Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144930.roa
File:                     AS144930.roa (raw, json)
Hash identifier:          Hlfv1t2NGiB5hlRi5XaJhAjdeAr94ARTq+1SAvApQM0=
Subject key identifier:   F9:72:8C:01:EC:23:86:61:4A:8D:78:43:7A:56:D2:0C:EE:20:88:FC
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       28901815DC95649B211422E9B5EC174354F90D01
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144930.roa
Signing time:             Tue 26 May 2026 01:13:11 +0000
ROA not before:           Tue 26 May 2026 01:08:11 +0000
ROA not after:            Tue 25 May 2027 01:13:11 +0000
asID:                     144930
IP address blocks:        240a:a8e8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:90:18:15:dc:95:64:9b:21:14:22:e9:b5:ec:17:43:54:f9:0d:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:08:11 2026 GMT
            Not After : May 25 01:13:11 2027 GMT
        Subject: CN=F9728C01EC2386614A8D78437A56D20CEE2088FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:26:88:3c:fd:a0:c1:18:e2:32:2b:6a:31:07:
                    8c:c7:bd:fd:ab:91:bc:cd:24:ff:01:ca:31:75:6f:
                    0e:f7:44:94:ee:43:b8:6c:27:78:c3:9e:01:20:f4:
                    b2:16:6a:5d:8c:e1:bc:72:fd:6e:ee:39:c7:eb:0d:
                    a4:3e:53:22:80:42:31:19:2e:62:49:e4:2f:34:cd:
                    16:97:e2:4e:ed:b3:9a:9b:d9:c4:a5:ea:3e:23:ca:
                    24:ea:4e:23:e5:7c:2f:ce:16:25:a0:2c:1b:44:3c:
                    b1:28:8f:c9:13:b7:94:2c:2e:6a:88:6a:a7:94:cc:
                    fd:20:85:b2:f5:54:93:ce:7c:23:7c:72:d5:c6:5f:
                    ba:de:be:1e:dc:1c:1f:c9:e2:87:24:9b:e4:2c:7c:
                    a0:30:47:64:81:3b:16:23:30:48:09:f3:20:ee:fd:
                    33:a9:71:16:31:47:f0:c3:a6:59:eb:c7:27:98:52:
                    c9:eb:f0:7e:84:d3:4d:55:8f:e2:fc:9e:76:5c:dd:
                    c4:f2:e6:bc:49:bb:e9:74:d2:65:ae:20:bb:c8:96:
                    a3:97:0b:ef:80:39:fc:24:b5:4e:a4:5c:8e:c0:b6:
                    b0:9b:31:a7:ff:54:e2:d0:c5:27:6b:de:d5:6d:9b:
                    0f:96:0e:78:76:3d:cb:d9:d5:c8:d1:94:d6:f5:ca:
                    c9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:72:8C:01:EC:23:86:61:4A:8D:78:43:7A:56:D2:0C:EE:20:88:FC
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a8e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:06:5f:78:60:bd:66:cb:45:03:64:69:19:d0:40:e3:f9:3a:
         a1:40:1e:d2:99:62:89:d2:5f:a8:43:8e:c8:0b:7b:26:71:82:
         69:02:13:ef:64:25:7f:4b:e3:1a:33:e0:73:40:3a:e0:7d:97:
         c8:9f:02:ef:36:71:20:4c:74:15:f4:1f:3e:2b:b4:49:13:a2:
         d0:9e:af:87:0a:29:2e:db:4c:48:87:95:1d:03:c2:1a:8d:21:
         b0:ba:4e:f9:7e:31:2a:33:11:dd:3a:5f:c9:7a:f2:79:ed:2e:
         98:e8:6f:1e:a2:6b:82:39:d3:11:ef:8d:28:37:e8:43:a2:a4:
         1b:4e:f2:fa:df:e6:19:6a:4c:83:25:f0:6d:3a:a6:f6:2c:7a:
         f8:06:9a:c6:51:62:a3:6c:b3:5e:af:99:76:bc:2f:40:a4:57:
         a3:53:0e:b0:4c:4c:eb:bd:4f:03:fe:e1:4d:41:6f:32:ed:09:
         4f:08:4b:e1:bf:f9:2f:f1:09:2c:23:2a:8b:24:63:6a:ea:a2:
         4f:81:a3:e0:27:06:fb:22:3f:2d:dd:82:ff:c6:13:4e:8c:d5:
         d6:93:0b:b7:64:bb:72:83:37:3f:d5:5d:88:f4:e7:07:5a:ee:
         f2:8d:71:da:01:55:8f:ba:69:50:e8:22:1b:c4:58:0d:3b:03:
         7b:b9:b0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----