Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144000.roa
File:                     AS144000.roa (raw, json)
Hash identifier:          zXKPcu+FT0bEFkAeDlqv/4moNbnWLR2uz52sW+XxYnw=
Subject key identifier:   54:56:71:A6:4E:87:96:6B:7F:00:93:8E:96:8B:C0:A4:1B:C0:B3:76
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4F6ABFB5B59DB842E23D33DBFB71958479BA11AD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144000.roa
Signing time:             Fri 22 May 2026 07:09:01 +0000
ROA not before:           Fri 22 May 2026 07:04:01 +0000
ROA not after:            Fri 21 May 2027 07:09:01 +0000
asID:                     144000
IP address blocks:        240a:a546::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:6a:bf:b5:b5:9d:b8:42:e2:3d:33:db:fb:71:95:84:79:ba:11:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:04:01 2026 GMT
            Not After : May 21 07:09:01 2027 GMT
        Subject: CN=545671A64E87966B7F00938E968BC0A41BC0B376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:46:25:a4:0a:f0:a4:63:cd:19:a3:a3:8a:5d:
                    f2:02:a8:ad:86:48:0c:7e:d0:76:2b:85:45:92:f5:
                    e1:df:df:fb:87:64:f4:d4:7a:02:03:58:17:48:bd:
                    da:fd:97:60:7c:92:30:54:7c:06:6d:74:a6:e7:b6:
                    24:cc:e2:9d:06:51:98:ee:37:0d:63:b1:af:7e:99:
                    c7:87:08:4c:2a:8f:17:9f:4c:e9:72:de:9b:16:9a:
                    88:06:ef:da:d8:da:e0:fa:2d:0c:59:d1:1c:ce:cf:
                    26:0c:a9:b2:17:b3:80:ff:be:f1:e1:ff:56:28:09:
                    f6:71:e9:16:96:27:f7:8d:39:89:c5:38:2d:dd:86:
                    83:57:95:f8:7e:69:1e:b9:1a:73:d7:b5:58:27:35:
                    c7:89:af:bd:0f:42:65:cf:20:24:1a:48:22:7a:6f:
                    a5:12:70:2e:42:d0:7d:18:c1:d4:3e:4a:31:4e:26:
                    55:8f:dd:4b:61:79:8a:c2:cd:fa:86:c8:83:e0:56:
                    d4:2e:c0:0d:92:9d:92:5c:af:29:03:3b:6c:8b:73:
                    55:03:d7:0f:3a:96:d9:f8:be:2a:b0:01:4f:ca:a7:
                    e8:7a:97:ec:bb:34:cf:72:d4:e0:b7:0b:2a:4d:26:
                    cd:bd:f8:b5:0f:37:d7:72:b8:c4:d7:be:b0:5a:d6:
                    89:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:56:71:A6:4E:87:96:6B:7F:00:93:8E:96:8B:C0:A4:1B:C0:B3:76
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144000.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a546::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:5e:78:61:73:6b:80:0b:38:bc:5a:df:95:a2:f7:5b:08:9d:
         41:8a:a0:48:cd:c5:10:82:0d:af:ab:4c:b3:3f:22:d8:fb:64:
         79:42:26:80:4e:93:d9:4f:a3:a2:ff:f8:a4:7e:2d:7e:71:e5:
         1c:f3:db:6b:7c:88:f5:9f:76:4e:8a:7d:8e:96:d3:19:cb:03:
         a8:de:5a:6e:f7:8c:65:81:61:81:1a:51:50:45:97:a3:98:7f:
         a1:11:33:30:e5:a1:e1:dd:fc:47:77:96:e0:1f:55:10:7f:d2:
         10:ba:52:7f:c7:0a:51:82:31:fc:bb:da:b8:d5:d9:5c:ee:c3:
         8d:db:36:db:77:cc:43:fe:99:77:b4:a6:69:26:af:21:31:3a:
         95:71:f0:a0:01:96:64:2b:be:a6:cf:5c:51:ef:bb:0f:ea:0a:
         27:e7:9e:5d:c7:b9:3d:45:0a:7c:bc:8e:4f:4d:29:b2:1c:ad:
         c6:ee:32:2e:95:61:ff:6b:39:9b:23:4e:88:95:3d:f2:35:ec:
         05:e0:73:b7:f9:fa:65:f8:4f:36:ed:11:64:eb:35:73:52:b2:
         2e:42:28:09:e6:d0:31:fc:6e:33:3e:19:3b:08:6f:c7:f0:69:
         e7:bd:50:97:22:fc:81:27:2c:75:90:d2:d9:07:47:5a:4e:b3:
         ff:2b:86:bc
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUT2q/tbWduELiPTPb+3GVhHm6Ea0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzA0MDFaFw0yNzA1MjEwNzA5MDFaMDMxMTAvBgNV
BAMTKDU0NTY3MUE2NEU4Nzk2NkI3RjAwOTM4RTk2OEJDMEE0MUJDMEIzNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKRiWkCvCkY80Zo6OKXfICqK2G
SAx+0HYrhUWS9eHf3/uHZPTUegIDWBdIvdr9l2B8kjBUfAZtdKbntiTM4p0GUZju
Nw1jsa9+mceHCEwqjxefTOly3psWmogG79rY2uD6LQxZ0RzOzyYMqbIXs4D/vvHh
/1YoCfZx6RaWJ/eNOYnFOC3dhoNXlfh+aR65GnPXtVgnNceJr70PQmXPICQaSCJ6
b6UScC5C0H0YwdQ+SjFOJlWP3UtheYrCzfqGyIPgVtQuwA2SnZJcrykDO2yLc1UD
1w86ltn4viqwAU/Kp+h6l+y7NM9y1OC3CypNJs29+LUPN9dyuMTXvrBa1ok/AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUVFZxpk6Hlmt/AJOOlovApBvAs3YwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MDAwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqlRjANBgkqhkiG9w0BAQsFAAOCAQEAk154
YXNrgAs4vFrflaL3WwidQYqgSM3FEIINr6tMsz8i2PtkeUImgE6T2U+jov/4pH4t
fnHlHPPba3yI9Z92Top9jpbTGcsDqN5abveMZYFhgRpRUEWXo5h/oREzMOWh4d38
R3eW4B9VEH/SELpSf8cKUYIx/LvauNXZXO7Djds223fMQ/6Zd7SmaSavITE6lXHw
oAGWZCu+ps9cUe+7D+oKJ+eeXce5PUUKfLyOT00pshytxu4yLpVh/2s5myNOiJU9
8jXsBeBzt/n6ZfhPNu0RZOs1c1KyLkIoCebQMfxuMz4ZOwhvx/Bp571QlyL8gScs
dZDS2QdHWk6z/yuGvA==
-----END CERTIFICATE-----