Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144569.roa
File:                     AS144569.roa (raw, json)
Hash identifier:          1gzrni/2DngI6W+d8Ke/WtkyKwkO3SGSjhPd/6Xk5A4=
Subject key identifier:   D0:A5:CA:ED:30:DD:B0:4D:27:1F:9D:41:BA:1D:40:BF:77:5B:6D:D5
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       155FD2B883C7DFCD9903F11006B3717DC315B753
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144569.roa
Signing time:             Fri 22 May 2026 01:50:09 +0000
ROA not before:           Fri 22 May 2026 01:45:09 +0000
ROA not after:            Fri 21 May 2027 01:50:09 +0000
asID:                     144569
IP address blocks:        240a:a77f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:5f:d2:b8:83:c7:df:cd:99:03:f1:10:06:b3:71:7d:c3:15:b7:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:09 2026 GMT
            Not After : May 21 01:50:09 2027 GMT
        Subject: CN=D0A5CAED30DDB04D271F9D41BA1D40BF775B6DD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:08:3f:40:f6:75:85:4a:7f:dc:ff:4e:89:62:
                    f4:e7:a4:84:3d:d6:84:d9:32:9c:27:32:b1:95:b3:
                    5f:38:5d:c8:f3:63:fc:70:62:f7:f7:66:d5:64:f9:
                    77:92:73:71:86:70:55:65:41:0a:01:38:52:d5:78:
                    8e:76:c1:3a:e2:0a:07:53:38:68:b5:8c:91:ec:99:
                    df:eb:ab:cf:a9:d2:eb:a3:3b:5c:c4:a3:66:cd:84:
                    b9:5c:a2:b3:c3:e4:f3:e4:d3:58:c0:ec:9a:d1:e0:
                    83:83:4f:73:bc:e1:11:4e:5e:99:5b:67:95:ac:9a:
                    b1:ce:5d:0e:ec:42:aa:d5:85:8e:be:55:9b:28:8f:
                    45:39:93:00:97:2f:43:63:a6:6b:b5:aa:a4:8f:06:
                    05:79:32:19:c2:d5:fc:ad:57:ae:88:d2:fb:d1:80:
                    00:d3:3e:57:11:77:f7:e7:01:14:43:2d:df:bb:d0:
                    ad:09:21:eb:79:14:7c:68:04:26:ec:32:02:cb:76:
                    39:03:0b:88:8b:39:e0:57:10:39:e0:8e:37:d5:45:
                    0e:df:d5:c5:4a:d1:e5:79:60:b6:85:81:1d:7c:a7:
                    2f:be:8e:4e:60:40:f2:f3:e8:fc:ff:4d:ce:59:7d:
                    7f:0b:34:87:a5:a5:0a:23:2b:d3:35:90:08:3f:b3:
                    e0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A5:CA:ED:30:DD:B0:4D:27:1F:9D:41:BA:1D:40:BF:77:5B:6D:D5
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144569.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a77f::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:ea:d2:db:47:3f:b8:d4:75:0b:8e:e7:cd:2b:c3:90:b6:75:
         28:bd:b4:c1:0a:c8:2e:9a:c6:03:10:da:1c:3d:30:87:91:15:
         01:0b:4d:52:50:8a:1c:6d:50:81:61:45:84:06:de:71:8e:e0:
         e5:cc:e3:61:b7:dc:dd:81:c8:36:be:31:a4:b0:c4:75:3f:d6:
         7a:3e:0d:3e:f6:67:c1:2a:97:82:d4:37:5f:22:c5:ad:e3:fc:
         53:db:b5:0c:e3:2a:36:bb:46:27:f4:c8:d7:db:7f:1d:09:a0:
         26:01:5b:99:5f:82:23:37:11:c9:36:ec:ff:de:ea:21:83:31:
         9d:8a:68:82:62:8c:96:4b:1a:fe:ae:0f:6e:ec:71:06:7e:bb:
         f0:64:b5:3c:8f:e1:59:53:77:a8:26:a5:bb:ac:86:81:ee:f9:
         2b:ac:8b:59:ee:66:0e:c7:07:e6:5e:a0:6d:db:da:3a:15:58:
         41:3c:b9:89:45:04:4c:a1:38:73:a7:1b:a4:3d:01:8b:a6:a5:
         87:c1:45:d1:1e:d6:5a:01:fa:ef:3f:8e:f6:14:5a:82:dc:0a:
         a5:8a:74:60:e8:60:66:a0:d5:eb:1b:d7:9d:d7:d8:e1:a2:2d:
         a8:1c:59:46:9a:19:17:2c:74:23:74:48:35:7f:85:ac:e7:97:
         f4:6f:4a:fc
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUFV/SuIPH382ZA/EQBrNxfcMVt1MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMTQ1MDlaFw0yNzA1MjEwMTUwMDlaMDMxMTAvBgNV
BAMTKEQwQTVDQUVEMzBEREIwNEQyNzFGOUQ0MUJBMUQ0MEJGNzc1QjZERDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuCD9A9nWFSn/c/06JYvTnpIQ9
1oTZMpwnMrGVs184XcjzY/xwYvf3ZtVk+XeSc3GGcFVlQQoBOFLVeI52wTriCgdT
OGi1jJHsmd/rq8+p0uujO1zEo2bNhLlcorPD5PPk01jA7JrR4IODT3O84RFOXplb
Z5WsmrHOXQ7sQqrVhY6+VZsoj0U5kwCXL0Njpmu1qqSPBgV5MhnC1fytV66I0vvR
gADTPlcRd/fnARRDLd+70K0JIet5FHxoBCbsMgLLdjkDC4iLOeBXEDngjjfVRQ7f
1cVK0eV5YLaFgR18py++jk5gQPLz6Pz/Tc5ZfX8LNIelpQojK9M1kAg/s+BDAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU0KXK7TDdsE0nH51Buh1Av3dbbdUwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NTY5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqnfzANBgkqhkiG9w0BAQsFAAOCAQEAgurS
20c/uNR1C47nzSvDkLZ1KL20wQrILprGAxDaHD0wh5EVAQtNUlCKHG1QgWFFhAbe
cY7g5czjYbfc3YHINr4xpLDEdT/Wej4NPvZnwSqXgtQ3XyLFreP8U9u1DOMqNrtG
J/TI19t/HQmgJgFbmV+CIzcRyTbs/97qIYMxnYpogmKMlksa/q4PbuxxBn678GS1
PI/hWVN3qCalu6yGge75K6yLWe5mDscH5l6gbdvaOhVYQTy5iUUETKE4c6cbpD0B
i6alh8FF0R7WWgH67z+O9hRagtwKpYp0YOhgZqDV6xvXndfY4aItqBxZRpoZFyx0
I3RINX+FrOeX9G9K/A==
-----END CERTIFICATE-----