Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144142.roa
File:                     AS144142.roa (raw, json)
Hash identifier:          C+ammLXAcQFmiMRuY1nNvOzBV1Ta8/DJSO2QSqMnHWE=
Subject key identifier:   80:ED:FB:B1:FF:9C:1C:1F:5E:33:BB:C4:F3:B6:CE:06:6C:72:CC:A8
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       010A9B11D111DD7B81BA7387931A99B7B87E48CD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144142.roa
Signing time:             Tue 26 May 2026 03:17:04 +0000
ROA not before:           Tue 26 May 2026 03:12:04 +0000
ROA not after:            Tue 25 May 2027 03:17:04 +0000
asID:                     144142
IP address blocks:        240a:a5d4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0a:9b:11:d1:11:dd:7b:81:ba:73:87:93:1a:99:b7:b8:7e:48:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:12:04 2026 GMT
            Not After : May 25 03:17:04 2027 GMT
        Subject: CN=80EDFBB1FF9C1C1F5E33BBC4F3B6CE066C72CCA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ab:3f:57:a0:ad:e0:6d:29:c2:ce:d6:a1:27:
                    ec:87:95:96:1e:2f:d9:b2:fc:1d:b6:c5:b5:4c:cb:
                    38:8d:21:c1:86:22:de:95:83:2a:7f:24:b4:9f:cd:
                    fb:ed:b4:0c:32:6c:0c:44:75:86:2b:24:fe:70:06:
                    6a:76:29:80:a2:00:39:24:22:aa:e0:8f:a6:6a:a3:
                    6f:c4:96:b9:1d:29:b7:04:be:8b:8b:e4:cf:12:df:
                    94:d1:f1:ea:01:d4:ac:56:7f:34:40:9a:09:60:6d:
                    7a:ae:e3:b2:30:0a:21:0b:7c:c7:9a:53:75:80:2e:
                    b3:9e:f0:5d:ab:59:6a:c7:1c:81:40:0b:20:a5:63:
                    51:6a:de:e9:de:72:87:62:00:85:1a:d3:30:af:97:
                    06:7b:8d:df:1c:be:ca:a0:f5:74:1b:88:9e:54:00:
                    67:b8:a2:62:aa:c9:0a:7c:15:a8:b3:01:d1:32:ff:
                    42:83:04:22:5d:d3:b7:30:43:0c:fe:fe:19:60:f3:
                    be:dd:cc:cc:ea:e5:6b:38:9f:fb:9f:7a:88:f5:49:
                    b6:b1:32:14:f8:f8:91:1c:b8:dd:16:d9:a7:44:69:
                    f3:2d:f2:5b:d5:72:ad:07:97:99:74:15:ad:e5:1c:
                    dd:89:b0:b9:84:c7:14:17:6f:96:c7:f7:16:de:6e:
                    cc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:ED:FB:B1:FF:9C:1C:1F:5E:33:BB:C4:F3:B6:CE:06:6C:72:CC:A8
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144142.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a5d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:64:02:22:8b:52:c7:e8:89:26:a7:62:07:e4:19:2e:28:b4:
         07:84:ca:51:77:97:51:21:9d:0b:17:0c:a0:53:66:2e:9f:ca:
         67:e7:71:6b:17:93:3c:42:ea:b9:e8:d0:55:f6:1b:73:9e:2d:
         0b:96:13:fe:94:8b:99:a5:70:19:5c:21:86:6f:05:57:99:a8:
         0b:c7:86:11:9c:83:ed:ed:99:94:0d:0b:65:7e:fe:60:b1:4f:
         90:c5:0a:c7:9b:0a:7a:db:39:7a:9b:2f:c3:e9:a0:2a:6f:00:
         a0:a4:ba:db:c8:39:1e:46:b2:4f:66:59:b9:c7:e1:6a:ef:5a:
         5d:92:53:75:18:a5:4f:f2:1d:bb:a9:3d:d8:2a:41:5d:52:57:
         d4:ad:ec:0c:69:7d:3a:f7:15:41:fa:18:b2:69:54:cf:44:63:
         af:db:4c:c6:21:dd:98:73:e1:44:92:d6:74:4a:f3:33:fd:42:
         aa:db:49:5d:3d:b9:42:2d:2a:9e:5d:bd:db:f5:db:75:05:c7:
         21:cc:36:4a:c6:ca:b6:95:73:44:30:28:61:8a:5f:c3:27:16:
         cd:0a:75:a4:20:65:2d:58:3d:1a:4f:27:ed:8c:9b:a4:28:97:
         52:9f:f3:b7:90:7a:10:c0:30:da:c4:7f:6f:f7:3d:4e:65:c0:
         0f:97:07:eb
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUAQqbEdER3XuBunOHkxqZt7h+SM0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMzEyMDRaFw0yNzA1MjUwMzE3MDRaMDMxMTAvBgNV
BAMTKDgwRURGQkIxRkY5QzFDMUY1RTMzQkJDNEYzQjZDRTA2NkM3MkNDQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMqz9XoK3gbSnCztahJ+yHlZYe
L9my/B22xbVMyziNIcGGIt6Vgyp/JLSfzfvttAwybAxEdYYrJP5wBmp2KYCiADkk
Iqrgj6Zqo2/ElrkdKbcEvouL5M8S35TR8eoB1KxWfzRAmglgbXqu47IwCiELfMea
U3WALrOe8F2rWWrHHIFACyClY1Fq3unecodiAIUa0zCvlwZ7jd8cvsqg9XQbiJ5U
AGe4omKqyQp8FaizAdEy/0KDBCJd07cwQwz+/hlg877dzMzq5Ws4n/ufeoj1Sbax
MhT4+JEcuN0W2adEafMt8lvVcq0Hl5l0Fa3lHN2JsLmExxQXb5bH9xbebsypAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUgO37sf+cHB9eM7vE87bOBmxyzKgwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MTQyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAql1DANBgkqhkiG9w0BAQsFAAOCAQEAU2QC
IotSx+iJJqdiB+QZLii0B4TKUXeXUSGdCxcMoFNmLp/KZ+dxaxeTPELquejQVfYb
c54tC5YT/pSLmaVwGVwhhm8FV5moC8eGEZyD7e2ZlA0LZX7+YLFPkMUKx5sKets5
epsvw+mgKm8AoKS628g5HkayT2ZZucfhau9aXZJTdRilT/Idu6k92CpBXVJX1K3s
DGl9OvcVQfoYsmlUz0Rjr9tMxiHdmHPhRJLWdErzM/1CqttJXT25Qi0qnl292/Xb
dQXHIcw2SsbKtpVzRDAoYYpfwycWzQp1pCBlLVg9Gk8n7YybpCiXUp/zt5B6EMAw
2sR/b/c9TmXAD5cH6w==
-----END CERTIFICATE-----