Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144211.roa
File:                     AS144211.roa (raw, json)
Hash identifier:          NddOQfixVvdywF4NV8ZfbGc+8ynwstBB/xOoQriAq8k=
Subject key identifier:   86:3D:3C:DB:28:95:03:57:5B:D0:67:B0:EC:FE:18:F8:39:46:0C:4D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4F0362567A8B19884A80416A22E81C155656B410
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144211.roa
Signing time:             Fri 22 May 2026 07:41:04 +0000
ROA not before:           Fri 22 May 2026 07:36:04 +0000
ROA not after:            Fri 21 May 2027 07:41:04 +0000
asID:                     144211
IP address blocks:        240a:a619::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:03:62:56:7a:8b:19:88:4a:80:41:6a:22:e8:1c:15:56:56:b4:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:36:04 2026 GMT
            Not After : May 21 07:41:04 2027 GMT
        Subject: CN=863D3CDB289503575BD067B0ECFE18F839460C4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b2:8c:8e:2d:4e:be:ed:4c:36:ea:7a:8d:eb:
                    60:a8:46:82:1b:38:3b:6a:05:92:38:35:05:84:04:
                    68:6b:63:c7:fe:52:48:a9:e9:95:11:48:86:8d:fd:
                    35:eb:ae:87:15:7f:74:14:85:36:fa:bf:9d:a5:b5:
                    6e:de:7c:75:55:03:f1:d5:b0:66:d4:a3:77:03:17:
                    d2:3e:c4:c5:7b:e0:6d:04:73:c2:d5:cf:21:07:a9:
                    03:b7:61:32:99:c6:55:5e:41:3f:d8:69:ad:27:f4:
                    8b:52:2a:10:b7:7f:16:20:4a:cd:91:21:c6:75:f5:
                    be:2d:c9:64:4d:a9:b6:b5:0e:72:2f:5f:21:69:5f:
                    9f:b9:7c:04:78:36:8d:43:9b:77:d0:f9:6a:53:96:
                    37:46:fd:be:54:f0:c5:a9:80:3e:88:93:2d:1f:51:
                    58:64:75:22:93:85:7f:50:b3:6e:13:e8:1d:f3:1b:
                    ec:dd:2c:38:85:cf:6c:ed:c6:be:72:72:7d:93:da:
                    cc:06:75:84:88:53:23:ef:c8:8f:20:91:7c:2c:69:
                    35:dd:4a:b4:4e:91:a4:2a:a8:f5:10:b3:64:ad:ee:
                    f5:4b:34:92:eb:3e:4b:0c:97:72:9d:0e:e4:0d:f0:
                    c4:a8:e4:d1:5a:ff:08:17:f6:ee:4a:fa:d9:24:b7:
                    52:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:3D:3C:DB:28:95:03:57:5B:D0:67:B0:EC:FE:18:F8:39:46:0C:4D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144211.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a619::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:23:a3:f5:24:c3:5d:df:87:9e:41:55:31:0b:d8:1f:ab:3e:
         f9:bf:5d:f9:95:22:b6:79:92:3f:1d:08:e2:c7:12:28:bc:b6:
         eb:e0:1e:69:f5:12:91:31:a7:9a:9a:45:7d:8a:10:39:7b:80:
         a7:27:6c:3f:53:a9:99:e0:13:0c:c8:86:8c:ae:c2:ca:16:11:
         27:f8:94:a9:3b:06:23:09:c9:e6:ce:a2:c3:73:7c:9f:04:ae:
         d0:ec:33:60:7e:13:67:22:78:f0:0d:b3:1e:02:93:c2:50:36:
         8a:b9:f7:a0:43:ca:12:29:0f:b4:97:80:60:21:5f:2b:b5:3d:
         04:99:83:4b:5e:51:73:3f:7b:df:16:7a:87:af:8a:54:44:9b:
         53:b1:e7:d2:b9:c3:24:d5:f7:98:91:76:ee:31:06:2d:30:06:
         15:23:c8:69:59:11:9b:3f:be:4e:af:e1:b2:1c:a6:42:36:30:
         b8:9d:c3:49:d5:04:de:82:18:5f:53:6c:49:ed:c5:ae:5b:3d:
         3f:70:78:b9:68:e5:fb:a7:1e:aa:c8:26:79:bf:e0:11:93:f5:
         0e:1e:c6:c5:13:34:0d:01:7a:2d:87:53:07:a7:33:ee:c6:24:
         90:8d:64:08:7c:7b:c1:8f:95:b4:f7:bc:fe:27:28:a6:78:4c:
         c7:83:5d:0d
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUTwNiVnqLGYhKgEFqIugcFVZWtBAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzM2MDRaFw0yNzA1MjEwNzQxMDRaMDMxMTAvBgNV
BAMTKDg2M0QzQ0RCMjg5NTAzNTc1QkQwNjdCMEVDRkUxOEY4Mzk0NjBDNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfsoyOLU6+7Uw26nqN62CoRoIb
ODtqBZI4NQWEBGhrY8f+Ukip6ZURSIaN/TXrrocVf3QUhTb6v52ltW7efHVVA/HV
sGbUo3cDF9I+xMV74G0Ec8LVzyEHqQO3YTKZxlVeQT/Yaa0n9ItSKhC3fxYgSs2R
IcZ19b4tyWRNqba1DnIvXyFpX5+5fAR4No1Dm3fQ+WpTljdG/b5U8MWpgD6Iky0f
UVhkdSKThX9Qs24T6B3zG+zdLDiFz2ztxr5ycn2T2swGdYSIUyPvyI8gkXwsaTXd
SrROkaQqqPUQs2St7vVLNJLrPksMl3KdDuQN8MSo5NFa/wgX9u5K+tkkt1L1AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUhj082yiVA1db0Gew7P4Y+DlGDE0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MjExLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqmGTANBgkqhkiG9w0BAQsFAAOCAQEAPiOj
9STDXd+HnkFVMQvYH6s++b9d+ZUitnmSPx0I4scSKLy26+AeafUSkTGnmppFfYoQ
OXuApydsP1OpmeATDMiGjK7CyhYRJ/iUqTsGIwnJ5s6iw3N8nwSu0OwzYH4TZyJ4
8A2zHgKTwlA2irn3oEPKEikPtJeAYCFfK7U9BJmDS15Rcz973xZ6h6+KVESbU7Hn
0rnDJNX3mJF27jEGLTAGFSPIaVkRmz++Tq/hshymQjYwuJ3DSdUE3oIYX1NsSe3F
rls9P3B4uWjl+6ceqsgmeb/gEZP1Dh7GxRM0DQF6LYdTB6cz7sYkkI1kCHx7wY+V
tPe8/icopnhMx4NdDQ==
-----END CERTIFICATE-----