Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144126.roa
File:                     AS144126.roa (raw, json)
Hash identifier:          XFw1khlTacbp1uGkixwVGZOMX0YaXR9mZ1FRFouhoRY=
Subject key identifier:   59:C4:31:86:A1:AB:B5:A4:B6:A1:B0:50:95:EA:CE:67:94:D8:51:13
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5520EC96ED43A1205AA93208290CDDDF14EC4D3F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144126.roa
Signing time:             Mon 25 May 2026 01:38:19 +0000
ROA not before:           Mon 25 May 2026 01:33:19 +0000
ROA not after:            Mon 24 May 2027 01:38:19 +0000
asID:                     144126
IP address blocks:        240a:a5c4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:20:ec:96:ed:43:a1:20:5a:a9:32:08:29:0c:dd:df:14:ec:4d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:19 2026 GMT
            Not After : May 24 01:38:19 2027 GMT
        Subject: CN=59C43186A1ABB5A4B6A1B05095EACE6794D85113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e7:bf:64:6c:e6:b3:2e:49:d0:5b:1a:37:09:
                    36:28:9e:86:e1:4a:7c:bd:90:22:79:f2:bc:f4:43:
                    13:d3:d3:59:79:26:f0:87:24:2c:ce:ca:db:c4:09:
                    2d:2f:a9:56:5a:cc:58:cd:d7:11:d3:52:6b:08:1e:
                    c8:00:a2:e2:04:46:ea:3a:fa:bc:54:98:d2:38:64:
                    48:56:b2:54:25:59:4d:e7:6c:30:0e:6a:f3:5e:80:
                    90:64:10:cd:9a:57:82:5f:5c:29:9a:a1:3a:63:de:
                    25:cc:06:7d:8c:18:85:fc:21:4b:ef:7d:ab:84:8b:
                    06:af:67:e5:d8:25:57:01:d4:37:3b:f1:21:5c:aa:
                    ef:a2:cb:2d:93:ce:b0:78:ed:80:c2:ba:34:10:57:
                    67:f9:e8:c2:8a:cf:7f:f2:89:93:c0:95:70:cb:eb:
                    a6:38:0d:86:7f:ee:ba:66:3f:eb:5c:41:cb:9b:33:
                    5e:ae:99:db:4d:8e:06:1b:71:db:fa:69:ff:13:82:
                    50:eb:76:7e:0e:11:86:3b:b3:ee:ba:84:74:6d:44:
                    52:da:d3:e6:c7:4e:0c:b3:ee:38:42:ce:8d:b7:55:
                    39:82:4b:18:09:35:5b:53:7d:df:ab:93:8d:81:66:
                    dc:b2:0a:e2:2c:63:fa:b9:cf:eb:48:b0:34:80:2b:
                    10:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C4:31:86:A1:AB:B5:A4:B6:A1:B0:50:95:EA:CE:67:94:D8:51:13
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144126.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a5c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:70:16:94:b4:7a:95:71:2d:07:66:ca:59:45:54:40:d0:2e:
         3b:fa:25:21:54:ce:8e:01:01:54:5c:78:38:20:1f:cf:a9:c1:
         92:52:85:bd:84:00:b8:dd:32:f4:92:ca:3c:94:0d:55:33:30:
         43:59:a0:d5:aa:d9:c4:a3:bf:52:ce:ae:3c:b4:43:e8:9e:42:
         32:8f:c7:01:7a:76:13:69:a9:d0:ab:0b:71:e6:14:3a:4f:d9:
         e3:fd:57:7a:6c:e8:47:3e:58:bf:9b:2a:36:97:f0:ed:81:f2:
         7e:d0:7e:5b:46:76:0e:e1:ed:f0:37:1e:80:ae:6a:df:95:1f:
         51:f6:11:15:c3:d8:27:0a:0a:7d:fc:27:d7:87:2e:96:80:78:
         f4:ed:ab:f1:01:db:1a:2f:62:2d:dd:37:60:04:21:6a:23:a2:
         b8:79:26:43:dd:6a:44:6a:49:05:48:97:63:4c:4e:b4:ff:15:
         30:c3:66:bb:68:ee:3f:7b:9b:15:94:ce:2b:b8:bf:fe:41:73:
         a4:8c:22:29:81:b4:7d:e5:36:fd:f5:7e:97:3f:92:6c:dd:57:
         dd:22:8f:5e:08:c3:51:66:1a:9e:36:88:48:1b:71:3a:82:d3:
         f9:dc:d8:12:9c:9b:61:34:9c:39:56:48:3a:30:bb:be:22:24:
         86:56:1a:bb
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUVSDslu1DoSBaqTIIKQzd3xTsTT8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTMzMTlaFw0yNzA1MjQwMTM4MTlaMDMxMTAvBgNV
BAMTKDU5QzQzMTg2QTFBQkI1QTRCNkExQjA1MDk1RUFDRTY3OTREODUxMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk579kbOazLknQWxo3CTYonobh
Sny9kCJ58rz0QxPT01l5JvCHJCzOytvECS0vqVZazFjN1xHTUmsIHsgAouIERuo6
+rxUmNI4ZEhWslQlWU3nbDAOavNegJBkEM2aV4JfXCmaoTpj3iXMBn2MGIX8IUvv
fauEiwavZ+XYJVcB1Dc78SFcqu+iyy2TzrB47YDCujQQV2f56MKKz3/yiZPAlXDL
66Y4DYZ/7rpmP+tcQcubM16umdtNjgYbcdv6af8TglDrdn4OEYY7s+66hHRtRFLa
0+bHTgyz7jhCzo23VTmCSxgJNVtTfd+rk42BZtyyCuIsY/q5z+tIsDSAKxC7AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUWcQxhqGrtaS2obBQlerOZ5TYURMwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MTI2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqlxDANBgkqhkiG9w0BAQsFAAOCAQEAeHAW
lLR6lXEtB2bKWUVUQNAuO/olIVTOjgEBVFx4OCAfz6nBklKFvYQAuN0y9JLKPJQN
VTMwQ1mg1arZxKO/Us6uPLRD6J5CMo/HAXp2E2mp0KsLceYUOk/Z4/1XemzoRz5Y
v5sqNpfw7YHyftB+W0Z2DuHt8DcegK5q35UfUfYRFcPYJwoKffwn14culoB49O2r
8QHbGi9iLd03YAQhaiOiuHkmQ91qRGpJBUiXY0xOtP8VMMNmu2juP3ubFZTOK7i/
/kFzpIwiKYG0feU2/fV+lz+SbN1X3SKPXgjDUWYanjaISBtxOoLT+dzYEpybYTSc
OVZIOjC7viIkhlYauw==
-----END CERTIFICATE-----