Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144961.roa
File:                     AS144961.roa (raw, json)
Hash identifier:          QoCFqNOpRN1EApTfJ65PDbPuJ4H3TgNlaSYV0UNblU8=
Subject key identifier:   B2:4B:E2:81:B8:83:80:20:C7:9C:9F:F4:9F:0C:B7:25:90:63:8A:97
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       446484B292ED107D64435C413BDFE21BD3919CE6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144961.roa
Signing time:             Fri 22 May 2026 06:05:11 +0000
ROA not before:           Fri 22 May 2026 06:00:11 +0000
ROA not after:            Fri 21 May 2027 06:05:11 +0000
asID:                     144961
IP address blocks:        240a:a907::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:64:84:b2:92:ed:10:7d:64:43:5c:41:3b:df:e2:1b:d3:91:9c:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:00:11 2026 GMT
            Not After : May 21 06:05:11 2027 GMT
        Subject: CN=B24BE281B8838020C79C9FF49F0CB72590638A97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1a:63:db:07:60:7a:77:4b:9a:a7:31:13:da:
                    bb:34:88:61:ec:c5:9c:23:ee:15:83:ed:83:4b:f0:
                    5f:90:5f:74:e0:0c:c4:2d:24:df:e2:43:cf:bb:bd:
                    1a:b1:ba:eb:54:b0:43:0a:c7:ff:70:46:4d:b1:0c:
                    a4:e6:b6:f7:61:29:87:88:c2:dd:25:38:2c:c3:7b:
                    4b:e3:6c:e3:af:5a:a2:0d:b4:2b:62:1c:1e:0d:d4:
                    1a:ef:2f:38:8b:ee:47:3b:d2:ff:9b:86:6f:45:66:
                    bb:95:91:40:1f:3f:64:1b:ed:00:fd:75:19:43:2a:
                    0c:ad:5e:1f:e6:b7:22:8d:4d:34:f2:76:53:ae:6a:
                    10:bb:b7:01:58:65:43:ea:30:89:c6:55:c4:e0:fd:
                    fa:40:b8:a0:95:2c:4d:76:36:43:06:39:ee:0f:f5:
                    03:d3:bc:ed:71:43:df:14:b4:2b:4b:12:63:a1:31:
                    2f:b2:a3:94:c7:75:6a:69:11:80:75:04:ea:76:d7:
                    a6:ba:79:f0:4f:39:c7:d7:f6:94:d7:c1:4f:99:85:
                    33:b4:12:36:13:3b:c1:c6:ca:dc:05:36:e2:8f:b3:
                    4b:f6:af:0c:db:f4:31:27:e2:df:79:27:54:f7:8b:
                    38:c8:e8:d3:e9:da:6c:bd:90:94:0f:d7:47:e0:b6:
                    44:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:4B:E2:81:B8:83:80:20:C7:9C:9F:F4:9F:0C:B7:25:90:63:8A:97
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144961.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a907::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:cc:01:2c:6c:6a:cc:c9:ac:5f:f5:b5:8a:0e:ce:7c:f7:f5:
         03:32:08:de:e2:21:cb:ba:09:95:75:94:02:ea:51:d4:f3:a2:
         b6:0c:25:41:e6:69:4b:be:54:47:bb:40:74:92:12:e1:3e:e6:
         b8:bb:7a:4d:9f:e2:ab:33:cd:31:d7:7f:3b:91:fe:4f:d8:13:
         85:71:57:b7:6d:14:24:42:15:a8:30:d5:15:d9:51:80:91:47:
         33:ed:81:47:db:3c:a0:eb:9f:85:38:12:b4:7a:bc:b3:37:3c:
         6d:6e:6d:4b:81:fa:ce:0c:da:bf:60:a4:2a:37:dc:d6:84:83:
         df:0e:19:67:3e:b6:04:e9:dc:2e:ba:f8:4e:a3:1d:ad:1d:54:
         1b:3f:7c:2c:83:e1:68:cf:1c:a2:f4:25:04:a1:e4:96:57:7a:
         d6:04:a5:80:4d:4b:f7:ee:c2:c8:46:59:7c:9b:17:24:c8:78:
         00:d2:00:ef:82:59:0e:53:52:e0:71:0f:fa:4c:c5:25:90:3f:
         02:25:ef:c6:51:d8:4e:8d:0a:dc:cc:64:61:2b:46:89:ad:62:
         ee:56:15:eb:3a:bf:bf:d3:74:d9:ee:73:85:10:1c:20:a5:c4:
         11:05:35:75:37:28:a7:1b:1a:19:e5:7e:12:8e:ae:6c:9f:85:
         f8:98:74:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----