Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144852.roa
File:                     AS144852.roa (raw, json)
Hash identifier:          CnUepFFC6cyJppgRol5RcEfnSl9J9jqWNH4U1/clNWs=
Subject key identifier:   A3:48:D0:4A:55:8C:30:73:E7:6A:FA:BA:88:BC:D3:59:C3:0F:7B:2C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1A7AA9B05EF60AA8F1B04FA590B154C0DDEBC33D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144852.roa
Signing time:             Mon 25 May 2026 01:20:35 +0000
ROA not before:           Mon 25 May 2026 01:15:35 +0000
ROA not after:            Mon 24 May 2027 01:20:35 +0000
asID:                     144852
IP address blocks:        240a:a89a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:7a:a9:b0:5e:f6:0a:a8:f1:b0:4f:a5:90:b1:54:c0:dd:eb:c3:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:15:35 2026 GMT
            Not After : May 24 01:20:35 2027 GMT
        Subject: CN=A348D04A558C3073E76AFABA88BCD359C30F7B2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0b:7e:c5:ed:ee:6f:5f:81:dc:e9:21:18:04:
                    c4:3e:1e:10:0a:80:57:fa:6f:ed:a0:39:0a:b3:89:
                    52:4a:93:a3:6c:2d:32:8e:dd:36:e7:d5:c0:dd:10:
                    58:e4:a5:02:fe:fc:4d:ae:2b:7d:3d:17:9c:39:ae:
                    bf:08:07:a1:57:ba:b5:3d:db:c8:14:66:48:d8:fb:
                    af:75:cb:4b:1e:dd:66:a9:70:ad:33:6c:57:e2:21:
                    cd:43:f4:fd:81:43:5d:a5:24:9f:12:8b:ee:e2:32:
                    49:56:67:30:24:67:76:4c:48:67:68:44:d0:c9:47:
                    80:99:74:3d:d7:36:04:1f:e3:73:5b:d4:10:91:30:
                    56:e1:67:76:ef:85:10:8e:03:12:a7:fb:3d:40:ca:
                    72:15:74:9e:1e:b3:0e:76:8a:e2:98:22:f7:aa:4b:
                    5c:e5:01:04:0a:68:f3:61:61:bc:c7:f2:72:a2:68:
                    b4:07:04:d2:9b:45:f5:39:32:1a:f6:c1:6d:28:7e:
                    3a:33:de:bb:ce:31:7e:f3:63:9b:f8:cd:a9:a9:2b:
                    67:8d:98:dd:8b:da:70:07:85:08:5b:4e:9e:6b:83:
                    cc:5c:cb:b5:bf:c5:07:3a:95:fe:32:c9:df:e1:37:
                    fc:e3:11:83:a8:fa:d2:98:ed:e2:55:ca:e3:55:bd:
                    fa:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:48:D0:4A:55:8C:30:73:E7:6A:FA:BA:88:BC:D3:59:C3:0F:7B:2C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144852.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a89a::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:e6:1c:88:89:da:67:ff:1d:a1:d7:a4:87:19:d5:d1:13:27:
         d7:6c:1f:02:1e:8c:a9:12:82:8e:2a:3f:d4:2b:22:18:c3:fe:
         3f:55:95:a5:ba:e2:f3:9d:b9:b6:3c:3d:df:7d:e2:e2:06:6f:
         b5:68:dc:23:3b:dc:f9:75:12:0d:be:e8:14:90:7d:16:7c:4e:
         09:14:de:37:62:d6:2e:3c:ce:cb:5c:bf:b0:9a:32:dd:93:aa:
         7c:45:dc:3e:cb:10:70:b2:d7:18:a7:65:e6:65:85:7f:be:9f:
         4b:10:f3:f5:2b:5a:f7:a2:6a:fc:f8:05:48:52:95:32:d0:79:
         8a:a3:69:29:54:4f:5a:83:e0:a6:4d:d3:75:2f:03:e7:62:6e:
         6d:df:ab:cc:ff:ef:08:14:0d:28:f5:af:30:58:73:27:32:89:
         94:21:50:f4:1e:09:cd:0d:5f:fe:bb:b2:6f:56:33:90:3e:50:
         b5:7a:25:77:66:c0:4b:3d:ad:d1:35:c7:0c:b0:b9:fc:53:6f:
         75:97:d8:dd:ef:05:f5:a8:26:1e:ee:90:32:a3:cc:6d:e2:4e:
         df:73:57:74:b3:6c:86:01:3e:62:3c:03:c5:9d:af:7e:58:5d:
         9d:5f:b5:52:18:d0:4c:f7:91:cc:4d:d6:d8:eb:25:43:ef:f0:
         aa:9e:0a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----