Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144936.roa
File:                     AS144936.roa (raw, json)
Hash identifier:          h6fBG+Ahe6HMYiF5Dk83CsRdSnG+T57l1kDa1swJIEw=
Subject key identifier:   FC:B8:0A:D4:A1:28:A2:5A:F3:72:C7:10:0B:D1:8C:77:D9:CC:C0:8D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       34883E079D34C4B28E6FC9A5A8AA5B218C954CFC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144936.roa
Signing time:             Fri 22 May 2026 06:27:58 +0000
ROA not before:           Fri 22 May 2026 06:22:58 +0000
ROA not after:            Fri 21 May 2027 06:27:58 +0000
asID:                     144936
IP address blocks:        240a:a8ee::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:88:3e:07:9d:34:c4:b2:8e:6f:c9:a5:a8:aa:5b:21:8c:95:4c:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:22:58 2026 GMT
            Not After : May 21 06:27:58 2027 GMT
        Subject: CN=FCB80AD4A128A25AF372C7100BD18C77D9CCC08D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:08:a2:7d:c2:a0:2f:a7:9a:10:2d:56:37:ea:
                    c5:16:d4:e6:5d:c7:a9:26:f1:ff:b7:ee:a7:c9:65:
                    5c:25:53:2a:cb:37:d3:8a:e0:82:aa:36:0c:75:16:
                    00:20:a8:f9:3e:8d:aa:6c:c2:e5:e6:fe:26:4c:ca:
                    f0:47:60:d0:51:b8:34:7d:12:aa:e0:06:d2:79:3a:
                    fe:35:8e:a7:cb:8a:7e:c6:31:4e:8a:2b:ae:a1:66:
                    7d:4d:83:10:57:70:e7:5e:e9:3a:9a:06:15:6c:fa:
                    40:b5:d8:ea:35:4e:6f:76:25:84:96:d7:9e:ba:19:
                    53:3f:6d:80:67:f1:ac:a6:d2:d3:bc:84:96:32:9c:
                    17:19:60:18:fb:d9:60:32:24:64:b3:c7:7e:c2:01:
                    3a:25:51:e6:00:8f:ff:98:4c:f0:9d:ef:dd:7c:bd:
                    03:e8:5c:b2:32:67:8a:06:3f:34:62:ae:bc:c4:36:
                    32:2e:58:1c:a3:cd:98:d1:40:16:4f:5c:b9:b1:45:
                    ca:da:f5:c3:fe:8f:b9:8d:ee:92:4d:bc:56:84:47:
                    aa:a9:68:c7:34:88:12:6a:27:18:84:9e:6a:e1:d3:
                    09:5a:fe:fd:0a:99:68:f9:75:a8:8f:94:65:50:e3:
                    24:dc:49:c0:6c:33:c1:6f:bb:5b:b3:6d:24:5c:53:
                    f5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B8:0A:D4:A1:28:A2:5A:F3:72:C7:10:0B:D1:8C:77:D9:CC:C0:8D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a8ee::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:99:07:69:bd:5e:89:a5:97:6b:87:b7:c2:fa:35:ca:b9:77:
         96:bd:eb:fb:88:13:9b:44:c8:b0:19:f7:ff:a4:1a:87:8e:a8:
         f6:40:d2:87:75:c8:16:ca:d4:51:8c:a4:d8:e1:6c:34:e9:22:
         7f:c7:2a:44:dc:90:c1:a6:e5:c9:7b:69:ad:f3:20:97:2a:91:
         12:8e:a5:df:6b:2c:34:ad:a9:ee:dd:6d:b3:66:7b:77:f7:a5:
         e7:8b:b1:cf:28:72:24:ae:0f:0b:9d:28:a2:45:e1:36:84:ee:
         26:01:d5:7c:45:fc:90:48:c8:23:0f:08:e3:8a:03:84:38:13:
         0b:ec:82:9d:5e:fb:2b:84:ff:82:bc:40:80:fe:5c:e1:11:2b:
         53:2a:70:c9:ed:18:3e:78:1a:9a:40:00:2b:05:60:95:f5:d5:
         c7:48:2a:24:22:07:03:18:c9:3c:2e:90:6d:d1:a6:25:d7:71:
         5d:e6:a0:e1:69:18:a6:d3:81:85:bb:18:bc:70:30:a3:ac:15:
         5e:ee:1a:96:69:54:03:df:0a:93:59:bf:18:8c:fe:ea:95:72:
         f5:ce:d9:2e:fe:ec:7c:0a:90:1a:76:8e:09:cd:29:79:56:67:
         50:12:29:86:cd:b6:b3:f7:71:70:fe:fc:69:06:49:cf:42:84:
         b1:f8:8e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----