Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144831.roa
File:                     AS144831.roa (raw, json)
Hash identifier:          Tzm6k55QBPq0r3nyOVKNwy7nWmls1LEu+tzrMWlEzis=
Subject key identifier:   15:DE:C8:24:FB:3C:9D:9D:FE:42:4A:35:61:50:04:F7:B5:73:FE:E2
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1C3041CEA761005B57C1F108AD3ACEBD3062A6D0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144831.roa
Signing time:             Fri 22 May 2026 06:28:03 +0000
ROA not before:           Fri 22 May 2026 06:23:03 +0000
ROA not after:            Fri 21 May 2027 06:28:03 +0000
asID:                     144831
IP address blocks:        240a:a885::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:30:41:ce:a7:61:00:5b:57:c1:f1:08:ad:3a:ce:bd:30:62:a6:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:23:03 2026 GMT
            Not After : May 21 06:28:03 2027 GMT
        Subject: CN=15DEC824FB3C9D9DFE424A35615004F7B573FEE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2a:c9:9a:4e:a0:7d:38:e5:ad:cd:32:dc:cd:
                    03:31:b1:16:10:d1:93:f5:7f:94:a4:c1:ad:ab:12:
                    14:ef:f4:89:6c:2d:a8:6b:0c:7f:12:9a:2f:85:7c:
                    b6:df:17:2e:58:0f:0d:b2:ef:45:e1:15:82:be:2d:
                    fe:10:d0:38:07:2a:2e:af:d4:c4:23:de:aa:77:b7:
                    69:42:e5:9e:7a:83:77:4d:96:c1:78:e8:1b:b1:5e:
                    92:25:33:fb:ea:3a:aa:b9:9a:ed:0b:99:aa:bc:1a:
                    84:6c:54:1e:cd:cb:24:29:c7:ad:98:27:a3:fe:e0:
                    a6:ce:0a:5a:07:d7:d3:b2:91:33:a8:fe:a5:21:ea:
                    73:66:77:f5:a6:bb:c5:54:fb:1f:31:af:01:65:e5:
                    32:13:04:e1:7a:d8:f1:35:fa:b5:71:91:c7:bd:c5:
                    ca:db:da:17:12:17:bb:47:ac:e9:84:2c:de:03:48:
                    a3:e7:d0:9f:05:49:33:b4:8c:76:be:aa:03:b0:4d:
                    56:f8:71:69:17:0f:b3:cb:b1:3f:2c:19:3e:44:96:
                    c4:54:38:de:33:eb:c8:1f:fe:35:9c:83:2c:10:94:
                    56:18:71:13:a5:e0:91:fb:24:ba:4f:a4:92:72:da:
                    0f:6d:01:03:c5:57:46:54:b0:91:93:8f:a7:b5:d3:
                    23:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:DE:C8:24:FB:3C:9D:9D:FE:42:4A:35:61:50:04:F7:B5:73:FE:E2
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a885::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:dd:15:67:25:b7:5a:f4:77:a4:d6:12:60:9b:c6:27:57:78:
         b3:11:47:43:d0:e1:1a:fd:fc:43:f8:0c:10:49:fa:2c:c2:a2:
         e2:b8:af:a4:1a:25:a9:24:cc:ca:48:79:41:cd:95:2c:b0:5e:
         b8:88:c0:ad:86:cd:31:17:3f:e3:72:6e:56:84:f3:97:11:6f:
         31:be:f2:51:ef:f2:29:c4:4b:ae:cd:b0:27:3d:d9:be:bf:65:
         e6:86:5a:fa:17:0b:31:02:ad:d6:2c:76:fc:79:3b:82:8a:ae:
         c1:d9:b9:fa:65:dd:be:2d:f3:86:1b:26:55:2e:57:82:88:40:
         46:35:e2:46:a3:f8:2c:4f:38:84:3d:84:ce:d3:29:79:38:38:
         95:13:d9:ca:5a:7c:28:01:06:d5:d0:c7:0d:5a:07:b2:01:d7:
         6d:03:40:49:ae:6c:6d:d5:38:79:53:54:0b:4d:da:95:56:aa:
         26:ef:75:c5:64:d8:d8:09:4b:03:26:04:fa:94:82:0c:65:71:
         09:f4:d5:58:d4:2e:bf:f2:7d:4e:43:1b:d0:0d:d1:27:ee:27:
         7a:0d:a1:08:97:3a:1b:32:36:53:cd:cd:b9:3d:b7:d6:64:90:
         df:9c:74:2b:90:37:ed:48:7b:51:6a:5f:f4:a6:60:7c:c1:a7:
         a1:1a:04:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----