Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144146.roa
File:                     AS144146.roa (raw, json)
Hash identifier:          5A2K1TTb73YIZSQeEam/7IGHf4FahzYRHA3rthotw80=
Subject key identifier:   B5:33:7F:57:64:41:74:9D:C7:CC:30:83:F9:2B:DC:D1:D7:E2:C4:AE
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       572B618235323925F6C7C20590D4C1438B684E74
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144146.roa
Signing time:             Tue 26 May 2026 01:12:59 +0000
ROA not before:           Tue 26 May 2026 01:07:59 +0000
ROA not after:            Tue 25 May 2027 01:12:59 +0000
asID:                     144146
IP address blocks:        240a:a5d8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:2b:61:82:35:32:39:25:f6:c7:c2:05:90:d4:c1:43:8b:68:4e:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:07:59 2026 GMT
            Not After : May 25 01:12:59 2027 GMT
        Subject: CN=B5337F576441749DC7CC3083F92BDCD1D7E2C4AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:de:56:dd:c9:82:7a:23:b8:79:21:28:5f:47:
                    ac:6f:1d:bf:03:04:3b:4f:27:38:7b:63:19:54:9a:
                    ff:61:b6:78:90:81:80:2e:1c:9d:9e:59:39:6d:27:
                    1d:a3:8c:84:76:56:a8:c4:e9:7e:ad:f2:fd:82:e0:
                    28:41:15:af:4d:be:da:d8:0d:c1:de:25:cd:92:3c:
                    e5:d7:37:c2:a9:4f:04:43:a2:c7:51:ca:64:24:10:
                    68:b5:41:45:ff:ce:74:a9:be:06:33:03:8d:f2:ea:
                    be:21:c1:f6:b7:11:56:53:90:97:dd:5c:11:32:29:
                    e9:0b:b8:ef:d9:9c:06:cd:ad:69:ac:90:09:43:7d:
                    76:5a:e7:7f:81:ba:1e:25:f9:1c:1b:51:2c:02:09:
                    92:be:3e:51:cd:96:4f:3d:06:65:5d:6d:5c:b8:0f:
                    f1:15:64:15:9c:8e:df:2f:f4:98:d1:8d:b9:d3:3d:
                    0c:14:ec:d1:2e:7d:08:71:5e:81:c2:be:55:0b:f3:
                    42:c3:e6:58:db:ca:b2:5f:be:e6:ec:88:4b:f5:36:
                    a7:9d:60:4c:55:a2:ba:7e:85:36:ec:9a:8b:a2:fe:
                    11:a2:79:fb:98:8c:de:ee:b0:9e:f2:8c:c4:cd:47:
                    89:0e:92:b1:de:f7:97:58:79:fb:26:23:48:09:b3:
                    df:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:33:7F:57:64:41:74:9D:C7:CC:30:83:F9:2B:DC:D1:D7:E2:C4:AE
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144146.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a5d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:b7:ec:75:2c:26:4c:83:43:83:53:49:3a:8b:66:52:62:af:
         d0:2f:46:8e:44:cc:35:c2:61:93:e4:a7:fd:d2:51:3f:b1:4f:
         b5:cf:e2:85:6c:75:5e:4d:ef:0b:b6:14:94:c4:18:bf:d9:bc:
         1a:3c:67:ff:26:ab:76:77:1d:7f:99:2d:01:50:3f:95:7c:a6:
         04:d2:1d:71:2a:cb:b2:77:5a:67:90:18:ff:dd:b5:aa:5b:7b:
         94:98:c2:e8:57:69:ce:36:34:a6:fc:83:3b:0f:15:98:1f:80:
         be:e2:bb:1c:cf:ac:0f:10:04:5a:95:d0:e5:3f:e5:83:83:2d:
         0b:68:ea:14:ff:ea:f6:db:b8:8b:07:b0:e4:2d:79:0c:0b:91:
         b6:cc:40:a9:0d:93:65:3d:8d:28:04:a1:b2:17:8b:30:6b:79:
         f7:00:22:a0:a4:18:2f:e5:1c:ea:ea:55:9d:4e:36:aa:2b:7c:
         1c:aa:66:1a:c7:19:34:c7:39:79:65:78:2f:6d:ea:91:8a:5c:
         8e:32:a1:0d:a9:84:4f:bd:f0:40:a8:8a:f8:bb:cc:fb:ba:e8:
         42:fb:77:d6:aa:d2:ca:81:9d:82:73:4e:0f:35:db:97:56:d3:
         d7:fc:e2:d8:e3:bd:e8:42:66:f7:9f:ae:5e:f9:7f:57:95:93:
         f1:c5:d5:a9
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUVythgjUyOSX2x8IFkNTBQ4toTnQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMTA3NTlaFw0yNzA1MjUwMTEyNTlaMDMxMTAvBgNV
BAMTKEI1MzM3RjU3NjQ0MTc0OURDN0NDMzA4M0Y5MkJEQ0QxRDdFMkM0QUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt3lbdyYJ6I7h5IShfR6xvHb8D
BDtPJzh7YxlUmv9htniQgYAuHJ2eWTltJx2jjIR2VqjE6X6t8v2C4ChBFa9NvtrY
DcHeJc2SPOXXN8KpTwRDosdRymQkEGi1QUX/znSpvgYzA43y6r4hwfa3EVZTkJfd
XBEyKekLuO/ZnAbNrWmskAlDfXZa53+Buh4l+RwbUSwCCZK+PlHNlk89BmVdbVy4
D/EVZBWcjt8v9JjRjbnTPQwU7NEufQhxXoHCvlUL80LD5ljbyrJfvubsiEv1Nqed
YExVorp+hTbsmoui/hGiefuYjN7usJ7yjMTNR4kOkrHe95dYefsmI0gJs989AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUtTN/V2RBdJ3HzDCD+Svc0dfixK4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MTQ2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAql2DANBgkqhkiG9w0BAQsFAAOCAQEAZbfs
dSwmTINDg1NJOotmUmKv0C9GjkTMNcJhk+Sn/dJRP7FPtc/ihWx1Xk3vC7YUlMQY
v9m8Gjxn/yardncdf5ktAVA/lXymBNIdcSrLsndaZ5AY/921qlt7lJjC6FdpzjY0
pvyDOw8VmB+AvuK7HM+sDxAEWpXQ5T/lg4MtC2jqFP/q9tu4iwew5C15DAuRtsxA
qQ2TZT2NKAShsheLMGt59wAioKQYL+Uc6upVnU42qit8HKpmGscZNMc5eWV4L23q
kYpcjjKhDamET73wQKiK+LvM+7roQvt31qrSyoGdgnNODzXbl1bT1/zi2OO96EJm
95+uXvl/V5WT8cXVqQ==
-----END CERTIFICATE-----