Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144062.roa
File:                     AS144062.roa (raw, json)
Hash identifier:          UkdI0Wbmc2/GUCm4A6x09Zgfo3K7S/l/ckM9JplVYUk=
Subject key identifier:   2D:5D:AD:69:47:41:0C:31:AF:AC:F8:2A:A2:4C:05:67:74:A2:E3:61
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6CC91D18DCE9E9597AAE478A0523F88311CF55C6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144062.roa
Signing time:             Mon 25 May 2026 02:22:33 +0000
ROA not before:           Mon 25 May 2026 02:17:33 +0000
ROA not after:            Mon 24 May 2027 02:22:33 +0000
asID:                     144062
IP address blocks:        240a:a584::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c9:1d:18:dc:e9:e9:59:7a:ae:47:8a:05:23:f8:83:11:cf:55:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 02:17:33 2026 GMT
            Not After : May 24 02:22:33 2027 GMT
        Subject: CN=2D5DAD6947410C31AFACF82AA24C056774A2E361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e8:2b:ef:58:4c:e5:4c:20:f8:95:7f:02:85:
                    73:e1:37:db:6d:e1:f6:83:f7:cd:65:8b:83:2b:87:
                    fb:af:31:85:25:b7:55:f8:c7:91:63:2e:4c:c1:b4:
                    70:c2:75:73:55:d3:96:0e:e8:24:96:f8:6d:36:b8:
                    cb:36:b1:42:dd:6a:d6:b1:fa:35:24:2d:d2:08:8b:
                    e2:5c:f3:30:13:52:2f:34:89:72:d1:e8:d2:45:d3:
                    8a:d4:76:1a:6e:ec:69:39:0b:99:ca:24:2c:0a:d8:
                    4b:cc:07:98:1e:73:8f:a5:9b:40:ff:6a:e7:a5:14:
                    0c:53:60:22:f1:9b:b4:71:52:b5:9d:16:2d:bb:59:
                    88:fd:df:6d:8e:4f:72:2f:48:c1:5f:19:73:d4:42:
                    d4:5f:ff:3f:a4:09:58:bf:03:26:35:9c:32:c4:3e:
                    97:4b:6c:50:08:c4:95:5c:33:81:be:56:f4:42:5a:
                    e0:18:60:75:77:7c:3c:27:0d:77:63:ec:9b:b2:e2:
                    1a:92:1b:6d:e5:f1:35:dc:23:15:e0:93:d9:51:a7:
                    59:d6:31:91:c2:7d:c0:39:c1:e7:f5:73:e5:81:03:
                    bc:b6:35:4e:cd:55:85:57:e2:dc:cb:c6:4f:a0:eb:
                    26:54:5f:9c:12:f9:0d:cb:be:5d:a7:2b:6d:f0:d7:
                    73:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:5D:AD:69:47:41:0C:31:AF:AC:F8:2A:A2:4C:05:67:74:A2:E3:61
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144062.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a584::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:ac:2c:b9:04:01:20:98:13:96:0d:3a:24:1c:37:b2:d0:d4:
         0b:b7:52:78:4b:ce:d3:e0:95:00:f5:3f:c0:92:30:09:24:58:
         64:68:67:07:ed:3a:fb:9b:09:24:7f:ef:84:e5:54:77:2d:da:
         2f:20:56:07:fa:a4:1f:93:e7:b8:1c:a6:c9:e3:44:85:ef:a7:
         0c:cd:3a:f7:f8:58:75:4a:ca:13:b5:45:97:58:10:23:99:d2:
         67:37:36:5e:49:e2:77:86:cc:20:c0:c5:a0:1c:52:a6:fd:17:
         7f:a6:84:13:b4:e5:85:7a:4e:c8:41:73:67:97:d8:82:90:be:
         f5:82:93:aa:2e:79:d5:49:17:5e:db:07:bf:a6:20:8d:d7:3b:
         d8:3b:42:27:53:ad:47:43:4d:1b:06:3b:a3:ba:39:9e:26:1d:
         cd:e5:af:9b:d4:e9:9d:e6:65:a7:7f:c8:3c:49:f7:d8:65:69:
         46:32:b3:da:47:0a:9e:10:be:c8:03:95:a7:a8:6c:35:3a:10:
         a0:5e:74:d7:9d:13:0e:28:fd:61:fc:f7:ab:f7:49:34:fa:f1:
         e3:a3:4d:83:3e:76:b6:94:0b:b9:66:37:95:38:d8:0a:62:39:
         07:51:28:87:dc:96:9a:13:27:9b:b6:30:e7:88:ad:7a:b7:fc:
         c9:85:51:6c
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUbMkdGNzp6Vl6rkeKBSP4gxHPVcYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMjE3MzNaFw0yNzA1MjQwMjIyMzNaMDMxMTAvBgNV
BAMTKDJENURBRDY5NDc0MTBDMzFBRkFDRjgyQUEyNEMwNTY3NzRBMkUzNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW6CvvWEzlTCD4lX8ChXPhN9tt
4faD981li4Mrh/uvMYUlt1X4x5FjLkzBtHDCdXNV05YO6CSW+G02uMs2sULdatax
+jUkLdIIi+Jc8zATUi80iXLR6NJF04rUdhpu7Gk5C5nKJCwK2EvMB5gec4+lm0D/
auelFAxTYCLxm7RxUrWdFi27WYj9322OT3IvSMFfGXPUQtRf/z+kCVi/AyY1nDLE
PpdLbFAIxJVcM4G+VvRCWuAYYHV3fDwnDXdj7Juy4hqSG23l8TXcIxXgk9lRp1nW
MZHCfcA5wef1c+WBA7y2NU7NVYVX4tzLxk+g6yZUX5wS+Q3Lvl2nK23w13NHAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQULV2taUdBDDGvrPgqokwFZ3Si42EwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MDYyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqlhDANBgkqhkiG9w0BAQsFAAOCAQEALqws
uQQBIJgTlg06JBw3stDUC7dSeEvO0+CVAPU/wJIwCSRYZGhnB+06+5sJJH/vhOVU
dy3aLyBWB/qkH5PnuBymyeNEhe+nDM069/hYdUrKE7VFl1gQI5nSZzc2Xknid4bM
IMDFoBxSpv0Xf6aEE7TlhXpOyEFzZ5fYgpC+9YKTqi551UkXXtsHv6Ygjdc72DtC
J1OtR0NNGwY7o7o5niYdzeWvm9TpneZlp3/IPEn32GVpRjKz2kcKnhC+yAOVp6hs
NToQoF50150TDij9Yfz3q/dJNPrx46NNgz52tpQLuWY3lTjYCmI5B1Eoh9yWmhMn
m7Yw54iterf8yYVRbA==
-----END CERTIFICATE-----