Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144217.roa
File:                     AS144217.roa (raw, json)
Hash identifier:          ddTIayadSi7cby67yrlDyBdCA16fiJZ25cIWqxDzsoo=
Subject key identifier:   18:51:F3:5A:C1:89:4E:41:B4:90:3B:84:F9:6C:0B:9E:21:6F:A3:D5
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       703348577694B13012B494AAF8C77B683E9093C8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144217.roa
Signing time:             Fri 22 May 2026 06:58:11 +0000
ROA not before:           Fri 22 May 2026 06:53:11 +0000
ROA not after:            Fri 21 May 2027 06:58:11 +0000
asID:                     144217
IP address blocks:        240a:a61f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:33:48:57:76:94:b1:30:12:b4:94:aa:f8:c7:7b:68:3e:90:93:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:11 2026 GMT
            Not After : May 21 06:58:11 2027 GMT
        Subject: CN=1851F35AC1894E41B4903B84F96C0B9E216FA3D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cd:19:46:84:64:9c:5c:e1:01:b3:32:d4:49:
                    88:a9:18:2c:6a:8c:2c:ba:13:06:bb:7d:8e:5a:53:
                    be:c5:bf:83:b7:5e:b1:09:22:48:b4:0a:09:59:d9:
                    93:54:d5:19:03:f9:e0:7f:ce:64:9d:aa:fb:68:1a:
                    af:32:94:12:dd:c9:84:1a:df:9e:72:f9:3b:e1:55:
                    7c:de:7b:08:4b:c1:85:d1:27:7e:e0:cf:24:cd:4d:
                    6f:c2:10:46:40:d0:84:7b:8b:29:37:c3:65:b8:1c:
                    c2:b6:5c:38:f0:f0:c8:59:0f:7f:e2:9d:8f:b1:b9:
                    6f:28:da:12:e6:99:6b:46:bd:81:35:15:23:6b:e0:
                    82:eb:8e:02:b0:91:82:00:93:b9:27:b2:ba:b2:e7:
                    8f:35:9e:ec:b3:f8:ab:07:68:20:04:f9:9e:f7:62:
                    64:2b:82:f0:1c:a6:26:95:51:2d:ad:16:59:dc:50:
                    7b:da:ee:2a:ce:fe:02:88:23:3b:97:f7:85:af:23:
                    f8:4e:ff:5f:8d:08:29:26:92:66:71:2f:a0:ea:a1:
                    98:0e:00:ee:ea:ce:83:88:d2:1c:68:84:04:dc:51:
                    4c:db:79:5d:3b:16:81:da:21:55:af:02:bd:70:7b:
                    f8:f4:8e:be:e8:bd:d2:ee:41:ae:28:7b:f4:e9:e5:
                    5d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:51:F3:5A:C1:89:4E:41:B4:90:3B:84:F9:6C:0B:9E:21:6F:A3:D5
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144217.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a61f::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:27:d8:1f:04:34:b2:42:75:71:6b:0f:ae:15:c2:9b:bc:13:
         22:75:dd:a9:ec:dd:85:af:07:a1:39:a5:d1:2a:d8:9b:6e:e2:
         8e:f1:6f:1c:31:41:df:29:6d:8d:15:1c:35:e3:f5:48:36:4e:
         03:fd:65:cd:11:0a:38:59:b2:a3:b4:9e:12:a4:5e:4b:e0:15:
         8a:dd:5a:f8:51:9e:e1:84:a0:3a:ef:1b:e3:58:c3:08:f0:4b:
         ed:0b:67:2c:72:40:07:cb:35:0f:c5:ec:0d:95:9d:74:61:ee:
         f4:94:8c:ea:06:f3:3b:f6:27:28:e8:9b:d2:0f:2c:b6:1d:55:
         4b:aa:1b:36:9b:a7:5c:f4:fc:bc:53:e2:65:1f:20:c9:43:15:
         af:4e:02:7c:3e:de:c6:5a:44:92:80:ea:4b:30:fe:e2:2e:e0:
         43:4b:44:66:c0:f3:75:32:42:3d:0a:69:e6:60:5c:21:07:5b:
         81:11:ae:ca:3c:39:b3:05:fb:c2:9e:94:19:4b:90:c3:8a:89:
         6b:be:f8:45:6f:64:d5:ed:45:ab:b2:ff:d2:ef:ef:af:9e:f1:
         f9:b5:cd:0f:b5:dd:a1:8c:ed:93:da:63:71:e9:3d:96:e5:5d:
         4a:26:40:bb:2e:b7:55:08:67:03:80:e9:ae:88:97:bc:e4:3a:
         3b:65:57:3d
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUcDNIV3aUsTAStJSq+Md7aD6Qk8gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjUzMTFaFw0yNzA1MjEwNjU4MTFaMDMxMTAvBgNV
BAMTKDE4NTFGMzVBQzE4OTRFNDFCNDkwM0I4NEY5NkMwQjlFMjE2RkEzRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPzRlGhGScXOEBszLUSYipGCxq
jCy6Ewa7fY5aU77Fv4O3XrEJIki0CglZ2ZNU1RkD+eB/zmSdqvtoGq8ylBLdyYQa
355y+TvhVXzeewhLwYXRJ37gzyTNTW/CEEZA0IR7iyk3w2W4HMK2XDjw8MhZD3/i
nY+xuW8o2hLmmWtGvYE1FSNr4ILrjgKwkYIAk7knsrqy5481nuyz+KsHaCAE+Z73
YmQrgvAcpiaVUS2tFlncUHva7irO/gKIIzuX94WvI/hO/1+NCCkmkmZxL6DqoZgO
AO7qzoOI0hxohATcUUzbeV07FoHaIVWvAr1we/j0jr7ovdLuQa4oe/Tp5V1DAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUGFHzWsGJTkG0kDuE+WwLniFvo9UwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MjE3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqmHzANBgkqhkiG9w0BAQsFAAOCAQEAASfY
HwQ0skJ1cWsPrhXCm7wTInXdqezdha8HoTml0SrYm27ijvFvHDFB3yltjRUcNeP1
SDZOA/1lzREKOFmyo7SeEqReS+AVit1a+FGe4YSgOu8b41jDCPBL7QtnLHJAB8s1
D8XsDZWddGHu9JSM6gbzO/YnKOib0g8sth1VS6obNpunXPT8vFPiZR8gyUMVr04C
fD7exlpEkoDqSzD+4i7gQ0tEZsDzdTJCPQpp5mBcIQdbgRGuyjw5swX7wp6UGUuQ
w4qJa774RW9k1e1Fq7L/0u/vr57x+bXND7XdoYztk9pjcek9luVdSiZAuy63VQhn
A4DproiXvOQ6O2VXPQ==
-----END CERTIFICATE-----