Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144928.roa
File:                     AS144928.roa (raw, json)
Hash identifier:          2ZBi9yIByjjsUeCVrqN0Vi4RfF9Katp/c1rgSuIn6sI=
Subject key identifier:   D0:3D:FD:14:57:89:EC:5F:A6:79:80:23:17:8F:F7:89:B0:33:5C:A4
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2888793A748518D72287A662EB842FC6BDA6ACFA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144928.roa
Signing time:             Tue 26 May 2026 08:53:06 +0000
ROA not before:           Tue 26 May 2026 08:48:06 +0000
ROA not after:            Tue 25 May 2027 08:53:06 +0000
asID:                     144928
IP address blocks:        240a:a8e6::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:88:79:3a:74:85:18:d7:22:87:a6:62:eb:84:2f:c6:bd:a6:ac:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 08:48:06 2026 GMT
            Not After : May 25 08:53:06 2027 GMT
        Subject: CN=D03DFD145789EC5FA6798023178FF789B0335CA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:34:f3:f1:ec:9b:ec:b3:9b:0a:d4:e5:f5:6f:
                    e9:f1:d9:59:d9:d4:27:57:f5:e9:90:31:28:17:c8:
                    e5:f0:fc:2b:ee:bc:48:75:bd:dc:9b:e4:a6:03:0d:
                    82:4c:c4:ec:f8:2e:26:c9:47:2a:a9:93:c1:bf:1a:
                    40:f9:ec:99:84:ca:57:09:37:f0:5e:58:8e:d2:b4:
                    e6:55:2c:d7:4a:78:bb:6d:98:74:40:59:95:8b:01:
                    62:5e:2d:a5:83:36:56:db:6a:8d:82:d1:4a:5a:1b:
                    ea:c5:cc:90:c1:87:94:a4:9c:49:b5:96:aa:97:89:
                    89:f0:95:6d:be:ad:7f:0d:49:6b:0e:01:e7:02:cc:
                    04:f6:9e:5d:8b:b7:05:1b:3c:f3:6c:16:2e:fd:07:
                    82:98:01:7c:08:51:ac:39:7b:a7:b8:d5:25:e5:a0:
                    39:3f:12:a4:cb:8c:bd:db:b5:3a:9a:02:e8:2f:27:
                    f8:38:dc:14:ac:e6:97:09:f1:62:09:8a:dd:b4:7e:
                    ad:db:b4:5c:ec:71:11:a4:8c:c6:ee:5a:bb:8c:01:
                    75:00:6e:14:2b:68:2a:d8:e3:46:bd:bd:b5:33:a5:
                    ac:bb:8a:e4:0a:8d:57:a6:23:9f:7c:ef:61:46:ac:
                    13:89:e8:66:e5:cb:c4:11:29:77:e1:eb:22:a5:8a:
                    2e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:3D:FD:14:57:89:EC:5F:A6:79:80:23:17:8F:F7:89:B0:33:5C:A4
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144928.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a8e6::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:e8:fb:62:99:86:a4:73:2f:46:46:2b:eb:28:19:dd:4b:09:
         f7:ff:aa:9a:8a:9c:59:8a:66:b3:23:de:c5:0f:b7:0b:3d:ca:
         ea:f2:33:64:f0:cd:0d:1e:3c:19:35:b5:f2:31:cd:79:d8:90:
         01:46:4b:6b:6e:45:1d:b5:56:c5:5c:2d:e8:b2:25:f9:eb:02:
         c4:f0:f0:a7:21:0e:d4:4e:48:a5:c9:0a:3d:98:b0:46:d8:71:
         d7:b6:9c:ad:7f:4b:39:d7:3f:26:12:df:9d:ce:ca:a1:a6:f0:
         6d:83:fb:7f:21:e5:a2:42:30:27:19:4f:96:fe:29:6a:a7:5c:
         43:95:1c:ec:c2:a4:16:c7:5d:5c:15:e7:69:87:d1:2a:01:ad:
         58:40:68:a3:f9:92:54:61:c3:c1:68:fc:75:68:9b:bf:19:06:
         3c:6a:27:d7:ad:7e:e5:fe:88:c1:f9:d4:10:7b:09:0f:f1:bc:
         46:b8:a7:40:61:87:0f:95:a6:bf:af:3f:d2:c8:38:b5:ef:6b:
         d0:93:2b:48:83:8b:3a:19:e5:70:02:09:55:6c:1b:8d:08:6a:
         ef:f7:c9:ee:94:98:43:d2:fb:9b:99:1e:0d:b6:54:db:8b:5f:
         46:0e:86:ae:dc:f6:f1:dc:42:ca:a7:b6:4b:f6:96:7e:ec:5f:
         fb:46:11:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----