Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144122.roa
File:                     AS144122.roa (raw, json)
Hash identifier:          tRCeSxT3hgLlJ+AKRKfFQ99OAskwSdw/avw7NG4bxBM=
Subject key identifier:   26:63:4D:C5:9F:B7:81:86:26:55:62:20:3A:74:7A:B0:95:90:A2:2D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       69A20C639D63876FBDA45580F2513A75242621E8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144122.roa
Signing time:             Mon 25 May 2026 06:48:46 +0000
ROA not before:           Mon 25 May 2026 06:43:46 +0000
ROA not after:            Mon 24 May 2027 06:48:46 +0000
asID:                     144122
IP address blocks:        240a:a5c0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:a2:0c:63:9d:63:87:6f:bd:a4:55:80:f2:51:3a:75:24:26:21:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:43:46 2026 GMT
            Not After : May 24 06:48:46 2027 GMT
        Subject: CN=26634DC59FB78186265562203A747AB09590A22D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:87:2d:12:50:1b:13:6f:6e:36:8f:da:04:73:
                    2a:bd:da:87:83:cc:e7:dd:b0:4c:20:16:2b:7f:0c:
                    53:23:b8:9f:13:17:c2:e2:55:1a:93:1e:51:f7:4b:
                    5c:b2:c6:c9:b3:0d:5a:7e:50:6b:6e:93:9d:62:26:
                    e3:41:92:e5:8e:ec:72:77:b8:e3:11:bf:63:97:1a:
                    83:ed:57:b5:6c:e3:ea:38:73:24:cb:aa:17:fe:fb:
                    3d:a3:69:68:99:07:d8:97:fe:7a:9f:81:6c:b8:ed:
                    2b:e0:72:3b:74:7a:78:ad:88:72:0d:3c:db:d6:97:
                    04:4d:27:37:73:e4:f6:04:4a:b3:fb:47:7a:3c:73:
                    ec:e7:7e:c0:e6:20:01:60:e0:61:41:f4:de:46:7d:
                    54:ab:6a:30:ec:ad:55:a0:bc:a9:78:f9:52:8e:c8:
                    18:c6:85:bb:b0:9e:f7:7a:63:dc:43:a9:30:1d:9f:
                    63:7a:29:0c:68:77:89:73:8a:67:c1:14:3a:48:0f:
                    ab:80:b6:26:a8:53:23:43:50:6b:2b:65:5b:b9:5c:
                    1e:39:67:1b:66:66:3c:bc:ca:a0:ba:9f:ec:5c:b7:
                    96:13:70:2a:bb:ad:88:ea:94:f0:f2:59:9f:b0:b0:
                    a1:da:af:a9:45:55:50:09:0b:08:e9:29:6f:87:52:
                    85:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:63:4D:C5:9F:B7:81:86:26:55:62:20:3A:74:7A:B0:95:90:A2:2D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144122.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a5c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:c3:25:9c:8a:b4:d2:3c:2c:4b:df:59:5b:b2:8f:30:9f:05:
         98:a2:42:ab:3b:c6:b8:a0:8c:c3:d6:c1:28:22:0a:5e:94:d0:
         34:45:6a:9d:2c:9d:03:f0:0f:1b:8a:4c:bd:bf:89:53:0b:f5:
         71:c2:a1:15:bc:0d:69:8a:a3:41:5a:4d:17:c0:0c:0d:68:7d:
         3f:1d:65:80:1d:04:ac:dd:7c:6d:46:d3:83:0f:6e:89:55:78:
         97:7c:e8:78:f1:5f:1b:5b:94:19:d9:1f:7d:f2:36:15:5c:ec:
         02:cc:ed:49:6b:00:0d:df:ea:8e:27:d5:86:5e:7b:3a:5b:19:
         7e:87:32:29:4b:9c:88:b7:30:3c:e3:ff:19:3d:36:c4:4b:2f:
         76:a1:dc:89:e1:55:c6:cf:7b:d7:0b:1d:2f:57:07:c8:a5:c3:
         94:2d:67:ef:1a:12:f3:0e:ef:2b:ad:80:75:fb:75:2a:13:2e:
         46:69:e0:c0:82:e1:d3:e6:ad:16:2a:df:4f:be:50:c0:96:54:
         85:fe:87:2e:81:00:b1:79:16:05:4b:8b:39:41:b4:e1:22:2c:
         c8:ed:5d:2c:fb:57:06:3c:c1:cf:5d:79:aa:5a:47:dc:91:77:
         a7:11:b0:51:f1:db:7f:d7:75:9b:38:be:61:1a:a2:44:57:ed:
         b2:23:26:8c
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUaaIMY51jh2+9pFWA8lE6dSQmIegwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjQzNDZaFw0yNzA1MjQwNjQ4NDZaMDMxMTAvBgNV
BAMTKDI2NjM0REM1OUZCNzgxODYyNjU1NjIyMDNBNzQ3QUIwOTU5MEEyMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfhy0SUBsTb242j9oEcyq92oeD
zOfdsEwgFit/DFMjuJ8TF8LiVRqTHlH3S1yyxsmzDVp+UGtuk51iJuNBkuWO7HJ3
uOMRv2OXGoPtV7Vs4+o4cyTLqhf++z2jaWiZB9iX/nqfgWy47Svgcjt0enitiHIN
PNvWlwRNJzdz5PYESrP7R3o8c+znfsDmIAFg4GFB9N5GfVSrajDsrVWgvKl4+VKO
yBjGhbuwnvd6Y9xDqTAdn2N6KQxod4lzimfBFDpID6uAtiaoUyNDUGsrZVu5XB45
ZxtmZjy8yqC6n+xct5YTcCq7rYjqlPDyWZ+wsKHar6lFVVAJCwjpKW+HUoWhAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUJmNNxZ+3gYYmVWIgOnR6sJWQoi0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MTIyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqlwDANBgkqhkiG9w0BAQsFAAOCAQEAtMMl
nIq00jwsS99ZW7KPMJ8FmKJCqzvGuKCMw9bBKCIKXpTQNEVqnSydA/APG4pMvb+J
Uwv1ccKhFbwNaYqjQVpNF8AMDWh9Px1lgB0ErN18bUbTgw9uiVV4l3zoePFfG1uU
GdkfffI2FVzsAsztSWsADd/qjifVhl57OlsZfocyKUuciLcwPOP/GT02xEsvdqHc
ieFVxs971wsdL1cHyKXDlC1n7xoS8w7vK62Adft1KhMuRmngwILh0+atFirfT75Q
wJZUhf6HLoEAsXkWBUuLOUG04SIsyO1dLPtXBjzBz115qlpH3JF3pxGwUfHbf9d1
mzi+YRqiRFftsiMmjA==
-----END CERTIFICATE-----