Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144372.roa
File:                     AS144372.roa (raw, json)
Hash identifier:          F1xc+SsrdCX7er4iDmYoNkpkH/shrzNESbtZYTN6Trc=
Subject key identifier:   C7:F2:69:99:46:50:75:90:E6:F3:D6:6A:CF:FD:A1:E2:9C:76:91:AE
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4A5CA9B04C58CF31ED43BFF36B2E921BDA273B7C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144372.roa
Signing time:             Fri 22 May 2026 07:08:56 +0000
ROA not before:           Fri 22 May 2026 07:03:56 +0000
ROA not after:            Fri 21 May 2027 07:08:56 +0000
asID:                     144372
IP address blocks:        240a:a6ba::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:5c:a9:b0:4c:58:cf:31:ed:43:bf:f3:6b:2e:92:1b:da:27:3b:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:03:56 2026 GMT
            Not After : May 21 07:08:56 2027 GMT
        Subject: CN=C7F2699946507590E6F3D66ACFFDA1E29C7691AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:17:00:b0:17:ca:93:42:dd:21:08:a1:36:fb:
                    28:c2:ad:a3:e2:05:b1:2e:ce:a1:9c:2d:78:ee:5f:
                    d7:77:c9:3e:11:d8:75:46:00:d8:b1:50:2b:e3:75:
                    0b:53:f1:75:fb:cf:bc:a0:48:13:bc:3a:99:56:d9:
                    60:b8:d2:f7:d1:44:50:f6:ff:0f:5f:52:4d:12:39:
                    1c:56:5c:93:40:2e:42:7b:c4:a5:ac:b2:24:b0:2e:
                    22:cb:51:a4:53:d4:01:6c:3f:14:da:82:1c:69:3d:
                    5a:da:75:fb:6a:ed:b7:8d:e9:f1:cf:d1:38:54:8a:
                    bc:27:76:97:4b:b4:b4:ce:c8:7b:82:fe:2c:ec:36:
                    d7:14:ba:0a:99:3f:b1:94:da:36:62:cf:43:6e:e1:
                    7e:40:36:10:46:66:f4:e4:3d:9c:e5:16:36:f3:3d:
                    ed:98:7d:2a:0b:ae:96:c2:29:5e:3c:2f:a7:9d:78:
                    07:2e:fe:4e:57:0e:65:58:03:b9:12:ac:24:3a:0c:
                    8e:ed:8c:de:e1:f8:04:c7:ef:ee:5f:a8:1e:b4:d4:
                    c8:22:7f:52:33:51:25:36:36:2e:91:1e:33:a3:dd:
                    6c:36:1a:34:99:e0:e3:55:e2:4d:5e:87:04:3a:99:
                    c2:7f:05:14:5e:e0:39:62:b4:3a:2c:77:79:b9:8f:
                    39:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F2:69:99:46:50:75:90:E6:F3:D6:6A:CF:FD:A1:E2:9C:76:91:AE
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144372.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a6ba::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:d0:60:5d:bd:75:1d:29:9d:3b:7e:6b:45:5f:3e:20:8a:0d:
         e8:a6:e5:ce:0d:b8:25:05:02:b3:c6:2d:01:dc:3c:6a:30:7d:
         38:b8:5a:90:45:5e:36:94:f5:06:5f:44:db:c9:0d:c5:f9:61:
         d0:a4:fb:08:c6:de:67:55:4a:83:28:05:1f:d1:16:3c:a8:8f:
         bc:eb:53:73:d0:3e:da:be:55:f9:49:33:3e:a0:b1:a3:33:e6:
         2e:7a:0c:99:08:4f:44:45:1c:87:17:c2:47:b1:53:7c:df:36:
         07:bb:0c:ad:39:1b:ea:9e:bf:5b:d3:f2:0d:0a:3a:d8:42:11:
         7c:14:56:52:25:8c:18:fc:48:6b:f1:36:f4:6c:60:19:90:ec:
         01:6b:73:28:f3:ed:55:17:25:ab:22:a1:c5:fe:61:d8:b8:ff:
         9d:81:d8:00:e3:30:22:c9:66:22:c1:8a:e3:8c:11:84:00:b0:
         32:4c:53:0e:2e:ba:c1:e5:10:c3:a2:0c:68:fc:8c:40:8f:97:
         c7:30:2f:bf:94:00:ca:fe:ef:45:b3:46:1a:5d:aa:f6:4a:0e:
         16:cb:4c:06:07:30:ea:ba:fb:33:13:aa:84:e0:8c:c7:db:0d:
         57:04:68:18:c7:f4:01:dd:a1:4c:33:09:8f:81:a5:20:c0:7e:
         69:c5:3d:0e
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUSlypsExYzzHtQ7/zay6SG9onO3wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzAzNTZaFw0yNzA1MjEwNzA4NTZaMDMxMTAvBgNV
BAMTKEM3RjI2OTk5NDY1MDc1OTBFNkYzRDY2QUNGRkRBMUUyOUM3NjkxQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRFwCwF8qTQt0hCKE2+yjCraPi
BbEuzqGcLXjuX9d3yT4R2HVGANixUCvjdQtT8XX7z7ygSBO8OplW2WC40vfRRFD2
/w9fUk0SORxWXJNALkJ7xKWssiSwLiLLUaRT1AFsPxTaghxpPVradftq7beN6fHP
0ThUirwndpdLtLTOyHuC/izsNtcUugqZP7GU2jZiz0Nu4X5ANhBGZvTkPZzlFjbz
Pe2YfSoLrpbCKV48L6edeAcu/k5XDmVYA7kSrCQ6DI7tjN7h+ATH7+5fqB601Mgi
f1IzUSU2Ni6RHjOj3Ww2GjSZ4ONV4k1ehwQ6mcJ/BRRe4DlitDosd3m5jznxAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUx/JpmUZQdZDm89Zqz/2h4px2ka4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MzcyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqmujANBgkqhkiG9w0BAQsFAAOCAQEAAdBg
Xb11HSmdO35rRV8+IIoN6Kblzg24JQUCs8YtAdw8ajB9OLhakEVeNpT1Bl9E28kN
xflh0KT7CMbeZ1VKgygFH9EWPKiPvOtTc9A+2r5V+UkzPqCxozPmLnoMmQhPREUc
hxfCR7FTfN82B7sMrTkb6p6/W9PyDQo62EIRfBRWUiWMGPxIa/E29GxgGZDsAWtz
KPPtVRclqyKhxf5h2Lj/nYHYAOMwIslmIsGK44wRhACwMkxTDi66weUQw6IMaPyM
QI+XxzAvv5QAyv7vRbNGGl2q9koOFstMBgcw6rr7MxOqhOCMx9sNVwRoGMf0Ad2h
TDMJj4GlIMB+acU9Dg==
-----END CERTIFICATE-----