Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144987.roa
File:                     AS144987.roa (raw, json)
Hash identifier:          NXQ3qDgpCgpPiCVy7Wr1h6f8bWbUnT0oCdM8dgw5V+4=
Subject key identifier:   45:B6:AC:16:EE:D5:0C:79:92:13:B5:B3:F6:AD:4D:4A:25:21:F6:BD
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       79BC647C36EB0F4FF8C9DBC8CDF7FF7B97493A5E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144987.roa
Signing time:             Mon 25 May 2026 06:28:17 +0000
ROA not before:           Mon 25 May 2026 06:23:17 +0000
ROA not after:            Mon 24 May 2027 06:28:17 +0000
asID:                     144987
IP address blocks:        240a:a921::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:bc:64:7c:36:eb:0f:4f:f8:c9:db:c8:cd:f7:ff:7b:97:49:3a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:17 2026 GMT
            Not After : May 24 06:28:17 2027 GMT
        Subject: CN=45B6AC16EED50C799213B5B3F6AD4D4A2521F6BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0f:eb:7a:6c:ab:e5:5b:47:f3:2f:6b:b8:cb:
                    3a:91:fb:75:f1:41:f1:b4:ff:d9:ca:0e:7f:ec:5c:
                    0d:ce:03:3d:3e:cc:f0:24:fb:cc:03:3d:53:d6:b1:
                    13:3b:86:c6:d7:da:b8:23:35:a5:d1:b8:ab:36:66:
                    2f:4f:d7:5a:22:c8:56:8d:dc:29:b1:26:54:72:87:
                    26:ef:f1:a8:36:f0:34:c8:11:eb:e1:06:fb:db:ea:
                    90:2d:11:a8:6d:47:83:88:ed:90:de:09:bc:c1:4f:
                    68:d4:09:08:2e:b3:e8:43:57:00:c6:0b:42:52:7d:
                    b4:a7:de:ce:79:4b:a3:7e:63:04:6f:c1:2f:f2:dc:
                    63:76:19:3c:47:a2:bf:cf:3e:c3:5e:cb:0c:9a:d4:
                    b5:0a:68:74:b7:0b:0f:07:b9:35:18:1a:60:ef:97:
                    7d:9f:65:0e:c8:e7:cc:27:33:8c:71:0c:42:b6:91:
                    84:0d:e4:3b:b6:d8:2e:98:fe:a7:ee:ef:40:7d:47:
                    ea:54:a5:da:26:8d:bb:ff:59:73:69:14:53:7a:3c:
                    8e:5d:0d:db:36:13:86:58:9d:a8:ba:5f:31:2c:aa:
                    45:52:8a:2b:45:29:86:7a:dc:05:4b:61:bd:27:1d:
                    38:db:82:33:15:4d:33:0b:d8:af:77:b0:eb:56:f9:
                    06:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B6:AC:16:EE:D5:0C:79:92:13:B5:B3:F6:AD:4D:4A:25:21:F6:BD
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144987.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a921::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:62:d7:10:18:f0:30:31:09:db:f9:b8:0c:72:08:2f:13:3a:
         c2:de:b3:c4:5e:cf:2b:30:76:08:d9:c3:63:8a:0b:15:2e:1f:
         b1:36:32:71:85:92:cb:ff:93:f2:fd:2f:6c:9e:f1:40:4e:f3:
         5b:d7:cd:af:70:2c:c6:f8:7d:99:7a:84:74:d9:3c:d6:21:8d:
         20:a5:90:ce:79:30:b3:91:fc:9e:1f:ba:47:a1:70:c4:c6:9c:
         14:60:7d:09:dd:60:f0:09:88:3a:71:02:0b:8d:fb:49:29:7e:
         1e:f2:ca:18:c3:13:51:9e:d8:5d:00:59:e8:6c:d2:d6:32:70:
         3e:9d:84:8c:05:a1:4e:2e:ea:76:86:63:04:73:1e:29:99:09:
         3a:97:8a:bd:19:42:f7:42:6a:db:15:b8:56:10:58:9a:7c:56:
         96:ed:1d:31:61:f3:10:32:6a:6a:5e:ce:aa:b1:07:53:cb:f8:
         91:2a:89:35:2f:95:ca:74:ee:65:19:c5:49:f5:8a:78:31:1a:
         41:3d:fd:ce:5b:66:4c:48:21:94:6f:04:51:fd:43:15:e5:3d:
         a3:7a:8c:e5:ab:bb:62:c1:5e:59:e8:92:55:92:3e:70:12:f7:
         a0:9c:1f:d4:d0:26:dd:1a:2e:f8:46:99:b4:b6:a2:dc:d0:40:
         09:33:1b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----