Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144842.roa
File:                     AS144842.roa (raw, json)
Hash identifier:          +yGDOPPQadT+JICg98aVsRbtg/Tmc/cb8iGfrfPXJhQ=
Subject key identifier:   7B:AE:EB:B8:46:E1:38:B4:CD:D1:87:AF:09:5C:DC:6B:77:DA:7A:F3
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       11B08C57AB01CAF6ADEB926D24E67576EE1DDAAB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144842.roa
Signing time:             Mon 25 May 2026 01:51:14 +0000
ROA not before:           Mon 25 May 2026 01:46:14 +0000
ROA not after:            Mon 24 May 2027 01:51:14 +0000
asID:                     144842
IP address blocks:        240a:a890::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:b0:8c:57:ab:01:ca:f6:ad:eb:92:6d:24:e6:75:76:ee:1d:da:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:14 2026 GMT
            Not After : May 24 01:51:14 2027 GMT
        Subject: CN=7BAEEBB846E138B4CDD187AF095CDC6B77DA7AF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6d:c2:98:10:61:a8:81:a8:4c:94:75:f5:dc:
                    c5:f8:34:50:fe:8a:0d:ca:e9:44:17:c7:dc:55:9a:
                    1f:bc:2e:cd:21:5a:e7:f5:e6:7f:05:21:04:7d:f0:
                    15:0f:92:ea:2d:1d:7d:ef:d0:62:93:59:53:a1:f2:
                    5e:78:a7:9e:22:7a:d1:d1:ab:2e:f6:e9:0b:fa:4a:
                    2c:99:34:b2:5a:25:ab:01:d4:3b:f2:58:81:bb:e4:
                    4c:79:23:cb:5a:e6:82:a4:cb:ad:eb:5b:b7:7e:90:
                    9c:c7:56:58:b8:3f:45:e7:8b:65:24:2d:9c:4f:5d:
                    0b:80:0a:8b:b0:72:85:a5:b3:1e:b1:ed:52:c2:c4:
                    38:88:60:5f:ba:7a:a2:2c:36:d4:f8:33:fc:73:5f:
                    d0:05:cb:e6:35:dd:dd:4e:ab:eb:7f:be:ac:2d:99:
                    c4:0f:50:79:65:1b:b2:e6:3e:d2:b0:e0:cc:52:4b:
                    a3:32:a2:81:ae:e9:c8:67:b4:66:af:fb:45:6f:93:
                    20:a4:23:31:22:d0:8f:2a:cc:02:40:d1:e9:56:ee:
                    6b:c1:29:e2:eb:61:3a:25:54:11:75:9b:95:0d:c4:
                    73:5b:22:94:8a:d0:bf:35:7a:98:0f:54:f7:aa:3f:
                    d7:75:59:34:41:3e:5a:d2:db:1e:00:b3:da:8b:82:
                    e0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:AE:EB:B8:46:E1:38:B4:CD:D1:87:AF:09:5C:DC:6B:77:DA:7A:F3
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144842.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a890::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:9c:bb:5b:e6:20:43:11:81:94:f6:20:12:8e:83:ac:8c:0b:
         95:40:d3:33:f1:f6:c8:7c:1f:ce:42:35:08:d2:be:7d:e0:8a:
         15:b6:6d:62:44:12:3d:e4:8b:60:c1:96:cb:8b:18:73:fd:01:
         58:41:69:eb:68:f8:29:b7:3b:b6:d0:7b:6e:1f:75:a2:0e:d0:
         27:ef:a5:11:d9:06:19:18:3b:18:78:b5:5a:7b:e9:32:dc:16:
         d1:a6:0b:84:66:8d:3e:7f:6c:fd:ed:9f:3d:3b:ce:99:6c:ac:
         4f:ad:25:3c:ce:9a:66:ed:20:97:b7:8b:04:0a:6c:a4:ac:20:
         c2:f8:08:6b:54:5f:11:90:72:76:16:6f:14:de:46:f7:e1:e5:
         5b:55:b0:30:10:86:2f:3c:f9:2a:13:ec:b0:6d:d9:31:c7:1f:
         22:2a:b9:e6:5e:1b:c1:78:62:a0:b5:ee:e7:d2:73:d0:c5:8e:
         07:df:f6:72:37:99:6c:c7:ee:4e:b0:4a:ee:23:85:19:1d:79:
         cd:61:5f:4a:bf:a3:ed:67:ac:60:14:e7:24:8f:9e:4e:a4:7b:
         b7:f8:53:66:25:63:ad:62:74:10:51:28:b5:74:27:9b:e0:04:
         dc:4f:45:67:7b:1a:e5:fb:47:15:9b:23:9c:7b:b1:fa:5d:96:
         f8:b3:bc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----