Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144889.roa
File:                     AS144889.roa (raw, json)
Hash identifier:          6hRhI6HylZEfi8K3pUAKk4KS+tJKYSB603REuv5pHp8=
Subject key identifier:   B9:24:60:22:CF:EE:8B:01:7D:A0:AC:FB:14:47:95:CB:6A:04:CA:94
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       476B6A9E5598D92CCB19F7E30C5B8EF31BBFA56C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144889.roa
Signing time:             Fri 22 May 2026 01:50:36 +0000
ROA not before:           Fri 22 May 2026 01:45:36 +0000
ROA not after:            Fri 21 May 2027 01:50:36 +0000
asID:                     144889
IP address blocks:        240a:a8bf::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:6b:6a:9e:55:98:d9:2c:cb:19:f7:e3:0c:5b:8e:f3:1b:bf:a5:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:36 2026 GMT
            Not After : May 21 01:50:36 2027 GMT
        Subject: CN=B9246022CFEE8B017DA0ACFB144795CB6A04CA94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6b:6a:a8:f1:00:36:a4:a5:e6:e3:23:e4:b5:
                    ec:1c:0e:05:d3:02:49:ae:5a:45:18:08:26:a1:fc:
                    e4:80:e4:e3:7f:74:47:02:49:c9:14:04:48:e7:0e:
                    df:ae:38:b8:ca:ab:8b:e0:12:f0:75:36:f5:b9:e3:
                    32:9c:0f:c7:8e:1d:b1:ec:38:e5:9a:d2:13:73:74:
                    bb:60:4f:63:0a:9f:0f:c2:e2:47:bc:96:16:b4:eb:
                    37:53:c5:ed:d8:b5:0f:cf:61:c8:6c:72:ee:38:32:
                    09:94:3d:ff:45:fd:05:4a:ec:a5:09:97:18:d7:a1:
                    6a:43:cd:01:cb:9f:96:19:bf:34:f8:60:56:f5:af:
                    2b:08:f0:a6:1a:bb:00:05:4c:e8:13:8d:d8:de:27:
                    e1:96:6a:0f:2d:f6:6a:64:c3:68:65:ee:5f:50:76:
                    f2:da:c7:ad:dc:de:ce:44:9a:04:24:c8:c9:da:d3:
                    26:22:22:72:9b:21:4f:50:96:2e:2a:eb:35:53:5a:
                    2e:f5:19:55:31:89:70:62:fe:2d:49:2c:21:be:37:
                    35:1c:16:5d:ae:36:14:27:18:05:b7:bc:8e:17:7d:
                    5c:0d:6d:8e:24:9b:c7:a3:2a:98:7c:a4:e2:3e:16:
                    2f:16:6c:75:96:16:29:31:a3:6d:e9:da:ce:5c:db:
                    7b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:24:60:22:CF:EE:8B:01:7D:A0:AC:FB:14:47:95:CB:6A:04:CA:94
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144889.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a8bf::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:d2:12:ea:c5:86:4b:71:95:61:1c:1e:e4:b5:03:9c:65:49:
         64:ef:6a:cb:ef:5e:fa:e1:9b:8e:f7:4f:3e:e3:83:3e:b8:a9:
         82:45:ae:4c:2c:1f:4a:92:6a:74:cc:5b:92:ca:93:40:4e:21:
         71:17:24:86:f8:51:27:61:44:89:de:de:37:51:38:20:f0:09:
         87:08:99:ae:b1:f1:c7:b3:85:fb:2d:24:98:2f:66:61:9b:5d:
         61:68:4e:84:4a:f9:ea:40:ef:47:34:29:6c:51:24:76:07:e4:
         a9:32:23:f4:27:6d:9a:77:ed:c6:6c:fb:dc:1b:14:5b:d8:5e:
         54:11:26:fb:46:73:f1:dd:2f:c3:08:f7:15:36:00:4a:8f:f0:
         b5:65:4e:46:8e:1d:66:f5:de:97:18:1a:4a:db:f8:5d:d3:7b:
         0f:ec:b5:01:24:51:f3:c0:a9:26:75:ca:b8:6c:bf:6d:01:e9:
         6e:c2:b3:01:97:89:8b:93:5c:11:c4:92:2d:82:19:ee:06:2a:
         2f:0c:78:e5:9e:54:4f:ca:73:0c:59:84:6f:d1:6b:c5:09:76:
         bb:ed:43:b5:a3:63:18:fe:4e:dd:08:33:ec:55:28:5c:93:b6:
         87:2d:67:89:3f:3a:f8:bf:8f:b0:0b:fe:b0:12:ff:a8:7d:da:
         5d:e8:e0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----