Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144933.roa
File:                     AS144933.roa (raw, json)
Hash identifier:          naU9XhEl/zZqrhub/5njSXQixFMfBBJqFh0qlqVGx5A=
Subject key identifier:   8A:72:1A:C8:2B:45:E5:18:B1:97:C1:08:AC:E9:19:0F:EB:DD:E4:A2
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       030957D27AA9E3395CB247C9F0A58AAC1BCEB1D0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144933.roa
Signing time:             Fri 22 May 2026 06:58:33 +0000
ROA not before:           Fri 22 May 2026 06:53:33 +0000
ROA not after:            Fri 21 May 2027 06:58:33 +0000
asID:                     144933
IP address blocks:        240a:a8eb::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:09:57:d2:7a:a9:e3:39:5c:b2:47:c9:f0:a5:8a:ac:1b:ce:b1:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:33 2026 GMT
            Not After : May 21 06:58:33 2027 GMT
        Subject: CN=8A721AC82B45E518B197C108ACE9190FEBDDE4A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e1:03:55:a4:ec:08:94:ce:22:a9:18:2f:ba:
                    53:8f:4a:06:c5:11:7a:c1:e3:a5:d7:4b:7d:5b:da:
                    69:24:0f:3f:1c:fe:e8:61:59:f2:38:bf:cb:84:1d:
                    ab:ec:cb:26:e9:9c:bf:23:8f:b8:04:6e:2e:e7:47:
                    7f:09:e1:89:a9:df:81:c0:e9:80:b2:64:4c:93:c9:
                    91:2f:83:3a:1e:4c:29:c3:a6:2b:83:56:70:63:70:
                    22:b3:6a:47:e3:bd:24:1f:c2:2d:eb:95:5b:ca:c0:
                    fb:fb:7a:8a:b4:c6:bd:08:ea:e6:cb:e6:38:68:c2:
                    bf:44:0d:f1:fa:ce:62:e1:18:6b:61:76:95:3c:1a:
                    e0:fe:a1:0f:b4:55:f6:ce:58:2e:ea:af:63:db:17:
                    e7:41:b7:06:cf:4d:14:54:bd:aa:b8:d5:f6:63:69:
                    cf:ff:a7:5a:4b:5f:e2:72:a3:17:c5:ea:b3:33:a5:
                    3d:af:04:bd:2b:b1:aa:8d:97:ac:7b:50:83:c7:da:
                    82:05:b8:12:19:27:d0:cc:5b:54:87:75:39:4f:95:
                    a7:0e:48:64:85:88:99:b7:c7:06:26:3d:ef:c1:84:
                    0e:3c:55:95:d3:b6:94:2d:40:fc:64:4e:fb:52:54:
                    97:c3:42:0d:e2:e1:9b:ef:02:21:58:19:34:b8:76:
                    d1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:72:1A:C8:2B:45:E5:18:B1:97:C1:08:AC:E9:19:0F:EB:DD:E4:A2
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a8eb::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:a6:e7:51:7b:dc:31:06:68:55:2a:72:c4:b4:3f:53:bf:19:
         5c:93:cf:3a:41:da:f9:ff:13:64:23:f0:82:2c:c9:e8:33:8e:
         5f:4d:80:f1:9f:28:bc:bd:fb:6b:cf:8d:e1:97:c7:bc:aa:e7:
         3b:0d:62:8d:78:a3:41:ec:30:b4:4c:65:d8:70:25:56:c9:a1:
         24:52:4e:77:2a:15:e0:e2:e0:ee:c7:c4:9c:68:6d:21:85:a5:
         0b:42:e6:2c:ab:db:d6:1d:8b:1e:4b:2e:a4:49:df:a7:1d:03:
         e4:f0:6d:d2:98:08:fb:93:ba:8b:84:77:51:88:42:40:6d:6f:
         6c:ef:9c:07:dc:6a:3b:bf:3f:74:69:46:0c:3e:56:dd:3a:48:
         f2:df:af:d1:35:75:43:35:d6:16:e3:d9:6e:75:90:58:95:bf:
         42:f1:6b:98:b1:97:f7:e1:14:91:8a:8e:7e:88:bc:a7:e9:ae:
         cb:c8:ea:13:2e:91:c9:e9:a5:df:c1:56:3d:b0:81:63:73:27:
         0f:97:16:54:5d:0d:a5:b3:1e:83:e2:0f:c3:b8:89:9c:9b:e8:
         50:87:54:75:cb:da:c5:85:5c:5c:19:4c:27:f8:c4:95:a0:77:
         73:81:0b:d2:49:c5:ee:06:ed:9f:3d:ba:8a:d9:48:0c:96:8d:
         5e:a0:c7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----