Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144967.roa
File:                     AS144967.roa (raw, json)
Hash identifier:          XS5UhrciuQEPVivQ7vFevn0keWgtKx4fUt85J/+/+FQ=
Subject key identifier:   94:5B:7A:84:57:06:84:76:BC:4E:40:84:47:01:70:16:35:C9:4C:C1
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1C84035F763ECF2A55FAB50768C29703D99B0A0F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144967.roa
Signing time:             Fri 22 May 2026 02:47:51 +0000
ROA not before:           Fri 22 May 2026 02:42:51 +0000
ROA not after:            Fri 21 May 2027 02:47:51 +0000
asID:                     144967
IP address blocks:        240a:a90d::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:84:03:5f:76:3e:cf:2a:55:fa:b5:07:68:c2:97:03:d9:9b:0a:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:42:51 2026 GMT
            Not After : May 21 02:47:51 2027 GMT
        Subject: CN=945B7A8457068476BC4E40844701701635C94CC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9a:f4:dd:ad:62:3f:b9:ce:5c:0c:86:16:4b:
                    f2:02:5e:99:a8:c1:18:32:f2:28:7c:27:5b:7c:09:
                    cd:d9:bc:3e:c7:e9:b1:b0:1f:48:2f:b9:fc:0c:84:
                    b6:df:97:74:da:fb:88:b4:b8:c2:bb:6e:d2:51:70:
                    be:5b:e1:3e:82:24:3f:9d:ce:8e:1a:f4:03:7f:d4:
                    ac:e3:80:55:76:ca:06:59:35:05:db:2f:d1:b7:ce:
                    68:44:ad:79:90:a4:3c:46:6f:7e:b0:1c:55:39:2b:
                    dc:58:99:57:36:0f:82:34:64:a5:39:cc:f3:ab:69:
                    d4:11:5b:86:e5:0b:c2:a4:d2:ca:c5:e7:42:34:e6:
                    dc:dc:58:99:4b:7c:bc:63:2f:c8:d5:10:43:ab:3c:
                    ca:be:dd:15:12:11:6b:4e:9b:6a:48:22:3e:4f:ba:
                    86:8a:36:ec:2c:83:80:9b:15:05:e5:f9:6b:75:bd:
                    1e:0a:59:d4:5f:4d:78:cd:c3:9a:2b:05:7e:75:78:
                    3c:6c:70:21:6d:b1:52:17:5f:7f:8d:d3:6c:5a:7b:
                    dd:3c:4b:4f:48:4b:c6:82:1a:7d:44:ba:63:2d:33:
                    b1:4b:bb:65:cb:8d:9c:80:de:85:6d:c3:05:06:04:
                    5e:ee:d5:c2:bd:48:1f:90:c6:bd:52:46:f3:7d:b0:
                    0b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:5B:7A:84:57:06:84:76:BC:4E:40:84:47:01:70:16:35:C9:4C:C1
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144967.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a90d::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:c6:c3:a0:80:90:84:a7:e5:0a:29:61:24:d3:d3:95:46:20:
         63:fb:d0:7b:ca:a3:8d:14:b1:9e:b8:66:4a:51:69:c4:80:d8:
         81:f7:96:6c:ad:01:2a:95:81:2c:e0:fd:4f:00:0e:98:b7:86:
         81:3f:de:c4:b8:8f:fe:76:a7:6f:2c:1f:3d:d8:32:78:22:22:
         ae:95:0d:bf:f5:b0:21:66:df:8c:9b:d3:c6:44:16:4e:11:fa:
         18:26:34:ee:65:bd:40:8d:0b:7b:fe:fa:d2:76:df:3e:fa:4d:
         ad:7c:42:da:95:f1:10:5a:77:a3:1d:e7:17:ab:79:b9:78:20:
         93:29:fe:af:f4:a0:67:f6:bd:6c:8e:6b:0e:27:0a:11:db:27:
         17:d6:81:43:61:6a:b5:8c:2a:56:5e:43:23:58:96:02:fa:c6:
         98:54:63:54:60:74:79:0c:7a:b2:a3:d8:6a:fc:9a:8a:4d:3a:
         87:24:3a:4f:b5:2b:2e:66:02:1a:ee:a0:17:82:a9:3a:e8:9e:
         de:b2:14:28:22:c0:12:07:6a:74:70:96:69:b9:46:76:53:09:
         bf:49:63:7b:f5:56:dc:4b:6c:b4:fc:9e:cd:ac:20:8f:19:7c:
         f1:14:13:cb:0d:01:a7:c3:6f:0b:ef:fa:ce:f3:0e:21:b5:15:
         bf:d1:93:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----