Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144346.roa
File:                     AS144346.roa (raw, json)
Hash identifier:          glY4qm6vrX7ueYgdUcHzRbcBJ21y82IVpfmthL+lu7I=
Subject key identifier:   4F:28:9D:F5:96:10:AC:E0:3A:74:30:10:CA:38:54:7A:82:6C:CE:A0
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       41F3FD5C41FF67AEAFBD01345AD56CC95F69BAC0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144346.roa
Signing time:             Tue 26 May 2026 06:30:27 +0000
ROA not before:           Tue 26 May 2026 06:25:27 +0000
ROA not after:            Tue 25 May 2027 06:30:27 +0000
asID:                     144346
IP address blocks:        240a:a6a0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f3:fd:5c:41:ff:67:ae:af:bd:01:34:5a:d5:6c:c9:5f:69:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:27 2026 GMT
            Not After : May 25 06:30:27 2027 GMT
        Subject: CN=4F289DF59610ACE03A743010CA38547A826CCEA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c0:e8:62:f5:45:99:5b:13:91:9d:5d:5b:2c:
                    b1:08:f2:72:2f:ca:11:eb:06:9e:c2:7a:4b:24:d9:
                    78:49:16:53:82:59:8e:1e:ee:00:a6:12:6f:0e:c6:
                    0b:4c:9b:71:f6:bf:6a:a2:f6:0a:9a:bb:08:2f:24:
                    44:ff:98:05:3c:7c:93:e6:9c:8e:b9:7b:e5:1b:71:
                    ff:2c:c6:48:a8:85:3f:57:32:b0:5d:53:93:f4:b9:
                    04:7f:da:1e:bf:f3:b3:76:c3:34:66:2f:f8:53:83:
                    0d:43:8f:23:d7:17:a1:5e:92:d5:79:7f:7c:94:9c:
                    d5:ff:0e:e1:e6:18:b8:0d:30:b3:f9:21:03:d1:64:
                    57:f1:77:98:b9:83:7a:b2:6a:2d:bf:1b:e0:51:e1:
                    a0:97:77:08:15:3c:67:f9:4a:ac:08:02:93:d0:fd:
                    5a:7b:48:a0:a6:6d:75:fe:51:14:ab:ff:35:c7:2c:
                    0b:de:2f:b5:80:a0:40:14:ca:88:cb:73:16:83:6e:
                    d0:77:a2:d8:53:c4:d2:91:54:22:c4:b3:3d:1e:2b:
                    e2:fd:3a:58:3f:04:c1:86:ff:2a:e7:00:e2:48:12:
                    a1:6d:27:0d:d4:70:46:04:8a:49:9c:a8:c2:b0:c8:
                    e8:80:dd:73:c9:18:cd:d6:9f:7a:aa:83:d1:99:45:
                    3a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:28:9D:F5:96:10:AC:E0:3A:74:30:10:CA:38:54:7A:82:6C:CE:A0
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144346.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a6a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:a0:86:14:80:ca:bf:67:7f:30:28:5c:2c:be:b9:65:03:49:
         f7:67:c0:b7:ad:17:8c:84:b4:58:ca:a0:d3:2b:ce:dc:94:07:
         5a:6f:47:95:21:f5:37:0e:1d:39:44:de:7c:fd:2e:76:63:0e:
         83:fe:43:bb:75:6e:71:f5:b3:30:5f:2c:0d:3e:8d:fb:36:e7:
         01:93:61:4d:d7:1d:ea:e5:a6:04:b6:24:c1:5d:7a:c7:ef:31:
         7c:74:e9:98:b0:e8:06:ea:16:be:bb:06:bb:9b:e1:8e:ad:0f:
         f0:fe:e4:f6:8c:8d:ab:f7:56:d0:b3:55:4c:4b:af:23:d8:d0:
         bd:22:7f:16:4c:93:0b:19:86:23:40:45:20:96:c0:04:b2:02:
         b1:85:3b:b6:23:69:a2:52:4c:2b:40:d9:19:e6:a3:e1:05:ac:
         64:c9:3d:6f:bc:10:c3:4e:99:9f:3e:14:93:e2:00:28:61:4b:
         e3:f8:62:21:2d:7c:d7:74:55:d5:8f:46:f8:d0:4a:0a:6e:cd:
         b7:7f:64:f0:b6:92:80:ef:a8:f8:09:a0:d5:04:04:92:5c:0c:
         36:61:aa:df:30:9b:93:fc:dc:8a:04:8b:a8:f7:6c:5e:52:06:
         b3:a8:f8:d5:fd:70:9f:f3:2d:f4:3f:14:24:f3:7d:0c:7d:dd:
         d1:b0:d3:ef
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUQfP9XEH/Z66vvQE0WtVsyV9pusAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjI1MjdaFw0yNzA1MjUwNjMwMjdaMDMxMTAvBgNV
BAMTKDRGMjg5REY1OTYxMEFDRTAzQTc0MzAxMENBMzg1NDdBODI2Q0NFQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCywOhi9UWZWxORnV1bLLEI8nIv
yhHrBp7Ceksk2XhJFlOCWY4e7gCmEm8OxgtMm3H2v2qi9gqauwgvJET/mAU8fJPm
nI65e+Ubcf8sxkiohT9XMrBdU5P0uQR/2h6/87N2wzRmL/hTgw1DjyPXF6FektV5
f3yUnNX/DuHmGLgNMLP5IQPRZFfxd5i5g3qyai2/G+BR4aCXdwgVPGf5SqwIApPQ
/Vp7SKCmbXX+URSr/zXHLAveL7WAoEAUyojLcxaDbtB3othTxNKRVCLEsz0eK+L9
Olg/BMGG/yrnAOJIEqFtJw3UcEYEikmcqMKwyOiA3XPJGM3Wn3qqg9GZRTqJAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUTyid9ZYQrOA6dDAQyjhUeoJszqAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MzQ2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqmoDANBgkqhkiG9w0BAQsFAAOCAQEAmaCG
FIDKv2d/MChcLL65ZQNJ92fAt60XjIS0WMqg0yvO3JQHWm9HlSH1Nw4dOUTefP0u
dmMOg/5Du3VucfWzMF8sDT6N+zbnAZNhTdcd6uWmBLYkwV16x+8xfHTpmLDoBuoW
vrsGu5vhjq0P8P7k9oyNq/dW0LNVTEuvI9jQvSJ/FkyTCxmGI0BFIJbABLICsYU7
tiNpolJMK0DZGeaj4QWsZMk9b7wQw06Znz4Uk+IAKGFL4/hiIS1813RV1Y9G+NBK
Cm7Nt39k8LaSgO+o+Amg1QQEklwMNmGq3zCbk/zcigSLqPdsXlIGs6j41f1wn/Mt
9D8UJPN9DH3d0bDT7w==
-----END CERTIFICATE-----