Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144890.roa
File:                     AS144890.roa (raw, json)
Hash identifier:          qxl8tvxoT9TLvDN0KfEHnLQ9VbpZGXVIteFQcbsHN6k=
Subject key identifier:   7A:75:5E:76:07:2C:06:1E:D9:10:D0:D6:DB:3F:0A:75:28:D0:E1:38
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3E767B79D5B6BD1581B6B1C952B8A20E2E19BCFB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144890.roa
Signing time:             Mon 25 May 2026 02:22:44 +0000
ROA not before:           Mon 25 May 2026 02:17:44 +0000
ROA not after:            Mon 24 May 2027 02:22:44 +0000
asID:                     144890
IP address blocks:        240a:a8c0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:76:7b:79:d5:b6:bd:15:81:b6:b1:c9:52:b8:a2:0e:2e:19:bc:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 02:17:44 2026 GMT
            Not After : May 24 02:22:44 2027 GMT
        Subject: CN=7A755E76072C061ED910D0D6DB3F0A7528D0E138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a9:8c:50:55:84:46:fc:2c:a8:56:8d:37:49:
                    01:17:e7:e5:ec:d5:3d:a6:ae:fe:30:23:a1:e1:55:
                    24:8b:f5:96:a9:83:bf:09:3b:5c:25:8c:af:b1:32:
                    95:51:5c:ce:1c:75:ac:13:aa:15:28:e0:0e:06:5d:
                    ab:d2:6b:ca:8c:a8:26:3c:75:84:6b:46:e9:c1:8e:
                    63:7c:16:43:39:53:08:14:ab:3c:ea:97:d0:03:d7:
                    ff:61:4c:cc:14:13:f0:39:ed:f2:46:0d:d0:f8:ca:
                    3f:5c:fe:76:75:0d:62:eb:1b:48:ad:b2:0d:e3:b7:
                    2d:0a:d6:16:d1:83:c6:e2:b8:b8:f6:d5:85:2f:ea:
                    9f:17:d9:c9:f6:74:5a:6a:3e:ad:fb:5d:b9:a9:36:
                    66:3c:e7:67:6c:6b:c3:94:62:ef:80:07:6d:de:2b:
                    a6:37:c5:29:50:f1:f7:24:a7:32:2c:9e:f7:d9:e2:
                    32:6e:e4:81:5b:14:ac:42:17:cc:15:63:5b:af:21:
                    15:92:15:45:94:07:55:25:86:ab:95:a7:98:b5:88:
                    ae:a9:66:52:ac:85:07:c1:75:82:38:09:5a:0b:b5:
                    61:fb:52:3b:93:a5:92:fe:b0:03:08:5f:a5:35:24:
                    1c:77:e3:7e:79:b7:f4:5d:88:b8:05:82:21:a8:8e:
                    87:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:75:5E:76:07:2C:06:1E:D9:10:D0:D6:DB:3F:0A:75:28:D0:E1:38
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144890.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:2b:24:9f:3b:15:eb:12:f1:5a:ff:81:6f:99:d8:8f:a5:e0:
         d1:09:9b:a0:cb:80:89:fe:1d:ae:db:8f:f3:65:09:3f:22:3e:
         34:52:a8:d3:97:d5:9c:3a:5f:53:67:f3:0f:88:6e:02:11:d2:
         8a:16:70:0d:bd:59:2d:d6:32:c7:27:c8:c3:e4:55:8e:c8:22:
         7c:a7:9e:23:53:c0:03:6e:d8:0c:26:37:8f:f6:21:92:06:bf:
         55:b9:b3:a0:0c:5a:d3:94:e1:dc:1c:a8:76:0d:16:c9:79:b4:
         fa:0a:32:51:1f:dc:ed:ca:6b:8a:77:9d:1b:59:8a:a7:16:1a:
         79:25:80:20:20:43:24:f3:cf:0e:bc:d0:64:c2:2f:e6:05:8d:
         cf:da:18:67:b5:0b:e1:a1:93:03:f6:34:6a:1e:26:59:29:87:
         18:46:13:cf:db:01:f1:f6:9c:c6:64:d9:ed:75:46:25:6c:57:
         82:1a:69:fa:74:a3:2e:53:69:c0:aa:a9:4e:26:06:c5:56:c4:
         e3:31:6e:50:91:d5:1b:f2:16:21:a4:f1:a7:a9:10:c0:b0:71:
         8a:d8:55:95:74:23:51:09:0e:bd:13:b7:ba:da:ee:4a:1c:77:
         6b:11:a5:79:28:d2:04:6d:fc:d0:cd:c0:d1:ad:9a:2a:4a:b7:
         cf:a0:55:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----