Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144960.roa
File:                     AS144960.roa (raw, json)
Hash identifier:          +o/5mVhogLwCN+V+l2oJulEbeh2GSoDjsF/X040mZ9g=
Subject key identifier:   40:D5:F6:C5:73:DF:0E:04:DC:C2:4A:DE:55:D8:43:2C:DF:F3:CA:B7
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       79FAFB3AF88945D4298BB24F2072B7426A423A2A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144960.roa
Signing time:             Tue 26 May 2026 02:35:04 +0000
ROA not before:           Tue 26 May 2026 02:30:04 +0000
ROA not after:            Tue 25 May 2027 02:35:04 +0000
asID:                     144960
IP address blocks:        240a:a906::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:fa:fb:3a:f8:89:45:d4:29:8b:b2:4f:20:72:b7:42:6a:42:3a:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:30:04 2026 GMT
            Not After : May 25 02:35:04 2027 GMT
        Subject: CN=40D5F6C573DF0E04DCC24ADE55D8432CDFF3CAB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:95:83:ac:95:ab:8f:35:67:bc:e4:57:c3:77:
                    b3:57:3d:e2:35:08:08:42:f3:30:78:3f:bb:2c:cb:
                    1c:6d:e3:5a:67:e5:ca:46:7c:c6:87:bc:e5:ce:0e:
                    6f:1b:51:54:d4:32:ac:33:1e:c9:20:74:38:0a:e9:
                    61:0a:a8:cc:f9:c0:7b:b4:44:fc:8a:d2:09:82:c5:
                    9e:5d:f6:51:24:63:d1:1e:73:4b:18:33:2f:5a:8e:
                    ae:9c:c6:f8:6c:2d:c4:88:ac:dc:0c:a0:bb:77:d2:
                    f3:83:b4:eb:eb:4a:1e:8e:1f:b0:3b:37:bd:0d:7a:
                    f8:19:6c:8a:f4:3c:39:97:e9:48:a0:bd:fc:2b:ce:
                    70:22:6d:12:7a:2d:e4:8d:7d:a4:fc:3d:39:f7:17:
                    cd:79:88:f3:ec:88:e1:20:2d:ca:7c:84:29:46:e5:
                    8c:f1:61:af:c7:f6:aa:70:b2:a5:45:38:87:a1:fa:
                    a8:88:b9:f1:b5:2e:78:42:ba:cf:13:85:08:04:bd:
                    84:ba:90:21:2e:c3:63:eb:1c:c6:d8:61:5c:b7:ab:
                    5d:8d:6a:3d:27:cf:5e:a5:21:c7:ad:a9:18:7f:20:
                    2e:2a:07:51:f5:5b:b3:1f:0f:0f:ab:f3:f4:a8:6a:
                    45:d0:27:d5:f5:44:c1:29:44:cd:54:c8:cf:5a:0e:
                    2b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D5:F6:C5:73:DF:0E:04:DC:C2:4A:DE:55:D8:43:2C:DF:F3:CA:B7
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144960.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a906::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:47:31:ab:00:1e:ac:9e:49:47:72:ba:a3:07:7d:d5:99:8b:
         56:07:5e:0a:76:1b:06:7c:d6:8c:18:3d:20:c0:18:df:29:9d:
         f1:ac:fb:a0:6b:16:f9:37:0a:3f:db:dd:e5:df:bd:be:e9:ab:
         43:9a:cc:b9:6f:da:a7:2f:bd:9e:ba:f0:c8:e6:d0:a1:68:b4:
         12:ee:a0:de:97:09:21:c6:12:24:a6:c0:2f:17:5e:50:02:25:
         30:ec:70:2c:28:9d:36:0a:bd:73:65:53:f4:da:de:64:8d:39:
         14:dd:22:8f:31:0d:6e:c8:be:3b:cf:e7:35:37:15:9d:2b:a6:
         64:31:a0:ce:2e:53:95:bf:ca:02:d2:79:49:a4:a2:f2:7e:b1:
         b2:3d:be:2f:83:36:19:ee:06:2f:20:2a:47:68:e4:da:9e:19:
         ab:7b:3c:21:a9:a3:c5:75:3f:a6:7b:c8:04:c7:84:66:52:92:
         f5:a2:63:42:98:14:f6:f9:3e:36:60:9d:09:48:6e:60:ce:74:
         bc:65:34:36:e6:65:58:57:80:77:19:99:fe:d4:6a:68:0c:b2:
         bc:92:71:28:68:7c:18:d5:70:6f:56:86:2c:ef:34:e7:b3:0c:
         6d:78:cf:6d:35:6b:e4:ec:ad:2d:80:bb:2a:fa:bc:32:51:97:
         5a:76:28:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----