Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144423.roa
File:                     AS144423.roa (raw, json)
Hash identifier:          FSFKxAh+ug+EmV/p/rwg/NomFC7TZUiGKFU4jZgHxy0=
Subject key identifier:   9D:94:7F:8C:7D:8F:6C:CE:7F:F6:D7:84:43:92:DA:10:2F:98:BE:6E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       52DBAC708AAD3A9E0486CBBFC4CFD1026F3DAC2A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144423.roa
Signing time:             Fri 22 May 2026 01:50:46 +0000
ROA not before:           Fri 22 May 2026 01:45:46 +0000
ROA not after:            Fri 21 May 2027 01:50:46 +0000
asID:                     144423
IP address blocks:        240a:a6ed::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:db:ac:70:8a:ad:3a:9e:04:86:cb:bf:c4:cf:d1:02:6f:3d:ac:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:46 2026 GMT
            Not After : May 21 01:50:46 2027 GMT
        Subject: CN=9D947F8C7D8F6CCE7FF6D7844392DA102F98BE6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:53:26:7f:12:9c:ba:9b:4c:7a:50:07:13:1a:
                    f2:bb:25:ba:d4:0f:cb:53:ef:3e:df:65:52:03:fe:
                    b6:28:f9:2f:fd:24:82:42:ce:5d:7a:20:14:9d:86:
                    6b:1f:6d:71:01:81:7a:56:3b:b6:ed:39:ab:34:13:
                    50:98:be:90:dc:ac:2c:56:d7:60:80:27:b0:93:59:
                    ea:f5:77:86:07:84:3d:15:da:f6:cc:ff:cf:1c:c8:
                    e3:68:20:6c:15:8f:3a:33:7d:4d:fe:7e:09:6e:f5:
                    cd:d1:1f:1f:12:2f:d2:e4:dd:e8:0c:bd:b1:ef:a8:
                    6f:8a:3d:62:58:17:82:d7:ff:bc:0a:18:04:ac:f8:
                    42:62:10:57:ec:f4:7e:dc:df:88:3e:75:4d:f5:7e:
                    a1:df:22:a4:eb:be:64:ba:fd:0f:37:3e:28:20:5d:
                    a2:e6:c6:fd:c6:22:87:a5:27:e8:18:92:aa:d5:94:
                    af:75:64:13:6d:51:8d:a0:ca:ac:17:01:5e:82:d3:
                    7b:9f:02:b7:d1:c3:a5:c3:11:60:08:00:87:3c:e9:
                    1c:06:e4:00:e9:ea:2c:6d:bf:c8:05:85:26:72:0f:
                    8d:09:12:bb:1a:eb:7a:bc:a2:07:13:79:8b:3f:d2:
                    12:9d:87:75:2b:87:4e:5b:c0:d7:4e:d4:c4:41:9a:
                    df:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:94:7F:8C:7D:8F:6C:CE:7F:F6:D7:84:43:92:DA:10:2F:98:BE:6E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144423.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a6ed::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:c1:56:e8:04:9a:1c:f8:93:bb:53:3f:b8:3e:b8:1c:be:46:
         d0:d1:dd:c5:de:8a:fd:be:97:c7:6b:38:52:bc:42:4f:5f:18:
         ac:73:78:28:e3:b2:6d:51:85:cd:21:e4:1b:14:67:b1:3f:64:
         88:fb:33:0a:e7:65:22:2f:d2:e1:c4:b9:f6:80:ce:cc:53:b0:
         64:87:f2:b9:2d:c0:35:15:17:d9:7a:65:de:83:11:0b:01:c4:
         30:9d:71:fe:90:17:20:2d:86:47:a3:c0:25:cd:fd:a9:63:f0:
         10:c1:49:5f:35:d7:32:d5:f6:21:5c:3a:b7:6d:3e:b7:2f:e8:
         09:0f:29:88:07:55:5a:9a:a2:44:d5:c8:d0:7a:0f:5f:92:40:
         b6:61:1f:7e:84:79:2d:6a:16:2d:cf:3f:0c:67:ef:ed:d2:1d:
         5f:89:7d:b8:7f:f0:a0:45:83:c7:2e:46:7e:b7:71:3f:16:9d:
         b5:ed:68:ca:23:a5:5c:e1:2d:a8:a7:6f:2d:de:58:9d:06:e3:
         4d:c2:f8:cb:04:3d:33:1a:09:2b:5b:16:db:5a:9a:3d:f4:4b:
         9a:cb:0c:1d:19:06:10:53:89:ad:26:49:9c:da:da:eb:8a:bd:
         8a:01:c6:6b:08:f7:ba:96:19:d0:6c:59:d6:b1:3b:0f:00:50:
         7c:b3:9d:d1
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUUtuscIqtOp4Ehsu/xM/RAm89rCowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMTQ1NDZaFw0yNzA1MjEwMTUwNDZaMDMxMTAvBgNV
BAMTKDlEOTQ3RjhDN0Q4RjZDQ0U3RkY2RDc4NDQzOTJEQTEwMkY5OEJFNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcUyZ/Epy6m0x6UAcTGvK7JbrU
D8tT7z7fZVID/rYo+S/9JIJCzl16IBSdhmsfbXEBgXpWO7btOas0E1CYvpDcrCxW
12CAJ7CTWer1d4YHhD0V2vbM/88cyONoIGwVjzozfU3+fglu9c3RHx8SL9Lk3egM
vbHvqG+KPWJYF4LX/7wKGASs+EJiEFfs9H7c34g+dU31fqHfIqTrvmS6/Q83Pigg
XaLmxv3GIoelJ+gYkqrVlK91ZBNtUY2gyqwXAV6C03ufArfRw6XDEWAIAIc86RwG
5ADp6ixtv8gFhSZyD40JErsa63q8ogcTeYs/0hKdh3Urh05bwNdO1MRBmt/5AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUnZR/jH2PbM5/9teEQ5LaEC+Yvm4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NDIzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqm7TANBgkqhkiG9w0BAQsFAAOCAQEAl8FW
6ASaHPiTu1M/uD64HL5G0NHdxd6K/b6Xx2s4UrxCT18YrHN4KOOybVGFzSHkGxRn
sT9kiPszCudlIi/S4cS59oDOzFOwZIfyuS3ANRUX2Xpl3oMRCwHEMJ1x/pAXIC2G
R6PAJc39qWPwEMFJXzXXMtX2IVw6t20+ty/oCQ8piAdVWpqiRNXI0HoPX5JAtmEf
foR5LWoWLc8/DGfv7dIdX4l9uH/woEWDxy5GfrdxPxadte1oyiOlXOEtqKdvLd5Y
nQbjTcL4ywQ9MxoJK1sW21qaPfRLmssMHRkGEFOJrSZJnNra64q9igHGawj3upYZ
0GxZ1rE7DwBQfLOd0Q==
-----END CERTIFICATE-----