Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144858.roa
File:                     AS144858.roa (raw, json)
Hash identifier:          XSLcE2VmLnIPSsZLJYlidbV8w4Cc4x1hdwG38MiWi6k=
Subject key identifier:   8B:4D:38:35:1B:D2:A1:28:1B:60:B7:9F:FC:C7:14:18:C8:F6:9F:B4
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       455B2AAE956B079DCCE01971059DC7A4A4694E4A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144858.roa
Signing time:             Tue 26 May 2026 02:35:27 +0000
ROA not before:           Tue 26 May 2026 02:30:27 +0000
ROA not after:            Tue 25 May 2027 02:35:27 +0000
asID:                     144858
IP address blocks:        240a:a8a0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:5b:2a:ae:95:6b:07:9d:cc:e0:19:71:05:9d:c7:a4:a4:69:4e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:30:27 2026 GMT
            Not After : May 25 02:35:27 2027 GMT
        Subject: CN=8B4D38351BD2A1281B60B79FFCC71418C8F69FB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6c:35:ae:72:9a:77:2d:89:29:2f:13:07:3c:
                    7e:d5:08:66:38:9b:d5:fe:a0:a0:36:27:6b:94:08:
                    a1:87:e6:45:2c:76:4c:28:6d:e5:8c:a9:95:1e:57:
                    8a:e9:cb:4b:f5:b0:6f:f4:7d:34:26:06:a8:13:49:
                    af:3c:e8:a1:94:f6:41:f3:c6:f5:c1:d7:43:4a:34:
                    05:1c:61:b7:07:11:5c:7d:44:97:5b:e4:82:84:2d:
                    21:be:a5:de:f3:e6:71:2a:80:a4:66:0b:e2:ab:c3:
                    0e:54:e0:af:85:1e:5d:3c:b5:a6:cb:32:e5:00:bd:
                    a5:bb:f9:ce:48:cd:3d:7c:1b:a0:27:3e:57:bd:69:
                    0e:f6:08:33:1a:72:9e:7c:86:83:03:08:4d:1d:16:
                    75:c9:c7:68:9f:39:9a:1b:94:ff:56:43:ad:2e:4c:
                    e4:59:0e:77:be:cc:ff:d5:be:e9:f5:2e:af:8f:9d:
                    1c:b2:57:b9:d6:5a:28:bf:be:fa:1f:8a:11:32:27:
                    af:34:bd:b1:49:84:62:66:17:ae:52:a3:19:8a:6c:
                    4c:50:52:33:08:cd:24:1b:da:da:58:e5:60:24:d7:
                    09:c5:53:16:8a:24:01:da:d9:81:05:19:37:ff:ae:
                    06:0d:63:9b:e6:58:29:34:20:cf:85:c3:2b:c7:e1:
                    a0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4D:38:35:1B:D2:A1:28:1B:60:B7:9F:FC:C7:14:18:C8:F6:9F:B4
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144858.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a8a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:89:ec:c7:f0:fc:dc:6a:fa:2d:34:0e:74:93:bc:a8:a8:7e:
         1f:06:26:f4:db:df:79:75:3e:e2:a7:83:be:93:58:cd:91:1d:
         06:13:b7:e0:57:95:09:93:8a:d1:88:d8:b8:0a:d4:8f:63:73:
         19:71:97:b3:22:7a:5f:3c:42:8a:8d:84:e6:22:95:e5:d5:71:
         e2:da:54:16:23:34:b9:46:d0:8c:bc:5c:a5:b5:47:76:73:c3:
         02:18:de:d6:57:2b:f5:58:54:a9:90:07:b3:7a:c6:c0:5d:5f:
         83:5e:85:ae:c4:ea:b0:a1:b8:70:5b:d6:34:cb:c1:62:66:23:
         e2:c6:4a:a1:58:b4:25:b5:c8:77:23:14:f5:a3:20:10:f8:10:
         db:a8:16:b5:ae:97:d4:e3:6b:a4:bf:f7:92:08:f6:b4:75:6d:
         25:09:4a:41:72:9e:1d:ed:d2:08:1a:f4:c5:35:22:73:86:03:
         9e:ca:b5:fa:30:1d:47:3c:3c:e4:f5:e0:92:df:49:8d:66:ee:
         66:b2:06:e1:88:23:dd:c6:e4:6b:9b:a1:ad:98:95:6a:4e:bb:
         bb:fd:03:b1:02:c4:9c:63:ec:e5:d0:b5:76:28:94:6f:3d:69:
         1e:c9:1b:9b:19:e9:0e:fd:5c:79:e2:b0:96:b4:62:2d:c2:f1:
         64:fb:2f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----