Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144322.roa
File:                     AS144322.roa (raw, json)
Hash identifier:          BHp+d+YsbF22sM6aZKlpJzUo783/q1ZYUgPqL6vmnG4=
Subject key identifier:   06:EB:51:69:C3:26:CA:1E:F4:C3:E8:70:1D:F0:77:9D:B9:69:86:0C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       66BF1EFB99B56B3699E0A03927836A15916A2C1C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144322.roa
Signing time:             Fri 22 May 2026 07:40:45 +0000
ROA not before:           Fri 22 May 2026 07:35:45 +0000
ROA not after:            Fri 21 May 2027 07:40:45 +0000
asID:                     144322
IP address blocks:        240a:a688::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:bf:1e:fb:99:b5:6b:36:99:e0:a0:39:27:83:6a:15:91:6a:2c:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:35:45 2026 GMT
            Not After : May 21 07:40:45 2027 GMT
        Subject: CN=06EB5169C326CA1EF4C3E8701DF0779DB969860C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f4:22:5d:9c:cc:7c:2c:88:64:e4:49:d7:dd:
                    89:1a:51:44:6d:78:54:09:6d:fa:52:08:ca:3e:63:
                    64:b8:cf:65:32:23:07:50:8d:b8:12:be:38:8f:11:
                    19:aa:d6:24:75:a3:f4:fa:bd:28:2a:67:27:71:bc:
                    aa:66:96:de:90:d8:1a:a5:fa:15:9a:2f:71:33:3d:
                    54:60:58:86:76:3e:83:1b:69:25:a8:4d:a3:9a:92:
                    8c:fa:83:55:9a:c4:4c:2d:d3:9c:f5:2f:8c:27:d0:
                    bf:d8:bd:f9:b3:32:0d:7a:6c:3a:4a:3d:e5:c2:a9:
                    06:d4:7f:b2:4f:07:5c:f6:90:f4:3d:fa:e1:a0:c3:
                    22:33:43:94:b2:86:c6:44:54:b8:11:96:c2:23:89:
                    ad:14:8e:ab:24:88:ab:40:b3:a2:83:51:d0:08:3c:
                    a4:69:6b:d8:9d:0c:d3:3d:4d:67:a8:c0:a3:2c:fa:
                    f8:91:90:b2:44:66:94:a6:fe:55:7d:52:16:6e:5d:
                    ac:42:83:a1:ba:13:69:40:02:58:85:c9:f6:e4:24:
                    b2:66:13:3f:38:ac:4e:e5:71:2d:7d:d2:f9:4b:2b:
                    f0:b8:ed:e4:d9:1a:19:88:06:91:4f:a3:97:dd:4a:
                    46:c6:83:e5:07:d2:8e:25:9c:10:f7:00:63:6b:88:
                    89:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:EB:51:69:C3:26:CA:1E:F4:C3:E8:70:1D:F0:77:9D:B9:69:86:0C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144322.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a688::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:c5:5f:6c:ea:85:4e:1c:83:64:26:e4:e7:8d:21:74:be:f9:
         6b:b1:ef:8b:8e:5a:34:03:95:a7:65:8d:df:7d:40:c8:4b:28:
         5b:24:f3:0e:6e:ca:70:a8:82:84:60:4c:c8:56:d7:46:b2:55:
         bc:13:92:e0:c2:5b:b1:84:a7:d7:80:96:65:b9:fc:d7:87:e5:
         73:78:15:f1:43:d0:7f:19:36:f5:b3:60:ce:04:3f:a0:58:2b:
         48:39:63:87:4e:86:aa:9a:8d:69:3a:1d:20:36:eb:21:19:c5:
         bd:6c:ce:33:a4:ac:47:ae:a8:95:a4:12:4c:4b:fd:a4:af:08:
         93:f9:13:df:89:fe:9c:e5:b3:c6:d4:84:31:1c:6b:df:ed:d3:
         a9:91:a0:55:7d:07:71:51:1c:e8:1d:c8:13:fd:1a:f0:2b:32:
         64:2d:f1:ac:58:35:ea:03:0e:b8:63:c1:0d:2d:d9:89:fe:a5:
         86:9c:61:87:4f:0b:6f:9c:42:bd:30:ed:b5:1e:62:c5:90:ae:
         e7:c1:e9:85:bd:3b:de:ec:32:f0:fd:fd:0d:22:5c:a2:96:35:
         24:01:ef:e2:e1:00:f4:aa:35:f6:30:a0:a6:fe:eb:22:2f:12:
         f9:9f:5c:7e:92:f1:0f:21:a4:dc:73:45:34:5e:ad:7e:ce:31:
         75:00:64:cb
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUZr8e+5m1azaZ4KA5J4NqFZFqLBwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzM1NDVaFw0yNzA1MjEwNzQwNDVaMDMxMTAvBgNV
BAMTKDA2RUI1MTY5QzMyNkNBMUVGNEMzRTg3MDFERjA3NzlEQjk2OTg2MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW9CJdnMx8LIhk5EnX3YkaUURt
eFQJbfpSCMo+Y2S4z2UyIwdQjbgSvjiPERmq1iR1o/T6vSgqZydxvKpmlt6Q2Bql
+hWaL3EzPVRgWIZ2PoMbaSWoTaOakoz6g1WaxEwt05z1L4wn0L/YvfmzMg16bDpK
PeXCqQbUf7JPB1z2kPQ9+uGgwyIzQ5SyhsZEVLgRlsIjia0UjqskiKtAs6KDUdAI
PKRpa9idDNM9TWeowKMs+viRkLJEZpSm/lV9UhZuXaxCg6G6E2lAAliFyfbkJLJm
Ez84rE7lcS190vlLK/C47eTZGhmIBpFPo5fdSkbGg+UH0o4lnBD3AGNriIkFAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUButRacMmyh70w+hwHfB3nblphgwwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MzIyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqmiDANBgkqhkiG9w0BAQsFAAOCAQEAsMVf
bOqFThyDZCbk540hdL75a7Hvi45aNAOVp2WN331AyEsoWyTzDm7KcKiChGBMyFbX
RrJVvBOS4MJbsYSn14CWZbn814flc3gV8UPQfxk29bNgzgQ/oFgrSDljh06GqpqN
aTodIDbrIRnFvWzOM6SsR66olaQSTEv9pK8Ik/kT34n+nOWzxtSEMRxr3+3TqZGg
VX0HcVEc6B3IE/0a8CsyZC3xrFg16gMOuGPBDS3Zif6lhpxhh08Lb5xCvTDttR5i
xZCu58Hphb073uwy8P39DSJcopY1JAHv4uEA9Ko19jCgpv7rIi8S+Z9cfpLxDyGk
3HNFNF6tfs4xdQBkyw==
-----END CERTIFICATE-----