Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144505.roa
File:                     AS144505.roa (raw, json)
Hash identifier:          7H1r0+hI34+cWLxx9e8/O9kBheSp9P9wCtJ10O5jr+U=
Subject key identifier:   A7:80:F9:5E:D1:42:03:89:EE:87:08:61:42:18:7E:B2:3F:79:60:9B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       25F1EB09D95BB046B8D2C1F623C6F40D7BDCD43E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144505.roa
Signing time:             Tue 26 May 2026 01:13:28 +0000
ROA not before:           Tue 26 May 2026 01:08:28 +0000
ROA not after:            Tue 25 May 2027 01:13:28 +0000
asID:                     144505
IP address blocks:        240a:a73f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f1:eb:09:d9:5b:b0:46:b8:d2:c1:f6:23:c6:f4:0d:7b:dc:d4:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:08:28 2026 GMT
            Not After : May 25 01:13:28 2027 GMT
        Subject: CN=A780F95ED1420389EE87086142187EB23F79609B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:19:f0:b3:69:de:f9:76:18:af:d1:f0:d7:0c:
                    7d:7b:74:98:9b:06:09:1c:af:d3:bc:4e:ea:90:d9:
                    b9:0f:93:e8:ea:a8:86:2a:10:33:41:74:1d:8d:f5:
                    66:f3:4c:ff:70:9c:3f:0f:b2:68:4b:64:a8:78:df:
                    b6:c4:69:c2:50:d2:49:12:33:47:13:80:39:5e:7c:
                    be:35:e9:ef:61:67:b5:40:7b:70:88:c0:2e:41:22:
                    f7:a1:de:5a:bf:2c:3a:f2:48:98:32:a5:6e:41:b5:
                    5a:f9:a9:90:f3:27:2f:cf:c9:90:b6:1c:85:61:73:
                    28:f5:9a:ab:d7:86:59:b5:22:82:ff:cf:c4:c6:94:
                    96:1c:b4:70:ff:f1:30:1f:fd:47:7a:b7:2e:ac:eb:
                    dc:88:39:6d:5c:22:6f:01:aa:7c:06:3d:52:16:6d:
                    1a:65:ca:d4:38:65:79:b4:54:ac:75:d2:64:f2:f7:
                    bf:35:ab:c3:2c:00:d4:31:de:11:3e:ac:80:24:a0:
                    5a:5c:ec:34:32:be:35:16:8e:92:39:2d:fe:60:72:
                    7a:76:68:7c:79:4d:e5:44:c4:8d:93:8f:9e:cf:92:
                    4e:2b:bc:18:83:9f:af:03:bf:84:46:f1:43:53:61:
                    73:78:34:54:06:a1:48:ed:76:03:c8:44:5a:c0:5e:
                    e1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:80:F9:5E:D1:42:03:89:EE:87:08:61:42:18:7E:B2:3F:79:60:9B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144505.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a73f::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:73:89:b7:c1:dc:43:3d:74:60:c3:9d:b2:82:25:53:e4:a8:
         6e:e7:a3:85:94:67:c2:91:94:e4:30:ae:fb:99:3f:b3:82:57:
         da:54:ab:f3:e8:26:93:fd:d8:03:1e:3c:23:5d:8c:50:8c:4c:
         db:99:50:8d:fd:c8:2d:58:65:4d:45:12:2e:7e:bd:fe:59:66:
         72:24:01:ef:37:38:0a:e5:8c:31:a0:a1:74:e1:17:72:ae:4a:
         72:ae:11:14:f4:a5:fd:3c:08:f7:4b:b3:98:58:8b:27:16:b5:
         ff:95:10:b5:44:2f:71:8e:b3:49:5c:ae:f9:a1:8e:a2:08:6d:
         fe:19:2d:5f:aa:ca:8e:9b:1a:73:7c:eb:88:88:bf:ae:8e:14:
         e0:ae:48:ba:e5:ac:71:ca:ca:7d:cc:de:bb:f8:c9:1e:c4:32:
         fb:83:5a:09:42:bc:4f:55:72:d8:6d:75:84:47:fa:ee:ea:87:
         eb:26:22:69:87:35:15:e1:2a:61:fc:fa:b4:5d:e1:12:63:1b:
         63:f1:3e:0b:ae:5e:0d:6d:63:12:ca:4b:d3:fc:b9:01:d0:bd:
         62:a9:48:ee:3e:82:30:c8:a9:0d:79:4e:0c:3a:0d:f8:a2:08:
         3c:7c:ae:c4:21:37:da:06:5c:40:27:a9:a1:84:0b:54:c4:19:
         56:24:db:f6
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUJfHrCdlbsEa40sH2I8b0DXvc1D4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMTA4MjhaFw0yNzA1MjUwMTEzMjhaMDMxMTAvBgNV
BAMTKEE3ODBGOTVFRDE0MjAzODlFRTg3MDg2MTQyMTg3RUIyM0Y3OTYwOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMGfCzad75dhiv0fDXDH17dJib
Bgkcr9O8TuqQ2bkPk+jqqIYqEDNBdB2N9WbzTP9wnD8PsmhLZKh437bEacJQ0kkS
M0cTgDlefL416e9hZ7VAe3CIwC5BIveh3lq/LDrySJgypW5BtVr5qZDzJy/PyZC2
HIVhcyj1mqvXhlm1IoL/z8TGlJYctHD/8TAf/Ud6ty6s69yIOW1cIm8BqnwGPVIW
bRplytQ4ZXm0VKx10mTy9781q8MsANQx3hE+rIAkoFpc7DQyvjUWjpI5Lf5gcnp2
aHx5TeVExI2Tj57Pkk4rvBiDn68Dv4RG8UNTYXN4NFQGoUjtdgPIRFrAXuHNAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUp4D5XtFCA4nuhwhhQhh+sj95YJswHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NTA1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqnPzANBgkqhkiG9w0BAQsFAAOCAQEANHOJ
t8HcQz10YMOdsoIlU+SobuejhZRnwpGU5DCu+5k/s4JX2lSr8+gmk/3YAx48I12M
UIxM25lQjf3ILVhlTUUSLn69/llmciQB7zc4CuWMMaChdOEXcq5Kcq4RFPSl/TwI
90uzmFiLJxa1/5UQtUQvcY6zSVyu+aGOoght/hktX6rKjpsac3zriIi/ro4U4K5I
uuWsccrKfczeu/jJHsQy+4NaCUK8T1Vy2G11hEf67uqH6yYiaYc1FeEqYfz6tF3h
EmMbY/E+C65eDW1jEspL0/y5AdC9YqlI7j6CMMipDXlODDoN+KIIPHyuxCE32gZc
QCepoYQLVMQZViTb9g==
-----END CERTIFICATE-----