Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144127.roa
File:                     AS144127.roa (raw, json)
Hash identifier:          +huZwdK1NnZPV5U2EPN4gXOAl8/rf+UYYW/h6DgcYRc=
Subject key identifier:   8E:71:EF:7D:FD:F8:49:C8:88:FD:6C:BA:5E:1C:A2:70:C0:9D:DE:27
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5A4E04BE4347C2EB078812925D79AE06D6DA5CA8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144127.roa
Signing time:             Fri 22 May 2026 01:50:25 +0000
ROA not before:           Fri 22 May 2026 01:45:25 +0000
ROA not after:            Fri 21 May 2027 01:50:25 +0000
asID:                     144127
IP address blocks:        240a:a5c5::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:4e:04:be:43:47:c2:eb:07:88:12:92:5d:79:ae:06:d6:da:5c:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:25 2026 GMT
            Not After : May 21 01:50:25 2027 GMT
        Subject: CN=8E71EF7DFDF849C888FD6CBA5E1CA270C09DDE27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:03:fe:76:16:21:2c:6d:8f:ee:10:03:f4:04:
                    61:c0:07:15:bb:cc:0b:21:d7:39:43:fb:b3:ae:e5:
                    c3:e8:fa:40:5e:f3:52:a9:11:05:23:35:3b:11:c2:
                    e6:d6:5a:b9:00:85:4a:63:f8:4f:76:fe:fd:1f:c2:
                    ee:cc:f2:d4:25:43:9e:cf:28:79:b2:13:41:56:78:
                    c9:f6:37:7f:1a:70:00:57:f7:69:74:cd:b8:fb:c9:
                    52:b0:93:62:45:92:ae:b3:94:10:d8:13:43:85:22:
                    13:21:7d:a7:d4:e2:9f:c2:a6:d2:b7:8d:87:a4:54:
                    14:3c:81:79:49:ff:de:24:33:87:55:2c:44:93:04:
                    a9:18:78:4a:f9:61:16:86:e5:e6:76:bd:68:d0:84:
                    2a:3f:57:d9:64:cc:bd:e4:e8:9f:f7:1d:22:c7:ac:
                    25:02:b4:c3:29:c2:a3:e8:0c:28:85:7e:83:83:13:
                    21:62:87:25:40:33:b2:ed:ef:c4:ca:25:ed:6a:d1:
                    b1:fb:7c:12:95:f0:b1:5c:7f:74:4b:99:41:6d:ed:
                    cc:20:d8:c1:20:88:d2:92:2d:ff:bb:69:0a:44:04:
                    1c:79:1c:e9:85:ab:5b:cb:ee:8f:e6:38:2f:1f:be:
                    bb:30:ad:4a:d1:1c:9b:72:9b:1d:a1:9f:e5:45:c0:
                    f9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:71:EF:7D:FD:F8:49:C8:88:FD:6C:BA:5E:1C:A2:70:C0:9D:DE:27
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144127.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a5c5::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:57:ca:44:ba:c3:f6:6a:b5:9f:66:c7:a3:b5:3b:b2:d9:07:
         ed:69:98:ae:43:73:4f:c6:97:d7:9a:96:53:7e:44:b0:07:dc:
         80:a5:6f:1b:de:aa:7b:a2:33:96:bf:cf:2f:eb:a0:bb:86:6b:
         80:28:b9:d3:c4:e3:fa:15:60:4e:02:a0:d2:f3:8d:72:75:e1:
         c7:6f:35:b7:15:00:62:96:c3:0d:0d:a5:af:e0:dc:e9:8b:b2:
         79:c6:8c:72:71:58:19:1f:82:47:25:2c:f4:02:09:0b:ed:d7:
         ed:95:5c:83:7a:b9:c6:8b:c6:b8:2a:59:5e:83:36:4f:c9:77:
         03:f1:92:a3:7d:7d:c7:7b:0f:3c:70:39:97:42:94:bf:76:10:
         9e:91:3b:c5:2f:00:a6:8e:cf:72:0c:f9:c4:f0:c4:1c:6e:8a:
         bd:a8:96:71:04:20:6a:64:90:71:01:e4:97:78:40:1f:ac:04:
         d8:a9:0c:05:33:8b:62:f9:01:fe:d8:01:91:4e:32:9a:5d:6b:
         49:70:85:5d:18:60:17:f7:7c:a2:86:8f:4f:5b:2b:a3:df:4f:
         c1:e1:f0:b8:5e:04:e6:04:3f:1a:cd:e4:be:b8:48:be:44:37:
         44:82:09:8e:9d:53:1e:8f:83:4a:59:3d:7e:fe:b5:90:75:1d:
         e2:c9:d3:d3
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUWk4EvkNHwusHiBKSXXmuBtbaXKgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMTQ1MjVaFw0yNzA1MjEwMTUwMjVaMDMxMTAvBgNV
BAMTKDhFNzFFRjdERkRGODQ5Qzg4OEZENkNCQTVFMUNBMjcwQzA5RERFMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuA/52FiEsbY/uEAP0BGHABxW7
zAsh1zlD+7Ou5cPo+kBe81KpEQUjNTsRwubWWrkAhUpj+E92/v0fwu7M8tQlQ57P
KHmyE0FWeMn2N38acABX92l0zbj7yVKwk2JFkq6zlBDYE0OFIhMhfafU4p/CptK3
jYekVBQ8gXlJ/94kM4dVLESTBKkYeEr5YRaG5eZ2vWjQhCo/V9lkzL3k6J/3HSLH
rCUCtMMpwqPoDCiFfoODEyFihyVAM7Lt78TKJe1q0bH7fBKV8LFcf3RLmUFt7cwg
2MEgiNKSLf+7aQpEBBx5HOmFq1vL7o/mOC8fvrswrUrRHJtymx2hn+VFwPkjAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUjnHvff34SciI/Wy6XhyicMCd3icwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MTI3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqlxTANBgkqhkiG9w0BAQsFAAOCAQEAcFfK
RLrD9mq1n2bHo7U7stkH7WmYrkNzT8aX15qWU35EsAfcgKVvG96qe6Izlr/PL+ug
u4ZrgCi508Tj+hVgTgKg0vONcnXhx281txUAYpbDDQ2lr+Dc6YuyecaMcnFYGR+C
RyUs9AIJC+3X7ZVcg3q5xovGuCpZXoM2T8l3A/GSo319x3sPPHA5l0KUv3YQnpE7
xS8Apo7Pcgz5xPDEHG6KvaiWcQQgamSQcQHkl3hAH6wE2KkMBTOLYvkB/tgBkU4y
ml1rSXCFXRhgF/d8ooaPT1sro99PweHwuF4E5gQ/Gs3kvrhIvkQ3RIIJjp1THo+D
Slk9fv61kHUd4snT0w==
-----END CERTIFICATE-----