Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144056.roa
File:                     AS144056.roa (raw, json)
Hash identifier:          Ra8zy61Nw2/oToaUOWbIOJNnFr/vIkGqCi146i49m/E=
Subject key identifier:   AD:CC:55:CC:6D:D7:8C:72:0F:43:9B:22:4C:4D:B5:B7:46:07:80:F0
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1B2F1C9291ADE550C334589CFBFB11C29C12EEE3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144056.roa
Signing time:             Fri 22 May 2026 07:32:21 +0000
ROA not before:           Fri 22 May 2026 07:27:21 +0000
ROA not after:            Fri 21 May 2027 07:32:21 +0000
asID:                     144056
IP address blocks:        240a:a57e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:2f:1c:92:91:ad:e5:50:c3:34:58:9c:fb:fb:11:c2:9c:12:ee:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:21 2026 GMT
            Not After : May 21 07:32:21 2027 GMT
        Subject: CN=ADCC55CC6DD78C720F439B224C4DB5B7460780F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:15:8a:f2:0b:11:98:1f:9b:c0:0c:9e:4c:d3:
                    e9:8c:3a:52:a0:04:58:f6:96:72:70:46:b0:42:ab:
                    45:1c:9b:4a:80:dc:53:65:ad:50:11:45:ed:99:1f:
                    38:f1:84:58:50:6a:1f:12:15:31:e0:0f:58:ba:7b:
                    d0:a0:1a:fb:a3:d0:0e:29:3c:f2:a6:79:aa:a7:b1:
                    69:fd:20:80:1e:b8:c6:06:7d:4c:15:ce:bc:7d:15:
                    61:d5:3f:c3:42:68:ac:79:97:1a:90:78:4a:42:ed:
                    a3:36:b4:7d:40:a4:d5:b5:20:b0:c6:dd:c2:c6:4b:
                    69:f1:3c:3e:34:26:a0:e7:90:6f:33:08:33:3a:9b:
                    f5:37:ea:6d:2c:35:50:5f:b9:8d:55:80:4d:9c:5b:
                    da:d9:84:7f:79:7c:33:6f:a6:52:4a:d6:e5:bd:92:
                    9a:7e:f5:0e:e0:4b:e5:02:e2:31:2f:19:9e:f6:5c:
                    47:81:34:af:6c:c2:94:18:05:5b:f2:f9:5f:29:10:
                    38:56:c2:c9:d6:0c:63:57:02:5e:97:78:0d:f2:c3:
                    51:ce:90:1b:96:b3:c7:b4:46:73:25:1a:ee:34:eb:
                    07:31:12:b3:ea:fa:17:6b:99:76:23:16:7a:0d:14:
                    77:23:1b:53:26:ff:11:57:ca:01:67:2f:7c:b2:fe:
                    64:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:CC:55:CC:6D:D7:8C:72:0F:43:9B:22:4C:4D:B5:B7:46:07:80:F0
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144056.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a57e::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:55:d6:30:7a:da:c6:cb:7e:39:bc:8e:22:2c:a0:44:e7:f1:
         a6:53:e6:26:3f:27:68:9c:63:be:d8:67:ef:81:48:39:eb:fb:
         c8:0a:7b:c6:d8:b2:2d:c4:d6:7d:a3:78:4c:99:39:e4:21:e8:
         85:cf:f4:a1:9a:92:1c:9a:d6:9e:21:5a:8b:bc:11:93:7e:8a:
         1a:65:84:5f:5f:d6:ee:5d:bb:bf:17:ce:ce:3a:e1:1d:a3:84:
         37:48:ad:a7:b3:87:65:07:83:04:a1:68:4f:74:67:e7:4a:e6:
         9a:61:fa:97:24:4d:06:29:9b:c4:b2:b8:a6:d9:61:da:9a:13:
         1c:ae:7f:2a:06:1b:f8:48:07:f4:e1:f2:44:83:4f:82:fc:db:
         8d:15:0a:3a:b0:0d:13:04:9d:93:f9:7f:ff:4c:bd:f6:b6:06:
         bf:6a:f5:6e:72:16:96:22:4d:51:d3:df:a5:ca:d6:4c:e9:e8:
         e7:25:cc:1f:78:3f:70:bd:e9:c4:4d:4d:7c:5e:54:2b:a8:e8:
         07:81:4a:a9:86:48:a6:f2:1e:7a:da:f8:ef:4f:e9:62:6c:4e:
         47:4e:43:c1:c3:98:3e:eb:80:7b:a9:6d:cb:7d:d5:75:28:b7:
         15:21:b2:9d:14:e7:24:2c:d9:61:0b:c2:5f:e7:74:b1:1a:81:
         59:2e:ee:80
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUGy8ckpGt5VDDNFic+/sRwpwS7uMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzI3MjFaFw0yNzA1MjEwNzMyMjFaMDMxMTAvBgNV
BAMTKEFEQ0M1NUNDNkRENzhDNzIwRjQzOUIyMjRDNERCNUI3NDYwNzgwRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGFYryCxGYH5vADJ5M0+mMOlKg
BFj2lnJwRrBCq0Ucm0qA3FNlrVARRe2ZHzjxhFhQah8SFTHgD1i6e9CgGvuj0A4p
PPKmeaqnsWn9IIAeuMYGfUwVzrx9FWHVP8NCaKx5lxqQeEpC7aM2tH1ApNW1ILDG
3cLGS2nxPD40JqDnkG8zCDM6m/U36m0sNVBfuY1VgE2cW9rZhH95fDNvplJK1uW9
kpp+9Q7gS+UC4jEvGZ72XEeBNK9swpQYBVvy+V8pEDhWwsnWDGNXAl6XeA3yw1HO
kBuWs8e0RnMlGu406wcxErPq+hdrmXYjFnoNFHcjG1Mm/xFXygFnL3yy/mSJAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUrcxVzG3XjHIPQ5siTE21t0YHgPAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MDU2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqlfjANBgkqhkiG9w0BAQsFAAOCAQEAolXW
MHraxst+ObyOIiygROfxplPmJj8naJxjvthn74FIOev7yAp7xtiyLcTWfaN4TJk5
5CHohc/0oZqSHJrWniFai7wRk36KGmWEX1/W7l27vxfOzjrhHaOEN0itp7OHZQeD
BKFoT3Rn50rmmmH6lyRNBimbxLK4ptlh2poTHK5/KgYb+EgH9OHyRINPgvzbjRUK
OrANEwSdk/l//0y99rYGv2r1bnIWliJNUdPfpcrWTOno5yXMH3g/cL3pxE1NfF5U
K6joB4FKqYZIpvIeetr470/pYmxOR05DwcOYPuuAe6lty33VdSi3FSGynRTnJCzZ
YQvCX+d0sRqBWS7ugA==
-----END CERTIFICATE-----