Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144232.roa
File:                     AS144232.roa (raw, json)
Hash identifier:          6XoPb/B7a0vzQinlCIK1QFhjDKP4ZdTsqQ9xFK8CYXE=
Subject key identifier:   21:AE:DC:56:E5:FF:AE:42:7C:F8:5D:ED:FC:C8:EB:B8:07:93:A0:21
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2895495F674D3A5705661AC9EA48EC55E5B38FBF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144232.roa
Signing time:             Mon 25 May 2026 06:48:53 +0000
ROA not before:           Mon 25 May 2026 06:43:53 +0000
ROA not after:            Mon 24 May 2027 06:48:53 +0000
asID:                     144232
IP address blocks:        240a:a62e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:95:49:5f:67:4d:3a:57:05:66:1a:c9:ea:48:ec:55:e5:b3:8f:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:43:53 2026 GMT
            Not After : May 24 06:48:53 2027 GMT
        Subject: CN=21AEDC56E5FFAE427CF85DEDFCC8EBB80793A021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:cd:55:07:27:a4:08:53:86:da:43:1d:73:f3:
                    1e:a7:9a:74:e3:2b:5f:96:a0:07:d1:12:a8:15:dd:
                    3c:68:29:de:be:ee:e7:3f:c7:7d:87:3b:66:34:60:
                    61:36:66:f8:22:2d:fc:22:4f:a2:48:f4:4f:1a:49:
                    d6:e1:ea:56:da:14:4c:78:30:28:95:f1:b0:5d:17:
                    b8:01:23:cf:75:58:23:22:17:16:10:ce:8f:48:85:
                    91:6b:01:4d:ec:84:c7:55:bb:47:e5:63:59:42:b0:
                    42:25:11:0b:7f:94:3f:01:03:73:e7:55:eb:1b:8f:
                    fb:89:66:cf:b6:19:32:7d:f4:48:44:c6:b5:6e:eb:
                    25:db:5c:be:ae:07:bb:e7:93:3c:c8:e2:ff:88:3f:
                    86:c0:c9:4b:b4:34:38:1f:4e:f4:e5:ea:07:f2:64:
                    c9:05:c1:98:51:ec:b5:4b:a5:7c:c5:d0:5d:09:b9:
                    ca:9d:bd:8b:47:db:5a:bb:55:5f:78:37:d3:5d:f5:
                    3e:49:9c:1c:3d:61:bf:4d:c8:11:df:23:9a:8d:79:
                    53:f9:62:f2:c2:10:e7:90:8f:1e:12:1c:8f:ff:60:
                    e7:d2:8c:c9:9f:c4:9d:58:03:f9:72:e0:1e:de:b9:
                    76:fa:e6:7d:24:73:ea:66:17:6c:cb:1d:13:b0:77:
                    26:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:AE:DC:56:E5:FF:AE:42:7C:F8:5D:ED:FC:C8:EB:B8:07:93:A0:21
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a62e::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:a8:f8:5f:d5:28:2a:69:27:6f:1d:8f:09:65:fe:15:ef:07:
         ae:9d:a8:2d:37:b2:42:c0:55:b7:9b:6b:d1:c5:a7:bf:57:ad:
         e3:4c:67:2f:e4:05:3c:01:16:e1:60:e4:a2:6b:32:02:1f:28:
         57:6e:ef:e7:56:27:55:97:39:2e:89:15:86:2e:04:e0:32:42:
         df:5b:18:38:6e:f7:24:74:3c:f7:9a:67:ef:af:d1:92:ab:ad:
         09:35:9b:06:ae:c3:b3:18:9d:c3:f0:8a:c6:76:50:e1:8a:d3:
         08:8a:8f:76:7a:30:ce:79:ab:72:3b:a6:96:e1:0e:98:82:74:
         c0:ae:a3:e8:d0:8d:f2:76:7b:ad:2c:2b:5b:39:6c:19:19:b0:
         a6:5a:62:19:30:68:ab:80:8b:59:a9:51:3e:38:7f:aa:e8:6b:
         f1:76:0a:94:93:bd:ea:89:06:4b:f5:ac:4a:c7:46:42:5d:ed:
         0e:e5:64:9a:a0:f1:fc:91:46:88:69:c8:4a:78:5d:c8:41:e8:
         40:77:78:e9:1f:d5:2e:7b:31:23:8f:08:f2:a0:b6:47:86:74:
         28:1e:00:9b:50:48:e4:1d:1e:d9:d2:70:5e:4a:7b:70:44:4a:
         cf:9f:7f:8e:47:aa:fd:ab:a9:71:40:27:e5:03:a0:47:0c:3a:
         cd:40:bb:c0
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUKJVJX2dNOlcFZhrJ6kjsVeWzj78wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjQzNTNaFw0yNzA1MjQwNjQ4NTNaMDMxMTAvBgNV
BAMTKDIxQUVEQzU2RTVGRkFFNDI3Q0Y4NURFREZDQzhFQkI4MDc5M0EwMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpzVUHJ6QIU4baQx1z8x6nmnTj
K1+WoAfREqgV3TxoKd6+7uc/x32HO2Y0YGE2ZvgiLfwiT6JI9E8aSdbh6lbaFEx4
MCiV8bBdF7gBI891WCMiFxYQzo9IhZFrAU3shMdVu0flY1lCsEIlEQt/lD8BA3Pn
Vesbj/uJZs+2GTJ99EhExrVu6yXbXL6uB7vnkzzI4v+IP4bAyUu0NDgfTvTl6gfy
ZMkFwZhR7LVLpXzF0F0JucqdvYtH21q7VV94N9Nd9T5JnBw9Yb9NyBHfI5qNeVP5
YvLCEOeQjx4SHI//YOfSjMmfxJ1YA/ly4B7euXb65n0kc+pmF2zLHROwdyaTAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUIa7cVuX/rkJ8+F3t/MjruAeToCEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqmLjANBgkqhkiG9w0BAQsFAAOCAQEAUqj4
X9UoKmknbx2PCWX+Fe8Hrp2oLTeyQsBVt5tr0cWnv1et40xnL+QFPAEW4WDkomsy
Ah8oV27v51YnVZc5LokVhi4E4DJC31sYOG73JHQ895pn76/RkqutCTWbBq7Dsxid
w/CKxnZQ4YrTCIqPdnowznmrcjumluEOmIJ0wK6j6NCN8nZ7rSwrWzlsGRmwplpi
GTBoq4CLWalRPjh/quhr8XYKlJO96okGS/WsSsdGQl3tDuVkmqDx/JFGiGnISnhd
yEHoQHd46R/VLnsxI48I8qC2R4Z0KB4Am1BI5B0e2dJwXkp7cERKz59/jkeq/aup
cUAn5QOgRww6zUC7wA==
-----END CERTIFICATE-----