Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144823.roa
File:                     AS144823.roa (raw, json)
Hash identifier:          X4FQ5o2rN2Q9heeqMaTQes9rP9GjUfhInxd+l2lD+1M=
Subject key identifier:   51:6D:22:E7:D4:0F:F5:4B:21:D0:43:15:52:F6:F7:1C:D1:3F:47:93
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       28CB0D9F1D3AF1C34584FCB287E873498625B20F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144823.roa
Signing time:             Fri 22 May 2026 04:07:58 +0000
ROA not before:           Fri 22 May 2026 04:02:58 +0000
ROA not after:            Fri 21 May 2027 04:07:58 +0000
asID:                     144823
IP address blocks:        240a:a87d::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:cb:0d:9f:1d:3a:f1:c3:45:84:fc:b2:87:e8:73:49:86:25:b2:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:02:58 2026 GMT
            Not After : May 21 04:07:58 2027 GMT
        Subject: CN=516D22E7D40FF54B21D0431552F6F71CD13F4793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ea:0b:81:19:fe:25:1a:5f:c1:1d:c7:48:56:
                    a5:6e:0b:f1:0b:7b:ff:54:4d:01:08:93:b6:ac:6e:
                    70:cd:6f:d1:7f:23:be:6f:c0:76:80:f8:1a:44:fb:
                    f8:d4:0b:0c:55:47:d6:b7:1e:59:75:b4:01:a3:bf:
                    1e:19:8d:c1:15:8d:90:b3:65:fc:67:27:3f:7b:86:
                    51:0d:12:be:84:5b:ba:62:0f:6f:0b:91:bc:15:e8:
                    dd:20:36:54:0e:96:7e:04:54:75:b4:b3:e3:83:5b:
                    fc:85:04:9e:00:60:25:57:22:1f:14:69:9e:f7:bc:
                    6d:dd:1c:c8:11:e9:fb:a9:13:d9:66:19:e9:5b:3d:
                    ce:f7:98:68:8c:99:46:12:f0:18:f4:35:aa:09:40:
                    61:bc:ec:f2:26:cd:76:07:25:4a:62:a9:d0:99:b3:
                    1f:a9:a5:26:a6:08:6c:7d:a1:07:c1:3f:3b:66:a0:
                    2f:7f:ae:42:fe:61:fb:29:35:c7:95:ed:1d:b4:7b:
                    98:6e:e0:4a:08:26:89:0d:df:da:24:df:ba:e0:00:
                    b8:69:7e:20:5f:3c:08:c2:f0:9c:9c:29:8a:ff:ed:
                    1f:40:52:73:8b:06:bd:20:72:fe:d4:4d:d1:f3:d9:
                    6b:b8:ad:3b:76:92:d9:db:40:b7:7e:12:fa:bf:d0:
                    5f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:6D:22:E7:D4:0F:F5:4B:21:D0:43:15:52:F6:F7:1C:D1:3F:47:93
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144823.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a87d::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:0f:46:ad:f8:12:6e:9d:11:62:7d:f5:fc:af:e6:e4:15:6a:
         d7:fb:54:04:5d:4f:f4:c0:df:58:57:1b:22:f9:b4:2a:08:2a:
         72:42:1c:58:bc:12:5c:e1:a6:65:b3:97:c5:17:e5:23:2b:e7:
         4c:14:06:61:e6:7d:b4:7d:cf:86:26:1d:fb:e1:84:27:2e:37:
         34:25:6e:e6:88:b0:9c:6c:da:38:23:94:42:13:8a:ff:97:ef:
         bd:02:a2:83:84:67:c9:82:e1:37:9b:77:51:1d:cd:57:c4:0b:
         7a:b0:aa:ec:08:41:e5:2b:1d:24:6c:41:68:52:40:1f:b1:c9:
         0e:6d:60:72:c0:d5:65:40:85:45:2a:d9:90:d8:ca:2a:4e:78:
         eb:06:ab:51:bf:8b:1a:82:43:d9:e7:11:37:88:eb:2e:3e:8a:
         59:4f:36:e4:a5:b4:25:cf:89:fe:dc:d9:03:d5:07:2b:3e:26:
         16:6e:1b:e7:df:f3:34:aa:ac:1b:ff:a9:2d:2d:bb:ee:7c:80:
         99:67:ce:cd:44:04:c5:71:80:75:c3:e0:95:a3:5c:46:f5:b2:
         41:56:49:0a:7f:e7:f4:9e:d1:75:a5:50:5a:0e:2c:50:26:99:
         48:ec:a4:f7:36:16:14:de:7a:ff:d5:2e:5f:fc:5f:68:f6:6c:
         e7:ed:f6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----