Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144348.roa
File:                     AS144348.roa (raw, json)
Hash identifier:          AwENNsZUjuqC7bnhOAkIwEDC6ezQa38DdqxKluVZW4Y=
Subject key identifier:   FC:57:86:8A:74:EB:65:51:36:FB:84:68:FF:34:5A:4A:9B:A8:3F:3F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       695A82597F1F35571084E62DDBFCD1FF0B0BA5F2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144348.roa
Signing time:             Fri 22 May 2026 06:45:58 +0000
ROA not before:           Fri 22 May 2026 06:40:58 +0000
ROA not after:            Fri 21 May 2027 06:45:58 +0000
asID:                     144348
IP address blocks:        240a:a6a2::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:5a:82:59:7f:1f:35:57:10:84:e6:2d:db:fc:d1:ff:0b:0b:a5:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:40:58 2026 GMT
            Not After : May 21 06:45:58 2027 GMT
        Subject: CN=FC57868A74EB655136FB8468FF345A4A9BA83F3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ca:f9:21:fd:f2:8f:67:ad:c9:51:b0:61:cb:
                    02:5a:24:9a:a5:08:10:91:e0:a7:1b:a8:7d:c6:9e:
                    a7:37:75:6f:f3:96:d3:29:c3:ee:39:b1:75:d7:04:
                    e7:da:50:fb:47:37:87:56:05:22:14:eb:41:7a:d8:
                    73:dc:74:dd:df:60:b0:39:1a:d3:61:08:61:dc:ae:
                    28:5a:d4:c6:3d:66:2a:31:20:15:5c:1e:e6:5a:ae:
                    7f:29:16:83:03:2b:20:61:41:5f:c6:be:9c:6d:19:
                    64:eb:03:36:4e:18:6c:96:d2:d2:40:0d:e8:64:3c:
                    5d:e7:e7:7f:fa:9f:31:0d:fd:8a:a7:ec:0e:4e:3f:
                    93:a7:8a:79:72:7e:ae:60:b2:72:f8:91:32:b5:8d:
                    48:0e:b8:1f:1b:23:dc:56:ec:19:a9:30:cf:f6:90:
                    28:bc:7d:ca:e7:32:c5:e5:47:49:3e:73:9c:44:63:
                    d7:34:3a:72:c9:79:c9:a9:fd:26:ba:42:20:4c:52:
                    af:b1:52:5b:a3:77:75:e3:44:0d:5a:c8:a6:69:e3:
                    2f:25:63:09:ae:02:e8:7d:a1:74:49:b0:01:bb:1b:
                    39:3c:c2:8e:81:39:02:e7:47:71:ad:26:b6:40:e3:
                    1c:e5:88:16:e6:ed:c8:e0:db:d2:9c:93:94:6d:56:
                    28:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:57:86:8A:74:EB:65:51:36:FB:84:68:FF:34:5A:4A:9B:A8:3F:3F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144348.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a6a2::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:d3:55:a2:a4:3b:d9:fb:46:60:68:09:32:da:8e:75:cb:0f:
         ce:78:fc:58:96:e4:2d:dc:ed:82:cb:1a:0d:31:98:b7:d2:11:
         aa:3f:cf:ad:0f:17:bb:4b:a8:93:7e:1e:2f:3c:71:71:f0:d5:
         e3:63:0f:ef:df:43:26:b4:52:1e:2b:c4:e5:13:e8:39:4e:b5:
         ad:16:9c:d8:88:da:4d:2c:f0:4b:b4:d2:9d:f5:15:17:c5:75:
         0f:fd:74:88:00:26:a4:64:67:34:ba:9d:86:b7:df:2e:bd:fc:
         b0:4d:d3:e4:f6:e0:40:17:77:ed:f4:f6:f1:20:cd:8c:2c:cf:
         57:2a:36:98:32:b8:5d:dc:71:cb:f2:11:d2:13:8d:b2:b7:68:
         f0:67:dd:75:6e:f1:b2:17:d6:d4:1f:d0:d9:33:16:99:f4:00:
         89:a3:4b:8a:d9:2f:26:36:68:ef:a1:ba:88:f4:af:95:30:d4:
         d1:26:fd:c5:be:c8:c9:ad:79:7f:73:8e:f2:66:22:d9:61:ce:
         b3:0f:71:af:ce:1d:67:be:61:a5:f4:7d:19:86:5b:da:b6:e8:
         eb:cb:e9:c8:18:84:e0:30:12:32:f0:a4:88:4f:e0:6d:aa:1e:
         21:b0:2b:f7:fc:df:ba:51:35:78:45:bc:9a:f3:30:70:53:85:
         48:ae:d3:95
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUaVqCWX8fNVcQhOYt2/zR/wsLpfIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjQwNThaFw0yNzA1MjEwNjQ1NThaMDMxMTAvBgNV
BAMTKEZDNTc4NjhBNzRFQjY1NTEzNkZCODQ2OEZGMzQ1QTRBOUJBODNGM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5yvkh/fKPZ63JUbBhywJaJJql
CBCR4KcbqH3Gnqc3dW/zltMpw+45sXXXBOfaUPtHN4dWBSIU60F62HPcdN3fYLA5
GtNhCGHcriha1MY9ZioxIBVcHuZarn8pFoMDKyBhQV/GvpxtGWTrAzZOGGyW0tJA
DehkPF3n53/6nzEN/Yqn7A5OP5Oninlyfq5gsnL4kTK1jUgOuB8bI9xW7BmpMM/2
kCi8fcrnMsXlR0k+c5xEY9c0OnLJecmp/Sa6QiBMUq+xUlujd3XjRA1ayKZp4y8l
YwmuAuh9oXRJsAG7Gzk8wo6BOQLnR3GtJrZA4xzliBbm7cjg29Kck5RtVihxAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU/FeGinTrZVE2+4Ro/zRaSpuoPz8wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MzQ4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqmojANBgkqhkiG9w0BAQsFAAOCAQEAHtNV
oqQ72ftGYGgJMtqOdcsPznj8WJbkLdztgssaDTGYt9IRqj/PrQ8Xu0uok34eLzxx
cfDV42MP799DJrRSHivE5RPoOU61rRac2IjaTSzwS7TSnfUVF8V1D/10iAAmpGRn
NLqdhrffLr38sE3T5PbgQBd37fT28SDNjCzPVyo2mDK4Xdxxy/IR0hONsrdo8Gfd
dW7xshfW1B/Q2TMWmfQAiaNLitkvJjZo76G6iPSvlTDU0Sb9xb7Iya15f3OO8mYi
2WHOsw9xr84dZ75hpfR9GYZb2rbo68vpyBiE4DASMvCkiE/gbaoeIbAr9/zfulE1
eEW8mvMwcFOFSK7TlQ==
-----END CERTIFICATE-----