Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144355.roa
File:                     AS144355.roa (raw, json)
Hash identifier:          SzdfWqWs/HsPbu4cLSzwSkeZfB6zyvgdHCmPpQJRG/c=
Subject key identifier:   C1:60:F8:23:19:C5:7F:38:10:60:88:E0:79:4A:C1:FA:9C:94:91:28
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       653B7154404EFA04398B10D6A1BAD50BF5C97978
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144355.roa
Signing time:             Mon 25 May 2026 03:19:44 +0000
ROA not before:           Mon 25 May 2026 03:14:44 +0000
ROA not after:            Mon 24 May 2027 03:19:44 +0000
asID:                     144355
IP address blocks:        240a:a6a9::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:3b:71:54:40:4e:fa:04:39:8b:10:d6:a1:ba:d5:0b:f5:c9:79:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:44 2026 GMT
            Not After : May 24 03:19:44 2027 GMT
        Subject: CN=C160F82319C57F38106088E0794AC1FA9C949128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7c:3e:8f:ce:80:84:6a:25:46:5f:a1:b4:5e:
                    6f:c1:de:3f:33:34:37:d3:f1:73:37:55:4b:a3:8a:
                    3d:39:9b:a8:21:b1:6d:5e:00:ce:f4:4f:0a:5e:50:
                    65:08:c6:8b:ad:87:1a:64:e1:17:71:3f:61:a7:38:
                    7c:cb:1e:5a:94:e0:b9:eb:53:b6:cb:7c:c9:bb:55:
                    b9:3d:dc:05:d1:4d:db:cb:cf:a7:2d:d9:22:de:f6:
                    0a:20:ee:10:fd:a5:b6:55:8b:75:2d:90:a8:33:21:
                    32:d5:19:09:99:18:03:13:11:f4:01:43:13:2b:fe:
                    9f:70:ce:71:3a:85:40:9e:77:89:17:64:81:27:09:
                    ec:28:c3:98:df:b5:57:08:b8:99:ba:4b:71:a5:02:
                    12:ac:92:d9:75:9d:d7:51:c8:ee:14:e9:12:6b:ce:
                    e6:8d:90:90:64:a1:be:49:d0:d1:81:15:87:9a:f6:
                    f1:84:f8:11:e1:1d:d8:c1:6f:83:2c:a2:73:2c:e0:
                    ad:41:a1:33:ac:1b:d7:e5:71:5a:39:42:61:0d:bc:
                    6c:f6:e3:ae:eb:4b:28:03:49:b7:a2:7c:70:87:b1:
                    fb:4b:9a:88:ce:12:b0:a7:cd:42:c1:d5:00:30:1a:
                    4e:39:c8:ff:ea:ae:05:2e:fa:cb:54:99:72:d2:be:
                    1d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:60:F8:23:19:C5:7F:38:10:60:88:E0:79:4A:C1:FA:9C:94:91:28
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144355.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a6a9::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:47:8e:23:db:64:ec:a0:9a:7b:00:28:84:6d:a2:84:e1:12:
         fc:3b:16:0c:a5:a8:77:eb:4b:28:da:a0:88:7a:e3:8b:44:f3:
         3c:8f:ba:5c:23:1a:b7:4b:da:11:3e:bb:19:92:77:3e:05:86:
         90:a7:a5:1e:03:3e:ea:e8:ca:44:a9:20:46:0c:7a:43:98:00:
         78:31:12:f2:d7:23:67:fa:97:a9:ae:56:e6:7f:e5:d5:2c:c5:
         06:16:cb:10:f8:4e:7e:2c:b6:30:e8:d1:4c:e6:db:a4:1f:7e:
         19:77:cf:96:45:c4:6d:46:02:21:8d:87:c2:42:0b:6f:28:1e:
         c6:8a:36:99:51:75:8c:34:bb:0e:10:96:d5:bb:cf:d2:8e:51:
         bc:73:30:8f:d8:55:73:d7:e8:7e:22:66:4e:07:d5:5c:a3:0f:
         10:8d:10:3e:63:64:79:77:4d:25:08:9b:a1:6b:ed:02:b0:bc:
         03:01:f4:19:c3:70:b6:02:2d:30:5f:6a:74:f2:ca:2c:c9:e7:
         df:ec:a2:19:fc:60:5b:20:f2:be:c1:12:89:e7:90:89:08:90:
         fe:5a:f3:02:b7:aa:32:d3:5a:de:a4:f0:34:46:a0:c0:6c:fe:
         70:66:ab:78:9b:38:f4:ad:8e:fa:a7:a9:20:6b:3f:59:e9:7a:
         5a:59:32:e2
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUZTtxVEBO+gQ5ixDWobrVC/XJeXgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMzE0NDRaFw0yNzA1MjQwMzE5NDRaMDMxMTAvBgNV
BAMTKEMxNjBGODIzMTlDNTdGMzgxMDYwODhFMDc5NEFDMUZBOUM5NDkxMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUfD6PzoCEaiVGX6G0Xm/B3j8z
NDfT8XM3VUujij05m6ghsW1eAM70TwpeUGUIxouthxpk4RdxP2GnOHzLHlqU4Lnr
U7bLfMm7Vbk93AXRTdvLz6ct2SLe9gog7hD9pbZVi3UtkKgzITLVGQmZGAMTEfQB
QxMr/p9wznE6hUCed4kXZIEnCewow5jftVcIuJm6S3GlAhKsktl1nddRyO4U6RJr
zuaNkJBkob5J0NGBFYea9vGE+BHhHdjBb4MsonMs4K1BoTOsG9flcVo5QmENvGz2
467rSygDSbeifHCHsftLmojOErCnzULB1QAwGk45yP/qrgUu+stUmXLSvh0jAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUwWD4IxnFfzgQYIjgeUrB+pyUkSgwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MzU1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqmqTANBgkqhkiG9w0BAQsFAAOCAQEAUkeO
I9tk7KCaewAohG2ihOES/DsWDKWod+tLKNqgiHrji0TzPI+6XCMat0vaET67GZJ3
PgWGkKelHgM+6ujKRKkgRgx6Q5gAeDES8tcjZ/qXqa5W5n/l1SzFBhbLEPhOfiy2
MOjRTObbpB9+GXfPlkXEbUYCIY2HwkILbygexoo2mVF1jDS7DhCW1bvP0o5RvHMw
j9hVc9fofiJmTgfVXKMPEI0QPmNkeXdNJQiboWvtArC8AwH0GcNwtgItMF9qdPLK
LMnn3+yiGfxgWyDyvsESieeQiQiQ/lrzAreqMtNa3qTwNEagwGz+cGareJs49K2O
+qepIGs/Wel6Wlky4g==
-----END CERTIFICATE-----