Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144998.roa
File:                     AS144998.roa (raw, json)
Hash identifier:          KalSeiQ89P4JdKMtcdK4u2Url90Sfq7xM4TibFIqkS4=
Subject key identifier:   65:5C:AF:40:C4:8A:40:74:27:BA:16:D5:A1:63:BA:E5:92:4A:68:A6
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1CC188F0F0D6721893F6AA5D8CD3CDB797D5E57B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144998.roa
Signing time:             Fri 22 May 2026 04:08:14 +0000
ROA not before:           Fri 22 May 2026 04:03:14 +0000
ROA not after:            Fri 21 May 2027 04:08:14 +0000
asID:                     144998
IP address blocks:        240a:a92c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c1:88:f0:f0:d6:72:18:93:f6:aa:5d:8c:d3:cd:b7:97:d5:e5:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:03:14 2026 GMT
            Not After : May 21 04:08:14 2027 GMT
        Subject: CN=655CAF40C48A407427BA16D5A163BAE5924A68A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c8:61:a6:b8:6e:e0:f1:de:2d:44:84:c2:0b:
                    d9:51:a0:b3:0e:51:6a:fd:c8:30:e3:a5:3b:97:8c:
                    35:15:c1:25:a7:19:98:73:23:c6:9b:08:2b:e1:4d:
                    8c:86:2f:02:72:13:b2:9c:8c:b6:c7:f0:16:19:88:
                    0e:20:0c:ae:78:35:86:2c:54:7c:ac:d0:5c:06:58:
                    50:d8:7a:cb:be:de:71:9b:5f:4d:e3:1e:23:27:ac:
                    db:66:55:80:b3:d4:29:db:4d:54:4c:a0:c4:3f:2b:
                    8f:65:26:4d:c0:da:da:f6:af:15:63:4e:f0:0e:89:
                    c9:33:13:a4:a7:1c:42:ce:6e:9b:ed:e9:4c:7e:a1:
                    7d:4b:43:3c:27:7c:ae:bd:54:3c:78:3d:25:22:10:
                    f4:b1:c3:25:43:a2:12:04:e7:96:4e:26:55:9e:73:
                    fe:e1:c0:d8:09:08:3c:fc:47:33:c7:ab:9b:31:3c:
                    2e:8b:32:20:95:90:3b:7c:a0:69:e0:53:39:94:42:
                    32:c1:12:95:0f:e1:7c:bc:87:bc:51:16:76:65:b5:
                    03:33:9e:f2:d2:b4:fd:1e:5c:e1:57:52:0a:5e:e2:
                    fc:89:8b:b4:f8:01:f1:7f:7b:7f:7b:68:6f:a4:1d:
                    ef:88:ea:d2:d9:89:47:7e:cb:70:39:da:e4:6b:52:
                    cb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:5C:AF:40:C4:8A:40:74:27:BA:16:D5:A1:63:BA:E5:92:4A:68:A6
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144998.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a92c::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:ad:de:11:00:bb:06:0f:9d:f1:55:1d:7d:d4:95:4a:56:a0:
         55:39:9b:73:32:08:d7:0c:c5:7e:c8:36:61:31:8a:ff:50:e0:
         96:85:1c:1a:42:6a:1e:d0:79:66:e7:e6:43:71:22:79:89:9d:
         71:42:16:ab:1f:f9:4a:8f:3e:3c:59:61:77:1d:b6:5d:84:9e:
         2a:b5:b2:e2:6d:4c:3b:fd:9e:49:a3:fe:e8:5a:da:82:d3:be:
         0c:e6:e9:80:25:ff:c2:ab:fd:cf:a2:38:21:66:a0:a8:60:83:
         6d:47:75:a8:fd:9f:98:2b:65:a6:d0:53:33:00:0c:74:ee:b5:
         18:c8:9c:c1:06:d2:d0:e2:fb:74:30:a6:1d:6b:83:98:59:7a:
         1c:59:00:6c:b8:04:71:11:9d:3e:e8:1b:f7:0c:d2:ec:4b:f3:
         d9:f3:77:be:a8:c4:32:db:b7:4b:9f:b2:44:e2:73:a2:2e:47:
         97:af:21:7e:65:8d:11:41:9d:8f:29:e0:de:99:bd:80:43:ba:
         e5:a6:c6:15:26:91:28:99:7d:60:6e:03:70:9a:e1:62:1a:20:
         ce:7b:e3:e5:0d:98:e4:d4:5e:37:f1:41:f8:7c:c2:a0:1e:a7:
         08:1f:d6:fe:6a:ff:5b:99:86:98:ec:90:28:e4:bc:6c:be:bc:
         a9:cc:fe:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----