Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144772.roa
File:                     AS144772.roa (raw, json)
Hash identifier:          AJb0CNAk5b5MHFXesze39Kf93ltNJ24TFE+hY+8I0QQ=
Subject key identifier:   B5:60:96:F8:7E:91:53:FA:C4:90:02:54:33:D0:11:E7:4F:15:BD:60
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7E5C6D5B56E89991C88A1362C65951EDD05D39B9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144772.roa
Signing time:             Tue 26 May 2026 03:17:07 +0000
ROA not before:           Tue 26 May 2026 03:12:07 +0000
ROA not after:            Tue 25 May 2027 03:17:07 +0000
asID:                     144772
IP address blocks:        240a:a84a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:5c:6d:5b:56:e8:99:91:c8:8a:13:62:c6:59:51:ed:d0:5d:39:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:12:07 2026 GMT
            Not After : May 25 03:17:07 2027 GMT
        Subject: CN=B56096F87E9153FAC490025433D011E74F15BD60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c1:fe:4d:e3:e5:27:c4:10:50:af:18:99:41:
                    35:11:f8:33:51:86:f7:93:38:80:ae:e3:50:1b:dd:
                    f3:ce:b6:c4:01:40:95:f8:55:7c:c7:da:3f:b8:0f:
                    12:3e:53:2d:92:08:4f:ef:a5:e9:06:6b:4d:76:16:
                    6a:c4:10:41:ad:7e:2d:1d:e2:71:16:89:00:95:0e:
                    f1:dc:73:7b:6c:4f:ef:f1:17:56:a7:77:8e:da:5c:
                    82:de:95:5e:58:b4:67:1b:14:36:c0:e0:bb:b1:d6:
                    46:0c:22:e3:d5:3c:e8:9b:e0:fc:66:8b:45:c4:8d:
                    0e:b2:b0:aa:26:19:88:f5:e0:c8:f0:11:a7:df:f8:
                    15:9f:b2:09:49:e6:a1:0b:c2:2a:7a:46:b7:26:11:
                    f4:9e:a2:c6:20:93:11:fd:de:f6:4b:34:99:6e:b0:
                    33:fd:81:25:48:b6:db:44:bd:41:68:fc:32:56:db:
                    e7:b6:6b:08:95:4a:de:4f:b8:c4:72:1c:96:fb:a3:
                    93:2f:f8:f0:07:e2:1b:b5:bd:cb:05:d7:f7:74:b1:
                    aa:8a:d1:de:c0:2f:65:00:d5:8d:8f:53:03:de:89:
                    53:1a:b4:03:4d:99:fa:24:e1:59:39:ff:79:6c:15:
                    2a:53:fa:70:d5:4d:35:aa:91:4a:84:f9:b3:73:b6:
                    2b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:60:96:F8:7E:91:53:FA:C4:90:02:54:33:D0:11:E7:4F:15:BD:60
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144772.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a84a::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:f7:06:c2:4c:23:a9:c9:89:c1:d5:3b:3e:a9:e9:b6:61:61:
         87:15:78:cb:ec:4d:96:e1:2f:29:54:45:cf:81:dd:80:32:f3:
         02:c0:af:c8:2c:da:e6:6c:70:74:aa:3e:45:59:21:f9:15:c4:
         99:53:33:cd:15:da:0c:d9:65:88:fb:f6:a4:0b:5d:1e:47:23:
         d6:1c:cb:ec:b8:39:e2:0c:0a:44:f1:3b:d5:98:21:76:6a:24:
         1a:e1:28:57:6e:7e:6f:39:7f:f1:b6:b2:39:c8:3b:d8:b9:0c:
         11:26:aa:c6:c4:e8:61:4a:78:57:0d:5a:65:6f:c3:f1:7c:26:
         a4:99:8d:45:87:e4:bf:dd:ed:8c:fa:8e:24:25:03:d6:96:c2:
         20:fa:f6:20:88:7e:f8:4a:db:a4:3f:03:64:35:98:80:e3:a5:
         73:93:85:6c:51:17:e4:4c:1b:dc:3a:2e:fb:d8:86:b9:14:28:
         68:63:21:d1:fd:6b:20:0b:54:b9:2c:ae:a7:70:a7:a5:32:73:
         ff:41:0a:ee:60:5c:1e:87:51:21:96:90:67:97:15:96:12:98:
         4a:89:1a:e8:b3:81:10:be:73:da:c1:48:f0:e1:4c:37:49:4f:
         db:74:e6:44:ee:4d:be:d0:7f:77:82:ef:47:25:9d:0b:eb:f4:
         b4:e7:d2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----