Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144792.roa
File:                     AS144792.roa (raw, json)
Hash identifier:          ZsHTNv4WJsn1aBbJeJvCnypgTrxf2ayAlUwpvlHKLwY=
Subject key identifier:   D5:75:6F:0E:E0:BC:2F:79:26:67:66:2F:88:66:6A:21:00:4F:CA:22
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       03C94E190FFBAC5A1A4C77BF4B90210B227DB1F7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144792.roa
Signing time:             Fri 22 May 2026 06:58:21 +0000
ROA not before:           Fri 22 May 2026 06:53:21 +0000
ROA not after:            Fri 21 May 2027 06:58:21 +0000
asID:                     144792
IP address blocks:        240a:a85e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c9:4e:19:0f:fb:ac:5a:1a:4c:77:bf:4b:90:21:0b:22:7d:b1:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:21 2026 GMT
            Not After : May 21 06:58:21 2027 GMT
        Subject: CN=D5756F0EE0BC2F792667662F88666A21004FCA22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d8:04:dc:77:b5:29:fd:35:23:bd:3a:de:f8:
                    9a:5a:19:bc:d0:2c:71:a9:b8:8f:8a:1b:19:af:1f:
                    b7:e8:20:4c:f1:f7:2d:a2:13:41:0b:0e:7c:81:29:
                    99:10:2c:7d:8a:0c:19:26:ea:a5:dd:24:37:f1:b9:
                    38:34:1a:85:8a:93:70:d8:ba:a4:06:62:3e:40:14:
                    82:f7:61:02:e8:65:d6:1a:73:31:89:9e:1b:c3:e8:
                    80:d2:5f:94:6e:da:54:fe:53:56:59:e5:8d:49:1f:
                    85:11:14:dd:cb:6f:ce:73:d0:a4:2d:a1:77:d4:c8:
                    f6:50:12:eb:e0:ca:5c:e5:84:f5:59:91:6f:9c:a2:
                    bc:46:48:a2:d0:80:42:1d:6c:c3:49:f3:5d:dc:11:
                    3a:53:54:07:65:11:63:f4:a9:a0:00:fc:a2:38:98:
                    25:8f:ce:f8:0b:0c:5d:4c:f4:7b:e8:08:b8:9f:b7:
                    af:a1:e5:a4:55:5a:72:3b:32:f1:d0:78:88:25:43:
                    88:66:1f:41:88:2e:73:43:67:32:18:46:7b:f1:8e:
                    d8:bd:39:05:78:fb:b0:13:6f:86:59:43:d1:c2:b2:
                    73:f5:0e:bf:31:6d:af:02:c1:64:a5:27:78:8d:c1:
                    6f:4a:fd:16:97:53:df:3d:28:ef:4b:7d:79:90:64:
                    6b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:75:6F:0E:E0:BC:2F:79:26:67:66:2F:88:66:6A:21:00:4F:CA:22
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144792.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a85e::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:0a:ba:64:37:9f:d1:59:fc:b3:a2:87:da:56:44:f3:92:8a:
         f9:92:87:7f:a1:71:12:ed:0b:a6:21:43:df:36:dc:cc:b9:95:
         3d:1c:c3:a6:65:bd:df:0d:3d:e5:dc:24:a9:48:c6:65:30:fa:
         f3:a3:4d:69:7b:f7:d7:62:af:43:48:6d:d4:a5:30:0d:86:6a:
         1e:2e:d7:ad:aa:b5:fa:2b:d0:2e:08:d4:9f:33:e8:21:fe:0a:
         2a:70:af:0e:0d:d7:ef:fc:2a:10:d5:08:8a:31:16:fc:0b:78:
         64:eb:0b:ca:8e:7c:99:5b:11:8a:00:5d:1a:cd:49:75:83:f1:
         88:70:15:ac:9e:81:2e:c0:36:56:cc:03:1a:5c:42:f9:62:a8:
         f2:a6:ea:8f:95:c2:12:29:f1:c6:ee:b8:54:19:e6:62:2e:28:
         39:c9:ee:1f:04:12:bd:46:a4:ae:5c:af:42:d6:8d:50:fc:95:
         a2:ef:87:e3:ab:e0:31:c5:cc:18:7f:2c:6a:a1:11:01:e3:5b:
         15:1c:07:1c:e0:cd:0a:55:7f:6e:f5:68:5a:c3:59:4b:6e:94:
         76:59:91:c2:cd:86:b6:e4:4b:12:de:f5:d1:c3:7c:e6:b0:cd:
         7b:c3:06:0f:50:30:33:c1:e3:2a:21:0f:05:34:3e:47:ea:80:
         cc:a5:01:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----