:2A:FD
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144758.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a83c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:be:a7:1f:b0:9a:e4:0d:8e:e0:45:c4:38:ce:b3:c5:8e:4d:
         58:fd:c1:80:dd:f8:1c:be:4d:dc:a8:92:cc:26:7e:71:76:92:
         e1:a4:39:36:2a:37:25:13:12:75:e2:89:9a:fe:a6:75:e9:c3:
         55:65:05:5a:42:8e:a4:87:02:15:ce:39:11:fb:7b:07:fd:ad:
         e8:c3:86:7c:a8:63:c5:ee:65:4d:36:11:ff:9c:da:1e:e6:e6:
         23:b8:ea:33:e1:15:0d:f8:3a:96:e9:c6:02:f0:23:e0:98:93:
         f7:8c:bb:f1:77:37:d0:89:44:aa:89:bd:0f:76:d1:de:d3:e0:
         30:d8:f7:58:20:1c:f3:8d:f1:98:eb:77:2a:75:bc:7c:c2:67:
         3b:aa:21:4a:7c:e0:c8:80:66:f5:ff:93:45:53:18:80:5f:1c:
         a6:8b:a9:9f:d2:ee:35:21:6f:fd:7b:1a:9c:6b:9f:56:bf:5c:
         84:f8:23:2d:59:26:f9:1b:8c:10:f8:48:5e:3a:90:4d:fe:20:
         b3:2a:d0:df:33:44:a5:42:76:e7:43:80:7a:a2:f0:4d:71:38:
         ab:4a:3e:70:4f:7c:6c:f3:37:53:0a:cd:d5:4c:6c:22:8b:ac:
         e4:a4:39:f5:e7:c4:52:ae:2e:13:80:86:88:1c:69:83:1b:ec:
         6e:12:9c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----