Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144006.roa
File:                     AS144006.roa (raw, json)
Hash identifier:          hxijrsv/G+IAmtu5Uk4BoAQX1sW6Rrt/dlhrsjPITPs=
Subject key identifier:   1D:04:1B:73:5C:C8:5E:0A:B1:99:9C:6E:1C:A8:C4:14:38:D2:C4:42
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       547F00AF0D6CFEA46F8CD767086EC1DB6A0B4890
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144006.roa
Signing time:             Fri 22 May 2026 07:09:19 +0000
ROA not before:           Fri 22 May 2026 07:04:19 +0000
ROA not after:            Fri 21 May 2027 07:09:19 +0000
asID:                     144006
IP address blocks:        240a:a54c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:7f:00:af:0d:6c:fe:a4:6f:8c:d7:67:08:6e:c1:db:6a:0b:48:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:04:19 2026 GMT
            Not After : May 21 07:09:19 2027 GMT
        Subject: CN=1D041B735CC85E0AB1999C6E1CA8C41438D2C442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fd:5e:14:34:6f:ab:96:29:c0:d3:c7:73:8f:
                    fc:18:82:d1:74:04:30:61:fb:5a:c7:3b:c7:99:b3:
                    e2:9c:6f:14:c3:80:89:10:cc:75:5a:68:7b:e8:85:
                    fe:08:21:70:ae:bd:7b:df:65:0e:64:18:7d:c1:d6:
                    54:64:2a:01:7c:0f:ef:be:2f:fc:fc:fa:ce:d1:3e:
                    01:24:9c:51:7f:30:f7:fa:f7:b9:3d:96:17:ea:a7:
                    10:96:28:32:9e:f1:3a:7c:56:ac:11:3c:4f:ab:f3:
                    07:29:6e:10:23:93:80:63:62:b4:db:5c:dc:2c:25:
                    05:bb:bd:c4:94:6f:9e:32:a2:94:37:f6:aa:24:03:
                    ec:13:f0:22:59:d9:9c:fd:8d:d0:b9:65:02:fa:4e:
                    c9:3a:06:08:c9:6f:15:e3:64:23:bd:b7:3f:a6:72:
                    52:9c:06:12:22:1b:56:eb:60:ef:72:c0:2a:6c:81:
                    51:c7:dd:1f:21:75:80:81:37:8b:1c:bc:c8:a2:6f:
                    97:dd:9b:22:90:9d:56:eb:41:de:ee:6d:01:d4:b7:
                    0a:3e:31:88:05:5b:b5:95:9f:22:2d:15:38:ce:4b:
                    22:8b:53:23:2b:fd:bd:ad:68:b9:61:a5:5b:58:10:
                    cd:c6:78:36:20:a7:08:71:c2:20:d5:42:f8:d3:c4:
                    27:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:04:1B:73:5C:C8:5E:0A:B1:99:9C:6E:1C:A8:C4:14:38:D2:C4:42
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144006.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a54c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:ce:a1:70:24:51:50:50:91:d8:0d:73:47:d2:ca:59:2d:7d:
         d9:84:41:5c:2e:67:3b:fe:fc:91:db:3b:4b:3c:bd:fd:e3:70:
         bd:97:4c:04:a2:dc:16:1d:cb:8c:8b:ec:1a:36:54:7d:21:a1:
         0a:7d:8e:ac:1e:0e:12:a6:67:b3:b5:f0:d3:9b:45:b9:30:6a:
         da:a9:69:b8:13:2a:88:89:99:c7:f5:d5:4d:53:27:f3:ca:7c:
         1e:98:15:8f:ad:ac:a4:e6:25:62:60:d8:84:2c:7e:33:dd:25:
         e9:02:14:7f:d9:16:4d:c1:c3:cf:54:9e:9e:81:49:b6:36:5b:
         1e:5b:3b:5a:22:65:b6:f2:92:70:e1:a3:6d:12:37:bd:0c:cb:
         0c:cf:90:ec:03:03:26:cf:e7:5a:f8:15:8d:1b:68:18:5f:84:
         0f:0c:2b:da:c8:00:46:38:3d:38:0d:65:a5:88:cd:52:8f:81:
         1b:48:1f:be:e7:b4:c9:41:7c:38:f3:fc:c2:90:9f:f2:03:a3:
         51:1b:40:f8:50:00:f1:7a:3e:43:81:50:fc:b7:7f:32:e9:60:
         5f:76:ae:21:9c:d1:2e:b2:db:82:4d:f6:eb:f4:b1:45:ee:4f:
         85:22:46:5f:3b:b8:98:50:61:3c:26:d4:1a:9d:54:ac:c4:1b:
         7d:ee:dd:15
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUVH8Arw1s/qRvjNdnCG7B22oLSJAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzA0MTlaFw0yNzA1MjEwNzA5MTlaMDMxMTAvBgNV
BAMTKDFEMDQxQjczNUNDODVFMEFCMTk5OUM2RTFDQThDNDE0MzhEMkM0NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw/V4UNG+rlinA08dzj/wYgtF0
BDBh+1rHO8eZs+KcbxTDgIkQzHVaaHvohf4IIXCuvXvfZQ5kGH3B1lRkKgF8D+++
L/z8+s7RPgEknFF/MPf697k9lhfqpxCWKDKe8Tp8VqwRPE+r8wcpbhAjk4BjYrTb
XNwsJQW7vcSUb54yopQ39qokA+wT8CJZ2Zz9jdC5ZQL6Tsk6BgjJbxXjZCO9tz+m
clKcBhIiG1brYO9ywCpsgVHH3R8hdYCBN4scvMiib5fdmyKQnVbrQd7ubQHUtwo+
MYgFW7WVnyItFTjOSyKLUyMr/b2taLlhpVtYEM3GeDYgpwhxwiDVQvjTxCftAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUHQQbc1zIXgqxmZxuHKjEFDjSxEIwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MDA2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqlTDANBgkqhkiG9w0BAQsFAAOCAQEAts6h
cCRRUFCR2A1zR9LKWS192YRBXC5nO/78kds7Szy9/eNwvZdMBKLcFh3LjIvsGjZU
fSGhCn2OrB4OEqZns7Xw05tFuTBq2qlpuBMqiImZx/XVTVMn88p8HpgVj62spOYl
YmDYhCx+M90l6QIUf9kWTcHDz1SenoFJtjZbHls7WiJltvKScOGjbRI3vQzLDM+Q
7AMDJs/nWvgVjRtoGF+EDwwr2sgARjg9OA1lpYjNUo+BG0gfvue0yUF8OPP8wpCf
8gOjURtA+FAA8Xo+Q4FQ/Ld/MulgX3auIZzRLrLbgk326/SxRe5PhSJGXzu4mFBh
PCbUGp1UrMQbfe7dFQ==
-----END CERTIFICATE-----