Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144504.roa
File:                     AS144504.roa (raw, json)
Hash identifier:          KZoq/q7xumcU0h/D8zSFOwnTmAmn/iE/mGEHfUqCWlA=
Subject key identifier:   B1:0F:77:C3:DA:F2:F4:8B:C2:BF:AD:B4:B4:F4:88:DC:01:B1:9C:C6
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       79DB35F81453537CA2811C85E38DF5549B56FE37
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144504.roa
Signing time:             Fri 22 May 2026 06:05:35 +0000
ROA not before:           Fri 22 May 2026 06:00:35 +0000
ROA not after:            Fri 21 May 2027 06:05:35 +0000
asID:                     144504
IP address blocks:        240a:a73e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:db:35:f8:14:53:53:7c:a2:81:1c:85:e3:8d:f5:54:9b:56:fe:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:00:35 2026 GMT
            Not After : May 21 06:05:35 2027 GMT
        Subject: CN=B10F77C3DAF2F48BC2BFADB4B4F488DC01B19CC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d3:d2:15:b8:72:60:0e:37:69:85:69:34:f0:
                    47:fc:72:d5:54:4f:15:52:38:28:89:f8:e4:df:3d:
                    0d:3a:4b:60:ef:f3:bf:d5:ae:04:8e:21:29:44:6a:
                    4a:c2:44:8b:27:6b:1b:6b:d4:2d:6f:a0:e7:70:3f:
                    b1:c8:2b:ce:13:43:9f:9a:64:4c:4a:b4:ae:1a:8d:
                    a4:d5:12:84:45:dd:ce:37:d5:82:d3:2c:81:d5:92:
                    1a:d4:2e:1a:ec:c1:8a:78:7a:35:54:57:0d:21:bf:
                    e8:4a:f7:29:1f:e0:fb:19:d4:fc:58:ab:30:76:bf:
                    46:3e:3a:6a:dc:a9:40:2a:9a:af:91:84:bf:f9:20:
                    e3:af:e0:e6:35:81:60:3d:be:37:86:90:6a:cc:e1:
                    c6:84:94:7a:1c:a2:ab:ce:57:71:8f:38:f0:0b:f7:
                    36:3e:93:87:7f:cc:56:b4:9e:5b:50:f9:41:b7:5b:
                    3a:b3:d5:fd:be:70:a8:9f:9d:e7:04:97:57:8d:2c:
                    7f:11:c7:c4:6d:58:d2:4c:42:20:a7:ac:e6:e2:73:
                    1d:0c:d6:61:98:e9:90:73:44:33:90:59:1f:f1:d2:
                    69:95:2a:52:1a:99:f9:64:92:fd:68:e8:e9:0b:68:
                    5a:88:66:13:84:8d:5f:b1:b0:43:b3:83:28:7d:60:
                    0d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:0F:77:C3:DA:F2:F4:8B:C2:BF:AD:B4:B4:F4:88:DC:01:B1:9C:C6
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144504.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a73e::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:ad:92:25:7e:8b:f8:b5:f3:0b:4a:2d:ec:55:b9:e6:0d:c8:
         fb:e3:90:ff:a4:01:74:fa:e2:32:15:13:a2:d4:ea:d2:6f:f5:
         4b:bb:fc:94:08:07:20:54:43:14:2f:b9:34:51:36:41:3f:9a:
         15:6f:70:cb:62:e4:65:2d:3a:da:79:0a:b0:83:fb:01:5e:46:
         56:a7:79:a6:20:e7:c9:ab:86:a0:00:72:46:21:63:08:fe:24:
         9a:41:a1:52:cc:02:f1:d0:32:e2:4c:39:62:36:5b:c7:f8:bc:
         14:6b:92:6a:f0:cf:db:2b:5b:f5:18:c1:90:0e:59:73:4c:53:
         2e:70:32:39:12:45:1e:0b:ce:3a:37:1e:d3:e1:28:a8:0f:d1:
         64:46:1e:ed:d8:58:29:38:53:7d:0e:1e:f8:e9:51:00:a0:77:
         d9:ec:af:2f:0e:aa:97:65:e1:8e:e9:f9:b6:28:90:c3:38:ef:
         f4:67:5f:6d:8e:e1:13:c4:15:60:ea:e0:94:7e:44:40:c8:09:
         dd:f3:4e:1a:10:fb:bf:ed:33:ae:25:82:f3:d3:5e:93:20:ab:
         c9:80:99:d8:ce:33:1a:94:18:59:41:04:1e:c1:4a:47:64:aa:
         4c:9a:b7:81:c3:58:26:d0:30:50:8d:57:73:3b:1b:10:fd:7a:
         e5:11:04:f9
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUeds1+BRTU3yigRyF4431VJtW/jcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjAwMzVaFw0yNzA1MjEwNjA1MzVaMDMxMTAvBgNV
BAMTKEIxMEY3N0MzREFGMkY0OEJDMkJGQURCNEI0RjQ4OERDMDFCMTlDQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV09IVuHJgDjdphWk08Ef8ctVU
TxVSOCiJ+OTfPQ06S2Dv87/VrgSOISlEakrCRIsnaxtr1C1voOdwP7HIK84TQ5+a
ZExKtK4ajaTVEoRF3c431YLTLIHVkhrULhrswYp4ejVUVw0hv+hK9ykf4PsZ1PxY
qzB2v0Y+OmrcqUAqmq+RhL/5IOOv4OY1gWA9vjeGkGrM4caElHocoqvOV3GPOPAL
9zY+k4d/zFa0nltQ+UG3Wzqz1f2+cKifnecEl1eNLH8Rx8RtWNJMQiCnrObicx0M
1mGY6ZBzRDOQWR/x0mmVKlIamflkkv1o6OkLaFqIZhOEjV+xsEOzgyh9YA2dAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUsQ93w9ry9IvCv620tPSI3AGxnMYwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NTA0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqnPjANBgkqhkiG9w0BAQsFAAOCAQEAka2S
JX6L+LXzC0ot7FW55g3I++OQ/6QBdPriMhUTotTq0m/1S7v8lAgHIFRDFC+5NFE2
QT+aFW9wy2LkZS062nkKsIP7AV5GVqd5piDnyauGoAByRiFjCP4kmkGhUswC8dAy
4kw5YjZbx/i8FGuSavDP2ytb9RjBkA5Zc0xTLnAyORJFHgvOOjce0+EoqA/RZEYe
7dhYKThTfQ4e+OlRAKB32eyvLw6ql2Xhjun5tiiQwzjv9GdfbY7hE8QVYOrglH5E
QMgJ3fNOGhD7v+0zriWC89NekyCryYCZ2M4zGpQYWUEEHsFKR2SqTJq3gcNYJtAw
UI1XczsbEP165REE+Q==
-----END CERTIFICATE-----