Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144261.roa
File:                     AS144261.roa (raw, json)
Hash identifier:          NglXw4iVsW2h0ET4hNtlQq1QaM/pZ9Sl7xWTaOTQSB0=
Subject key identifier:   90:50:3A:CE:A0:D0:B0:F2:EB:F0:06:DB:31:45:B8:8A:7C:B8:66:79
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       596C2C735C63A1E67389DF14E04313C35B6DA1C0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144261.roa
Signing time:             Fri 22 May 2026 06:27:32 +0000
ROA not before:           Fri 22 May 2026 06:22:32 +0000
ROA not after:            Fri 21 May 2027 06:27:32 +0000
asID:                     144261
IP address blocks:        240a:a64b::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:6c:2c:73:5c:63:a1:e6:73:89:df:14:e0:43:13:c3:5b:6d:a1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:22:32 2026 GMT
            Not After : May 21 06:27:32 2027 GMT
        Subject: CN=90503ACEA0D0B0F2EBF006DB3145B88A7CB86679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7f:40:a3:6b:51:44:64:20:c6:77:7a:9a:d0:
                    f7:8a:93:96:e8:15:12:39:eb:53:5e:5e:52:ef:e1:
                    aa:c9:87:bd:4d:92:5d:cc:2a:ac:af:7e:3e:57:ca:
                    28:fe:bb:2b:9c:8a:e8:07:04:f2:a9:de:96:c3:84:
                    9a:58:e1:00:a4:56:8a:16:51:7b:30:fc:10:4f:3d:
                    1d:53:80:2a:f5:58:07:86:cd:14:20:7d:38:67:5a:
                    77:e0:a9:eb:cb:0f:5c:3c:ac:cf:fe:a5:d1:f8:32:
                    0b:a3:c7:1b:8d:a6:d8:f2:46:83:4c:aa:2d:1f:17:
                    d7:01:27:38:5b:81:ef:cc:29:2c:48:bf:a1:9c:a8:
                    54:59:84:49:1c:07:8a:5a:0e:78:b3:34:d7:e3:1f:
                    c6:e4:ca:c5:c9:41:2d:6e:9a:e0:eb:ce:a6:fa:cc:
                    9c:b2:8d:3f:18:80:55:f5:46:5d:d1:dd:0c:e7:62:
                    af:12:e2:3d:3a:7c:12:23:a3:e2:f3:c0:de:35:8a:
                    47:c7:43:8e:a5:b2:93:0f:1f:1a:50:1e:2c:0d:b8:
                    ea:ab:6b:a5:fe:77:3a:f9:7e:b6:5e:92:3a:41:d9:
                    0e:db:43:2e:75:c0:0f:9b:97:3a:24:98:9b:11:b4:
                    86:54:07:03:b4:cc:da:32:74:1b:32:09:6c:23:f1:
                    db:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:50:3A:CE:A0:D0:B0:F2:EB:F0:06:DB:31:45:B8:8A:7C:B8:66:79
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144261.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a64b::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:32:73:a8:9b:de:20:50:a1:a5:a9:a1:d4:50:6a:eb:66:18:
         b6:d3:cd:13:5e:d5:dc:99:60:8f:1e:13:7f:31:da:8b:d5:b8:
         81:ca:95:01:67:20:b4:76:66:0c:d1:92:d8:3c:c1:d9:4c:1e:
         bc:ea:40:e5:db:88:95:b9:30:b6:f1:39:25:5b:b1:35:11:44:
         85:a5:ab:cb:06:36:95:e5:a1:63:53:5b:a7:98:d0:b5:37:b1:
         e1:57:75:e9:74:2c:af:ea:bc:0d:43:36:fa:47:53:fc:24:b5:
         eb:23:d5:00:69:41:44:56:89:b8:31:8c:18:13:7e:bc:d3:69:
         50:fc:6e:b4:1c:1a:f9:12:ab:e2:e2:02:b3:c8:e7:54:d9:5e:
         55:ed:4c:0a:8b:96:3a:83:85:ba:f8:c9:3e:af:92:ec:91:ca:
         43:0c:ed:aa:34:f7:34:18:59:7d:65:b9:40:28:ae:c6:a4:17:
         ad:d2:d2:a9:8f:39:5d:af:95:df:25:02:8f:a1:a7:90:f6:7d:
         09:d0:de:89:ff:37:d2:19:f8:cf:4c:14:b2:92:19:c9:a2:b5:
         2f:1d:d9:52:fb:fe:2a:d5:36:ae:02:9c:c7:cc:f5:55:60:89:
         d0:14:6a:6b:d9:a7:35:37:21:4c:0c:88:1f:d5:97:30:03:c6:
         f7:7e:c5:47
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUWWwsc1xjoeZzid8U4EMTw1ttocAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjIyMzJaFw0yNzA1MjEwNjI3MzJaMDMxMTAvBgNV
BAMTKDkwNTAzQUNFQTBEMEIwRjJFQkYwMDZEQjMxNDVCODhBN0NCODY2NzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIf0Cja1FEZCDGd3qa0PeKk5bo
FRI561NeXlLv4arJh71Nkl3MKqyvfj5Xyij+uyuciugHBPKp3pbDhJpY4QCkVooW
UXsw/BBPPR1TgCr1WAeGzRQgfThnWnfgqevLD1w8rM/+pdH4MgujxxuNptjyRoNM
qi0fF9cBJzhbge/MKSxIv6GcqFRZhEkcB4paDnizNNfjH8bkysXJQS1umuDrzqb6
zJyyjT8YgFX1Rl3R3QznYq8S4j06fBIjo+LzwN41ikfHQ46lspMPHxpQHiwNuOqr
a6X+dzr5frZekjpB2Q7bQy51wA+blzokmJsRtIZUBwO0zNoydBsyCWwj8duJAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUkFA6zqDQsPLr8AbbMUW4iny4ZnkwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MjYxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqmSzANBgkqhkiG9w0BAQsFAAOCAQEAaTJz
qJveIFChpamh1FBq62YYttPNE17V3Jlgjx4TfzHai9W4gcqVAWcgtHZmDNGS2DzB
2UwevOpA5duIlbkwtvE5JVuxNRFEhaWrywY2leWhY1Nbp5jQtTex4Vd16XQsr+q8
DUM2+kdT/CS16yPVAGlBRFaJuDGMGBN+vNNpUPxutBwa+RKr4uICs8jnVNleVe1M
CouWOoOFuvjJPq+S7JHKQwztqjT3NBhZfWW5QCiuxqQXrdLSqY85Xa+V3yUCj6Gn
kPZ9CdDeif830hn4z0wUspIZyaK1Lx3ZUvv+KtU2rgKcx8z1VWCJ0BRqa9mnNTch
TAyIH9WXMAPG937FRw==
-----END CERTIFICATE-----