Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144004.roa
File:                     AS144004.roa (raw, json)
Hash identifier:          mibMNMPvUuVxsVGHk9sjdD1n/2M8lj/k4EsR6BlPkDM=
Subject key identifier:   6C:52:28:54:D3:70:91:7D:D7:67:14:24:48:33:DE:FA:0A:7B:6A:9F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       347F0F0029993C5FF2E9C7DE6659D805AF617050
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144004.roa
Signing time:             Tue 26 May 2026 06:30:45 +0000
ROA not before:           Tue 26 May 2026 06:25:45 +0000
ROA not after:            Tue 25 May 2027 06:30:45 +0000
asID:                     144004
IP address blocks:        240a:a54a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:7f:0f:00:29:99:3c:5f:f2:e9:c7:de:66:59:d8:05:af:61:70:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:45 2026 GMT
            Not After : May 25 06:30:45 2027 GMT
        Subject: CN=6C522854D370917DD76714244833DEFA0A7B6A9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2d:60:c1:4f:0a:71:36:4d:e4:1a:28:2f:40:
                    54:55:ee:fc:ed:05:15:e0:5e:02:e3:4f:74:e6:9f:
                    a6:86:a1:de:f7:aa:a3:c1:64:5f:20:ba:ca:b8:0d:
                    bf:a4:fe:98:99:63:38:2f:2b:01:38:df:f1:32:31:
                    e7:40:4f:e3:f6:f0:59:53:f5:09:c6:a7:a2:d4:ab:
                    82:f4:40:11:8a:d7:40:34:67:ef:96:c1:00:50:b9:
                    15:35:09:08:81:d9:c8:83:9b:72:21:18:48:37:29:
                    97:a6:d1:f3:e8:26:d4:bc:00:a9:4e:e1:0c:e1:6b:
                    cc:9d:f1:5b:89:d7:59:f6:5e:23:f2:23:8e:6e:11:
                    32:a8:a6:18:a0:ac:c3:61:e1:1a:09:59:7e:5a:13:
                    78:c1:16:78:01:4c:74:5e:86:1c:3d:29:37:3d:0c:
                    69:3a:f2:a1:6d:dc:2d:eb:b8:0d:74:b6:08:0a:df:
                    20:01:20:53:f9:3d:ee:d0:de:3a:41:f8:79:75:78:
                    96:ba:ef:01:c4:38:8d:46:a1:8f:88:46:fa:d9:2c:
                    2d:ec:40:65:27:92:f4:98:2a:19:c8:45:a8:56:ff:
                    85:cf:50:b2:ce:14:1a:e1:10:13:cc:81:78:8f:5a:
                    86:cf:d2:5b:a9:4d:a6:a4:30:88:ee:7b:53:64:7a:
                    c6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:52:28:54:D3:70:91:7D:D7:67:14:24:48:33:DE:FA:0A:7B:6A:9F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144004.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a54a::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:2a:b9:2f:d0:30:58:18:fb:0a:56:b8:d5:db:93:72:7c:19:
         44:1f:1d:33:25:9c:d5:f3:0d:00:bd:9b:d0:ba:ce:19:c5:c1:
         74:3e:b7:73:7d:cd:0e:8c:0b:dd:bf:d0:fb:22:a7:d8:e7:75:
         a4:95:8e:50:97:6a:fd:7b:2f:d1:ef:72:49:72:f4:57:cd:b8:
         57:14:41:09:e4:bb:d3:9d:f4:4b:c7:65:e5:5c:46:83:47:63:
         fd:5a:d9:4c:18:4c:a3:1f:0c:b8:1d:f2:48:9e:e1:c5:6a:7e:
         0c:52:ac:b3:b7:0f:bd:09:6d:b3:d3:38:d5:23:16:7a:30:b0:
         64:f8:9d:d4:c1:70:7f:22:ef:61:dc:8a:de:5f:b0:f3:37:89:
         9e:3f:77:b8:c5:13:b2:33:e5:e4:1c:2f:50:0a:34:38:c7:fc:
         27:bf:bb:11:87:5a:06:3a:a0:5c:09:06:52:94:2e:31:3f:e1:
         1a:4e:f4:8d:32:08:bf:cd:e6:65:c0:e3:e2:56:f2:64:e0:eb:
         4c:11:f9:0d:d3:ca:35:4c:63:e4:11:64:3e:ab:fe:b1:73:5a:
         18:f1:32:1f:fb:ad:b8:b3:5a:fc:3e:bb:b5:70:5d:34:f4:9f:
         72:87:33:34:84:58:0a:9b:62:2c:6f:59:c1:d0:75:75:ed:ac:
         82:f4:ac:fa
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUNH8PACmZPF/y6cfeZlnYBa9hcFAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjI1NDVaFw0yNzA1MjUwNjMwNDVaMDMxMTAvBgNV
BAMTKDZDNTIyODU0RDM3MDkxN0RENzY3MTQyNDQ4MzNERUZBMEE3QjZBOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDELWDBTwpxNk3kGigvQFRV7vzt
BRXgXgLjT3Tmn6aGod73qqPBZF8gusq4Db+k/piZYzgvKwE43/EyMedAT+P28FlT
9QnGp6LUq4L0QBGK10A0Z++WwQBQuRU1CQiB2ciDm3IhGEg3KZem0fPoJtS8AKlO
4Qzha8yd8VuJ11n2XiPyI45uETKophigrMNh4RoJWX5aE3jBFngBTHRehhw9KTc9
DGk68qFt3C3ruA10tggK3yABIFP5Pe7Q3jpB+Hl1eJa67wHEOI1GoY+IRvrZLC3s
QGUnkvSYKhnIRahW/4XPULLOFBrhEBPMgXiPWobP0lupTaakMIjue1NkesaBAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUbFIoVNNwkX3XZxQkSDPe+gp7ap8wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MDA0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqlSjANBgkqhkiG9w0BAQsFAAOCAQEACSq5
L9AwWBj7Cla41duTcnwZRB8dMyWc1fMNAL2b0LrOGcXBdD63c33NDowL3b/Q+yKn
2Od1pJWOUJdq/Xsv0e9ySXL0V824VxRBCeS70530S8dl5VxGg0dj/VrZTBhMox8M
uB3ySJ7hxWp+DFKss7cPvQlts9M41SMWejCwZPid1MFwfyLvYdyK3l+w8zeJnj93
uMUTsjPl5BwvUAo0OMf8J7+7EYdaBjqgXAkGUpQuMT/hGk70jTIIv83mZcDj4lby
ZODrTBH5DdPKNUxj5BFkPqv+sXNaGPEyH/utuLNa/D67tXBdNPSfcoczNIRYCpti
LG9ZwdB1de2sgvSs+g==
-----END CERTIFICATE-----