Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144210.roa
File:                     AS144210.roa (raw, json)
Hash identifier:          R4Y1OHtLm+uJ76VtASNOc0UPimKfKBKf6Jo9r5cPUqs=
Subject key identifier:   08:3D:F4:54:62:4B:D9:7C:68:5B:EE:F0:B2:CB:87:E2:B0:CD:48:1C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       04E2E07C3F561E3F8C034532C94974539BD88933
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144210.roa
Signing time:             Fri 22 May 2026 06:46:24 +0000
ROA not before:           Fri 22 May 2026 06:41:24 +0000
ROA not after:            Fri 21 May 2027 06:46:24 +0000
asID:                     144210
IP address blocks:        240a:a618::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e2:e0:7c:3f:56:1e:3f:8c:03:45:32:c9:49:74:53:9b:d8:89:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:24 2026 GMT
            Not After : May 21 06:46:24 2027 GMT
        Subject: CN=083DF454624BD97C685BEEF0B2CB87E2B0CD481C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:16:a5:1e:d6:3c:80:e9:da:f3:34:1c:eb:6c:
                    d8:6f:9f:aa:b3:60:25:eb:e7:81:d4:4f:de:1c:70:
                    f5:3e:12:71:09:ae:28:28:7e:8f:8a:f2:c9:cc:a5:
                    82:52:8a:43:0a:6b:06:9c:67:24:d9:53:a3:70:f8:
                    fe:5b:d1:67:02:f3:0e:ea:a6:ee:fd:18:8b:6b:e8:
                    a6:12:3d:b5:76:5e:ba:58:21:6f:f4:e7:d3:e4:c1:
                    df:29:f7:82:bc:da:28:28:31:a2:e3:c9:bc:e3:c3:
                    a0:a3:5b:76:d0:66:14:28:42:6b:b4:d3:df:6c:bd:
                    8e:26:3d:a2:ef:0a:55:e0:3c:ee:86:d7:7c:39:57:
                    82:ee:94:bf:8e:da:13:12:73:b9:60:f1:b4:6f:56:
                    a1:ae:0f:45:bd:9e:d1:1d:fc:73:f6:98:8f:2e:6d:
                    c5:9a:3f:02:b4:b3:da:6d:77:e8:0b:cd:4b:0c:6a:
                    16:ac:a9:bf:75:b9:32:c6:10:01:63:5e:f5:92:ea:
                    f6:11:dc:ee:26:70:47:aa:3a:0e:3b:70:49:0a:7d:
                    76:96:d6:9a:14:3d:4d:c5:a1:51:a2:ed:78:b1:4e:
                    c3:04:10:19:55:d0:d3:2f:70:bd:bb:98:13:b3:2f:
                    da:e2:7a:66:50:e3:33:c0:a9:4f:f8:16:7a:21:1f:
                    bc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3D:F4:54:62:4B:D9:7C:68:5B:EE:F0:B2:CB:87:E2:B0:CD:48:1C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144210.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a618::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:3a:b3:60:d0:5a:a9:59:9d:97:2f:c6:2e:12:12:de:9b:8a:
         b4:3d:8b:9d:02:86:78:51:e6:fc:11:ba:46:41:f9:85:e3:90:
         f4:b2:4e:26:3b:6a:8b:93:3a:91:c1:a7:3c:47:f5:36:32:4a:
         8f:9b:fa:6a:39:d8:ba:62:70:86:42:96:3d:99:ee:5b:94:2d:
         21:20:32:5c:01:97:53:1d:22:27:bf:a4:c9:b2:e5:76:f1:ff:
         52:75:63:f5:84:62:04:29:95:32:04:e3:57:e5:55:2e:17:d0:
         60:ee:78:3b:ee:49:a1:26:eb:f6:dc:49:82:ad:98:67:e8:89:
         a2:ac:e7:1f:cb:72:b4:47:70:fa:e4:dc:5c:6a:c7:62:49:b8:
         ec:3a:13:b9:c6:40:9c:f4:61:f7:fa:33:5b:26:0d:f8:f5:5d:
         67:a3:c4:3e:4b:31:6a:7e:a2:1e:43:75:aa:60:93:b4:ee:19:
         27:be:72:18:cb:6c:9e:b0:6a:58:86:21:dc:25:2d:36:22:a3:
         8f:b0:03:7f:bf:85:96:da:0d:08:63:9f:19:51:72:78:60:30:
         41:d4:c3:ad:a2:49:76:d2:cb:9b:ee:53:77:de:b1:3d:77:b7:
         ea:76:9b:e6:2a:30:4e:a3:27:f4:bc:f1:bc:f7:9c:bf:f8:b5:
         43:1d:63:f9
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUBOLgfD9WHj+MA0UyyUl0U5vYiTMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjQxMjRaFw0yNzA1MjEwNjQ2MjRaMDMxMTAvBgNV
BAMTKDA4M0RGNDU0NjI0QkQ5N0M2ODVCRUVGMEIyQ0I4N0UyQjBDRDQ4MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfFqUe1jyA6drzNBzrbNhvn6qz
YCXr54HUT94ccPU+EnEJrigofo+K8snMpYJSikMKawacZyTZU6Nw+P5b0WcC8w7q
pu79GItr6KYSPbV2XrpYIW/059Pkwd8p94K82igoMaLjybzjw6CjW3bQZhQoQmu0
099svY4mPaLvClXgPO6G13w5V4LulL+O2hMSc7lg8bRvVqGuD0W9ntEd/HP2mI8u
bcWaPwK0s9ptd+gLzUsMahasqb91uTLGEAFjXvWS6vYR3O4mcEeqOg47cEkKfXaW
1poUPU3FoVGi7XixTsMEEBlV0NMvcL27mBOzL9riemZQ4zPAqU/4FnohH7xDAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUCD30VGJL2XxoW+7wssuH4rDNSBwwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MjEwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqmGDANBgkqhkiG9w0BAQsFAAOCAQEAMzqz
YNBaqVmdly/GLhIS3puKtD2LnQKGeFHm/BG6RkH5heOQ9LJOJjtqi5M6kcGnPEf1
NjJKj5v6ajnYumJwhkKWPZnuW5QtISAyXAGXUx0iJ7+kybLldvH/UnVj9YRiBCmV
MgTjV+VVLhfQYO54O+5JoSbr9txJgq2YZ+iJoqznH8tytEdw+uTcXGrHYkm47DoT
ucZAnPRh9/ozWyYN+PVdZ6PEPksxan6iHkN1qmCTtO4ZJ75yGMtsnrBqWIYh3CUt
NiKjj7ADf7+FltoNCGOfGVFyeGAwQdTDraJJdtLLm+5Td96xPXe36nab5iowTqMn
9LzxvPecv/i1Qx1j+Q==
-----END CERTIFICATE-----