Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144926.roa
File:                     AS144926.roa (raw, json)
Hash identifier:          nNGOwWS4ww2hUdJbDQlbBY+wTNPsUJdtRC8Gba76274=
Subject key identifier:   8F:DE:E0:45:61:F4:D7:D1:8E:A8:DA:F0:E2:3D:84:7A:96:62:9A:D3
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       27A25F7717B4A75EE36DCB696F72BD707C28457D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144926.roa
Signing time:             Fri 22 May 2026 07:32:37 +0000
ROA not before:           Fri 22 May 2026 07:27:37 +0000
ROA not after:            Fri 21 May 2027 07:32:37 +0000
asID:                     144926
IP address blocks:        240a:a8e4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a2:5f:77:17:b4:a7:5e:e3:6d:cb:69:6f:72:bd:70:7c:28:45:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:37 2026 GMT
            Not After : May 21 07:32:37 2027 GMT
        Subject: CN=8FDEE04561F4D7D18EA8DAF0E23D847A96629AD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f3:5f:5c:7a:5a:33:e1:d4:0d:7f:2c:b7:c4:
                    25:8c:aa:66:c3:ef:05:a1:7b:f6:29:2a:a1:29:83:
                    ec:6c:d0:92:e8:82:53:65:99:94:ce:c2:b1:60:68:
                    15:72:e7:67:c6:d7:47:3d:44:ab:5f:d5:25:29:02:
                    84:8b:d5:4e:44:71:0f:79:c4:e7:04:8a:b6:17:84:
                    9c:97:1d:1e:af:bc:49:98:f7:5d:b4:df:f2:a2:59:
                    e5:dc:89:91:10:cc:97:eb:fe:58:6e:f7:1a:b5:66:
                    5a:f5:e3:8e:df:85:e4:59:c0:e3:a8:41:35:6d:fb:
                    f8:30:c9:d8:7e:62:2b:17:f6:00:92:0f:cf:ca:b2:
                    56:df:b2:5b:c3:b6:26:18:14:9f:b0:97:48:b4:df:
                    4c:0f:68:6b:a7:10:b3:be:fa:47:09:ae:c1:3f:a1:
                    f7:b4:ca:41:99:d9:40:a9:c4:43:7f:38:25:74:b3:
                    45:17:dd:cf:d6:64:52:ac:5b:34:de:df:39:ca:28:
                    1b:46:5a:3e:26:df:ea:89:34:cd:7f:01:36:c7:e7:
                    c5:df:ae:7c:bf:c2:b4:d9:30:64:9e:bd:7a:0e:a2:
                    47:a9:ef:de:5b:97:60:f4:0d:31:4b:83:fd:14:97:
                    b5:7b:76:80:e2:bb:4f:c1:71:0b:95:9c:50:f3:8b:
                    a5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:DE:E0:45:61:F4:D7:D1:8E:A8:DA:F0:E2:3D:84:7A:96:62:9A:D3
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144926.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a8e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:0c:6d:f5:5d:e9:21:59:b5:03:cd:25:63:68:85:4a:aa:b5:
         b2:ec:a7:7b:d3:66:d0:e8:13:36:68:8a:da:89:ee:dc:0c:0c:
         bb:d5:39:83:3f:1f:fc:1c:27:9c:b2:56:f4:11:1c:b7:71:18:
         30:6c:b6:49:8d:33:61:a6:b3:db:07:1f:97:3f:a7:65:f7:05:
         c6:45:de:c3:54:56:da:9f:f4:7a:b3:3d:2a:43:7b:d0:c0:74:
         ba:0a:94:65:13:1f:a2:3c:c3:be:28:e1:39:c5:1f:bc:37:d8:
         53:cc:01:80:14:84:7e:e8:a9:d4:15:6c:ab:a8:fa:57:cc:ac:
         38:bf:de:c3:59:bf:c9:98:c2:94:5b:1b:e3:c4:ba:7a:96:a3:
         ea:9a:e1:fb:33:19:0b:cd:58:0d:4c:d8:d6:69:54:98:49:95:
         d1:1c:66:b6:d8:a0:f3:3b:73:a5:7a:be:50:9d:91:20:84:ab:
         e0:cb:e7:29:ce:c9:f4:ab:c9:f9:4d:ee:54:40:e8:b4:45:37:
         39:fa:e7:4e:46:54:54:38:b6:b1:9a:1a:56:fb:35:b8:a0:76:
         f4:79:f2:33:31:c5:8c:8a:2e:d9:aa:c6:b1:32:2e:9a:10:bd:
         62:02:f3:83:fb:82:cd:35:8f:d0:54:ad:35:e4:fa:5d:ac:85:
         18:9f:5a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----