Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144472.roa
File:                     AS144472.roa (raw, json)
Hash identifier:          xzx4okIwVAkURCq0dhx+vyE84RxxjHwzc78BPwXS/EY=
Subject key identifier:   32:8B:DB:A6:85:75:1B:D5:D4:7B:80:C9:5C:0A:68:26:30:C8:4D:D4
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3E9288B59A33915A146BEC44470F27AFFC7501D0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144472.roa
Signing time:             Tue 26 May 2026 01:13:29 +0000
ROA not before:           Tue 26 May 2026 01:08:29 +0000
ROA not after:            Tue 25 May 2027 01:13:29 +0000
asID:                     144472
IP address blocks:        240a:a71e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:92:88:b5:9a:33:91:5a:14:6b:ec:44:47:0f:27:af:fc:75:01:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:08:29 2026 GMT
            Not After : May 25 01:13:29 2027 GMT
        Subject: CN=328BDBA685751BD5D47B80C95C0A682630C84DD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:91:5b:69:b4:a2:b7:cc:84:8b:10:0c:a4:e2:
                    08:b1:38:0c:c4:b9:5a:3d:5b:75:6b:e4:06:fe:17:
                    d5:34:66:9e:d7:cb:f4:aa:36:26:04:ed:c3:62:c0:
                    c7:05:bd:bc:51:1b:ac:4a:1d:af:9d:1a:e7:c0:bb:
                    5b:9a:99:2e:b1:13:0a:07:d1:5f:14:7d:58:e1:bd:
                    d2:65:f7:b5:1d:04:af:35:5d:9b:48:d5:bd:86:fc:
                    34:a5:3d:d4:9b:37:69:3c:4b:ae:1d:1b:c2:21:1e:
                    2a:76:5e:5b:4f:05:35:5c:d0:a5:59:ee:68:f7:3f:
                    46:a9:3e:db:c7:da:29:71:b6:d9:c6:0d:bb:47:84:
                    f4:fe:86:50:d4:e4:f3:8d:41:f6:c2:f3:03:89:57:
                    ba:a3:1c:33:bd:94:64:af:8e:41:64:d8:37:27:a3:
                    7e:ef:b8:be:3f:ec:a7:ef:a8:1c:3d:01:ce:ec:df:
                    4e:41:d3:11:1a:94:bf:3c:b1:e7:62:9f:3e:d6:9c:
                    46:44:f0:67:2b:3a:48:dd:27:60:7d:02:50:8c:03:
                    da:a6:ab:2b:e4:87:c5:e4:2f:f7:cd:52:76:d1:14:
                    9e:b0:58:89:91:6e:0a:c8:f7:8a:78:12:ff:ba:cc:
                    5d:50:31:ff:a2:4e:01:20:9d:b8:ac:84:57:02:e6:
                    21:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:8B:DB:A6:85:75:1B:D5:D4:7B:80:C9:5C:0A:68:26:30:C8:4D:D4
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144472.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a71e::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:16:81:07:78:00:26:65:45:12:a0:19:81:7c:05:ea:52:84:
         10:93:32:f2:db:22:b1:34:07:fd:e0:12:3e:94:b1:0d:65:20:
         79:db:b1:57:0b:01:17:24:a7:e6:7e:9c:6b:a2:13:88:59:61:
         68:cb:44:88:95:4c:48:97:0c:4f:7d:9e:b7:df:24:1f:8b:dc:
         e1:c5:55:a8:80:76:ef:99:64:fb:07:46:bb:a5:d4:f8:b5:03:
         ba:85:75:59:3d:40:a8:2b:70:4f:32:96:d7:ab:09:0d:4e:84:
         10:bc:f6:fa:b7:96:59:db:5c:dc:92:ed:af:ad:a4:82:71:97:
         08:5b:3b:dc:11:4c:f6:51:da:52:31:24:4a:7d:88:2e:f3:30:
         6f:09:a7:34:60:02:a2:d9:0c:a6:04:61:cd:bc:3b:fb:ae:f7:
         3a:35:26:bd:77:da:a4:20:cc:75:50:6f:4f:35:7f:a7:b2:cf:
         ef:df:25:60:f3:07:77:dd:29:05:68:bf:64:e2:05:a1:cb:3d:
         e7:9f:e6:5e:84:9e:21:b3:34:95:55:1e:b4:00:bc:f9:fe:d0:
         6c:7c:d2:eb:74:be:d9:ce:9a:27:a0:76:7e:37:98:a2:71:67:
         09:e6:b3:34:8a:f1:96:53:21:1a:61:3b:d4:78:63:91:54:40:
         b5:11:4a:3a
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUPpKItZozkVoUa+xERw8nr/x1AdAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMTA4MjlaFw0yNzA1MjUwMTEzMjlaMDMxMTAvBgNV
BAMTKDMyOEJEQkE2ODU3NTFCRDVENDdCODBDOTVDMEE2ODI2MzBDODRERDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpkVtptKK3zISLEAyk4gixOAzE
uVo9W3Vr5Ab+F9U0Zp7Xy/SqNiYE7cNiwMcFvbxRG6xKHa+dGufAu1uamS6xEwoH
0V8UfVjhvdJl97UdBK81XZtI1b2G/DSlPdSbN2k8S64dG8IhHip2XltPBTVc0KVZ
7mj3P0apPtvH2ilxttnGDbtHhPT+hlDU5PONQfbC8wOJV7qjHDO9lGSvjkFk2Dcn
o37vuL4/7KfvqBw9Ac7s305B0xEalL88sedinz7WnEZE8GcrOkjdJ2B9AlCMA9qm
qyvkh8XkL/fNUnbRFJ6wWImRbgrI94p4Ev+6zF1QMf+iTgEgnbishFcC5iG5AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUMovbpoV1G9XUe4DJXApoJjDITdQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NDcyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqnHjANBgkqhkiG9w0BAQsFAAOCAQEAlxaB
B3gAJmVFEqAZgXwF6lKEEJMy8tsisTQH/eASPpSxDWUgeduxVwsBFySn5n6ca6IT
iFlhaMtEiJVMSJcMT32et98kH4vc4cVVqIB275lk+wdGu6XU+LUDuoV1WT1AqCtw
TzKW16sJDU6EELz2+reWWdtc3JLtr62kgnGXCFs73BFM9lHaUjEkSn2ILvMwbwmn
NGACotkMpgRhzbw7+673OjUmvXfapCDMdVBvTzV/p7LP798lYPMHd90pBWi/ZOIF
ocs955/mXoSeIbM0lVUetAC8+f7QbHzS63S+2c6aJ6B2fjeYonFnCeazNIrxllMh
GmE71HhjkVRAtRFKOg==
-----END CERTIFICATE-----