Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144198.roa
File:                     AS144198.roa (raw, json)
Hash identifier:          E6lYRX6v56psqGGeYy1QDt7/mCA+SajgHCAY8za2BIc=
Subject key identifier:   18:E7:F9:DB:4A:7C:E4:04:C6:DA:EB:61:5F:CD:5B:81:D9:CF:30:8F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7238B3AF42D3357E2CE0FB7481338011EE2FF1E4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144198.roa
Signing time:             Mon 25 May 2026 06:28:51 +0000
ROA not before:           Mon 25 May 2026 06:23:51 +0000
ROA not after:            Mon 24 May 2027 06:28:51 +0000
asID:                     144198
IP address blocks:        240a:a60c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:38:b3:af:42:d3:35:7e:2c:e0:fb:74:81:33:80:11:ee:2f:f1:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:51 2026 GMT
            Not After : May 24 06:28:51 2027 GMT
        Subject: CN=18E7F9DB4A7CE404C6DAEB615FCD5B81D9CF308F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:14:bb:91:45:36:3f:e7:65:ea:3a:86:bf:5d:
                    52:de:68:ef:e2:89:eb:21:57:a4:2a:0a:4f:5d:07:
                    f3:1a:cf:fa:d1:4b:29:b2:ab:51:bd:50:5c:da:19:
                    2d:0c:72:8d:11:24:34:7c:61:84:88:be:5d:7a:ed:
                    45:70:e0:ac:1c:2a:10:50:03:bd:68:0f:d8:0d:59:
                    0f:45:fb:e9:84:c4:0a:cb:2f:44:17:a8:69:36:39:
                    33:76:15:b7:59:9a:29:bf:a5:57:70:53:b8:0e:73:
                    86:e9:91:b6:f5:a7:cc:ec:aa:45:e1:c0:20:4e:c4:
                    c7:68:e4:07:f2:21:2f:47:b8:23:39:f6:da:7b:35:
                    93:d0:fd:bc:ad:43:d0:27:80:05:a3:68:ca:a2:a8:
                    f8:47:fb:59:65:9f:c4:0d:3f:cc:78:35:b0:a6:98:
                    43:03:09:61:78:23:29:0e:a5:31:ed:84:d8:35:d1:
                    cb:74:ac:52:b1:a2:ed:47:20:d8:5d:d9:5e:6d:4f:
                    a4:72:96:97:4f:d9:d2:d2:bf:21:85:90:96:b1:be:
                    e1:62:30:25:f2:a7:44:f1:e0:d6:d5:1f:f2:9b:de:
                    be:1f:f5:82:e8:69:a2:fe:2c:60:89:8f:dd:c1:cb:
                    46:26:a2:bc:69:cb:59:2e:20:79:1a:52:a3:e5:99:
                    3d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E7:F9:DB:4A:7C:E4:04:C6:DA:EB:61:5F:CD:5B:81:D9:CF:30:8F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144198.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a60c::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:60:f4:80:54:fb:5e:f0:a9:a9:71:0a:76:55:2b:6e:86:7b:
         05:ef:8c:85:04:dd:5f:89:af:99:a5:8d:9b:78:c2:78:51:3b:
         61:04:82:de:4e:88:af:34:8d:a7:2c:70:21:2d:98:f4:3c:ed:
         a5:c2:57:94:f8:1c:cb:94:64:e9:23:cf:de:d2:a0:9f:13:24:
         fb:72:c2:6a:0c:2d:8e:8c:78:62:07:29:1e:02:8a:d3:5c:1d:
         e9:f0:4a:1a:6b:24:81:b3:e7:7b:c2:4e:23:02:e3:47:0d:f7:
         87:f1:f1:9a:a3:90:0a:6b:87:a9:14:8e:7a:dd:d8:4b:27:e0:
         ff:0a:89:10:13:dd:a1:c7:fc:2a:6a:49:38:79:44:2c:31:d9:
         d0:01:f8:58:b8:d8:06:08:6d:1e:96:00:d1:b9:f4:bf:ff:c0:
         bc:2d:f0:2a:3a:ea:b2:5a:6a:fd:af:ec:87:7d:f7:b9:9d:a1:
         dd:89:75:51:f1:ad:9f:9f:6c:59:64:03:ad:f5:dc:44:2f:d3:
         13:2a:18:96:32:70:e1:bd:11:3e:e1:db:53:65:b9:30:a9:76:
         b0:ca:5b:48:08:ff:a9:57:c3:c6:0a:02:b3:f1:d8:42:a4:45:
         6b:59:79:83:77:d6:0c:89:5c:58:16:63:a8:1d:08:2a:48:52:
         83:e8:e0:73
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUcjizr0LTNX4s4Pt0gTOAEe4v8eQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjIzNTFaFw0yNzA1MjQwNjI4NTFaMDMxMTAvBgNV
BAMTKDE4RTdGOURCNEE3Q0U0MDRDNkRBRUI2MTVGQ0Q1QjgxRDlDRjMwOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJFLuRRTY/52XqOoa/XVLeaO/i
ieshV6QqCk9dB/Maz/rRSymyq1G9UFzaGS0Mco0RJDR8YYSIvl167UVw4KwcKhBQ
A71oD9gNWQ9F++mExArLL0QXqGk2OTN2FbdZmim/pVdwU7gOc4bpkbb1p8zsqkXh
wCBOxMdo5AfyIS9HuCM59tp7NZPQ/bytQ9AngAWjaMqiqPhH+1lln8QNP8x4NbCm
mEMDCWF4IykOpTHthNg10ct0rFKxou1HINhd2V5tT6RylpdP2dLSvyGFkJaxvuFi
MCXyp0Tx4NbVH/Kb3r4f9YLoaaL+LGCJj93By0Ymorxpy1kuIHkaUqPlmT3zAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUGOf520p85ATG2uthX81bgdnPMI8wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MTk4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqmDDANBgkqhkiG9w0BAQsFAAOCAQEAcmD0
gFT7XvCpqXEKdlUrboZ7Be+MhQTdX4mvmaWNm3jCeFE7YQSC3k6IrzSNpyxwIS2Y
9DztpcJXlPgcy5Rk6SPP3tKgnxMk+3LCagwtjox4YgcpHgKK01wd6fBKGmskgbPn
e8JOIwLjRw33h/HxmqOQCmuHqRSOet3YSyfg/wqJEBPdocf8KmpJOHlELDHZ0AH4
WLjYBghtHpYA0bn0v//AvC3wKjrqslpq/a/sh333uZ2h3Yl1UfGtn59sWWQDrfXc
RC/TEyoYljJw4b0RPuHbU2W5MKl2sMpbSAj/qVfDxgoCs/HYQqRFa1l5g3fWDIlc
WBZjqB0IKkhSg+jgcw==
-----END CERTIFICATE-----