Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144906.roa
File:                     AS144906.roa (raw, json)
Hash identifier:          VKW8PiS3HIumXNablI1nr/ZGzx1NT5SanaRTPWq8Zjo=
Subject key identifier:   C8:9F:8F:B7:A9:BF:5A:E5:3E:02:DD:14:21:53:52:42:BE:61:FB:BB
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       38F12BAD93FA4AF7BD905662930E29C06594E840
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144906.roa
Signing time:             Mon 25 May 2026 06:49:07 +0000
ROA not before:           Mon 25 May 2026 06:44:07 +0000
ROA not after:            Mon 24 May 2027 06:49:07 +0000
asID:                     144906
IP address blocks:        240a:a8d0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f1:2b:ad:93:fa:4a:f7:bd:90:56:62:93:0e:29:c0:65:94:e8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:44:07 2026 GMT
            Not After : May 24 06:49:07 2027 GMT
        Subject: CN=C89F8FB7A9BF5AE53E02DD1421535242BE61FBBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bc:8a:12:d2:f5:b1:ca:62:11:b4:a7:7b:78:
                    1b:2d:ad:78:8b:6b:79:77:06:0e:93:a7:3d:82:2a:
                    d3:0c:9b:c1:f3:80:1d:2e:57:62:e4:a8:3a:39:57:
                    ae:d2:1c:43:1a:32:d6:8e:b7:2d:74:f3:36:f3:80:
                    d9:4f:19:f4:e5:b3:f9:4c:fe:01:fd:55:07:d3:cd:
                    ac:1b:e1:0f:f3:1c:13:f3:90:81:6d:3c:be:01:37:
                    d6:34:ef:8b:d1:6f:ec:5b:36:86:43:57:6e:ac:00:
                    aa:3f:16:5f:df:e0:97:fe:36:02:ba:2a:d9:88:66:
                    d3:1e:c8:f1:7e:2a:2d:e7:b0:8e:70:1a:94:cf:9e:
                    e4:98:f0:70:42:82:5c:ca:2e:4c:00:f3:91:a7:89:
                    dd:95:2e:a3:a8:a7:4d:83:96:43:f6:3d:e0:22:fc:
                    22:76:1e:2b:bc:03:81:e3:0e:e0:a6:c5:ab:61:05:
                    7b:64:f1:6d:32:8a:a3:9a:39:97:ec:71:f9:54:78:
                    69:86:bf:ef:62:50:b7:e2:fb:eb:99:94:48:77:8b:
                    46:e1:dc:6f:b7:88:9d:01:e7:63:af:eb:7c:c0:6d:
                    86:ef:c1:9a:4d:03:c7:f1:c6:65:ae:2c:65:64:64:
                    91:dd:b3:58:60:e7:ea:0a:a3:71:a5:e1:12:7e:63:
                    89:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:9F:8F:B7:A9:BF:5A:E5:3E:02:DD:14:21:53:52:42:BE:61:FB:BB
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144906.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a8d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:ad:88:98:7a:50:50:e7:f0:73:b6:3b:94:be:6e:3c:ec:a7:
         3c:ca:cd:c0:e8:74:72:7c:bf:a5:73:db:0d:01:2f:07:03:bd:
         12:70:b6:63:fa:e9:ee:06:16:cf:8b:2b:5b:86:58:f5:9c:84:
         9a:17:09:9a:56:19:cd:2d:04:64:b9:9d:ac:d8:ee:98:63:ff:
         c9:37:0b:4a:73:ca:70:32:9e:25:df:da:d6:7b:5a:65:ef:a3:
         53:94:e7:5b:28:a5:72:42:4e:f5:d0:f6:1f:b3:20:68:5c:37:
         42:e5:9e:49:02:49:74:91:41:7b:80:ef:32:bb:97:75:a3:78:
         69:bb:4b:37:00:b9:a9:d6:fd:11:cd:d0:f3:24:c0:93:8f:bb:
         e4:db:2e:e6:88:32:bb:05:59:5e:36:b3:86:aa:4c:0c:3d:73:
         0b:78:85:33:9e:ed:28:38:c9:fa:bd:68:90:e4:71:1f:16:bd:
         5f:29:df:bb:fe:1b:f6:cf:6b:12:ce:c6:fb:42:36:eb:34:f9:
         05:45:6c:45:a2:47:7c:50:12:a1:a3:ec:89:a2:60:7b:5b:fd:
         1c:53:85:fe:2b:e4:ba:ed:c8:e5:1f:c5:3a:bd:df:eb:8b:cf:
         a3:0b:5b:84:d5:c1:60:cb:82:ad:de:bf:de:81:a1:ac:a1:b1:
         f3:b6:04:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----