Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144929.roa
File:                     AS144929.roa (raw, json)
Hash identifier:          48/D7sCnhj5SX5gvQFajsU3qulnHo9Wrwq6NfX8nVa4=
Subject key identifier:   42:FE:98:7E:52:58:01:70:65:EF:E8:FC:85:20:08:81:31:87:2E:FF
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       22E2B3C5CCABB4336A11AB25BE63790B4A7DE5E9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144929.roa
Signing time:             Mon 25 May 2026 01:38:11 +0000
ROA not before:           Mon 25 May 2026 01:33:11 +0000
ROA not after:            Mon 24 May 2027 01:38:11 +0000
asID:                     144929
IP address blocks:        240a:a8e7::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:e2:b3:c5:cc:ab:b4:33:6a:11:ab:25:be:63:79:0b:4a:7d:e5:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:11 2026 GMT
            Not After : May 24 01:38:11 2027 GMT
        Subject: CN=42FE987E5258017065EFE8FC8520088131872EFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:55:9a:47:97:02:b1:ef:8b:1b:b2:ee:d9:54:
                    e1:82:ba:e2:bb:43:5c:5d:93:ae:73:c7:0c:4a:32:
                    bd:a1:d2:ab:da:a0:e3:c8:63:e7:20:1d:08:fe:3a:
                    15:db:01:48:c4:77:aa:8b:bb:6b:ba:3d:f4:1f:68:
                    65:49:f5:c8:8c:2d:44:78:6e:34:0c:b2:36:84:40:
                    8e:e6:d3:9e:50:98:ea:c6:1e:29:ef:f6:3a:3f:c2:
                    e5:8e:e8:1a:44:9b:07:b9:4b:30:c9:e3:27:51:39:
                    97:f0:d6:70:64:d6:a9:e5:18:72:13:37:7e:7f:fa:
                    e3:9f:16:d6:71:6a:ac:3d:32:2a:44:71:2f:7c:3d:
                    15:aa:20:b8:ba:b9:11:20:66:96:4e:ca:1b:b9:59:
                    15:75:ec:9c:c9:53:c6:ba:c4:89:cc:d8:34:49:6c:
                    84:43:6d:10:84:01:0b:ad:94:09:23:de:d5:a2:76:
                    2c:b7:21:0a:c8:4c:6c:b6:be:58:92:a6:c8:b0:a2:
                    04:51:4e:98:be:dd:8c:51:b0:be:de:32:18:ba:74:
                    0f:f9:58:e1:2c:c0:d5:84:2d:4e:e7:9c:e5:3a:fe:
                    8c:7a:db:5b:6b:ee:a5:af:d3:4f:48:81:d8:26:c9:
                    08:8d:bd:b6:1b:41:12:e6:93:5f:e6:43:af:21:4c:
                    75:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FE:98:7E:52:58:01:70:65:EF:E8:FC:85:20:08:81:31:87:2E:FF
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144929.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a8e7::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:0e:da:48:5e:01:36:31:d4:27:52:18:30:d9:8a:d0:1e:e5:
         4e:49:77:52:46:ac:b3:68:01:33:0f:fc:a7:5f:f8:31:df:b7:
         b6:4a:e1:a4:0c:70:c2:94:c2:30:25:88:fe:2a:51:dc:e0:a4:
         05:b3:17:79:a1:67:bc:21:88:74:dc:9e:3c:00:83:25:62:79:
         6a:d4:39:33:d0:43:54:c3:3f:64:de:a7:d4:ae:83:dd:ed:ac:
         83:85:5b:0e:98:87:c1:ba:ae:61:70:c3:54:c7:66:2f:30:6b:
         0d:80:dd:33:13:52:ad:59:6c:e1:e3:6a:71:5f:1a:48:ed:37:
         2a:6b:2d:ab:f1:29:57:69:09:22:3d:5a:28:6b:a3:d0:83:a8:
         f1:11:5b:50:6b:a9:49:09:e0:f6:3a:bf:74:15:16:3d:2e:51:
         d9:85:04:c4:87:66:88:b3:3a:e9:b1:9e:e9:1e:d9:a7:81:8c:
         a1:d6:84:64:fb:a9:7b:86:e6:aa:0c:f0:f7:32:13:7d:fd:08:
         7e:6a:9d:66:8e:72:3c:7b:6e:69:ce:cc:02:69:21:69:6b:ca:
         82:4b:b0:a5:cd:1e:9b:ce:b1:3c:2c:f1:f6:cf:a1:8e:a9:dc:
         89:ba:34:43:1e:0c:64:f8:a8:86:89:f5:d8:4d:35:19:79:1f:
         02:28:d2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----