Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144666.roa
File:                     AS144666.roa (raw, json)
Hash identifier:          GMz2T7NrxXSVDxX9M7CBIQlX8PPt9l5g2rxifSkDgKU=
Subject key identifier:   35:C6:71:C6:A2:2E:79:25:D2:03:13:1B:C8:F3:F4:9E:A1:8A:3D:F3
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1A4F24F545F797C4F5AABFC52E053EAAE87C5C6F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144666.roa
Signing time:             Mon 25 May 2026 01:38:05 +0000
ROA not before:           Mon 25 May 2026 01:33:05 +0000
ROA not after:            Mon 24 May 2027 01:38:05 +0000
asID:                     144666
IP address blocks:        240a:a7e0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:4f:24:f5:45:f7:97:c4:f5:aa:bf:c5:2e:05:3e:aa:e8:7c:5c:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:05 2026 GMT
            Not After : May 24 01:38:05 2027 GMT
        Subject: CN=35C671C6A22E7925D203131BC8F3F49EA18A3DF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:22:fd:de:5c:9f:13:60:5d:3e:f3:21:37:51:
                    f4:4b:cb:f8:94:21:ed:73:1a:6d:3b:ea:d3:f8:72:
                    ca:34:b1:e1:5f:60:c6:c5:b8:fe:0a:b4:28:d0:b8:
                    4d:97:0c:f7:8b:32:31:58:cc:f4:68:0d:ee:37:e7:
                    76:ef:c9:77:5c:21:a1:80:d5:1d:40:6e:89:86:a4:
                    d9:93:e7:c7:50:57:a5:17:0e:45:2c:05:4f:33:1b:
                    a0:7b:62:1a:30:df:b4:1a:b2:d3:8a:fb:7a:95:4a:
                    6c:a9:da:f0:ad:5d:e2:69:c7:6c:50:c3:16:9f:4c:
                    96:02:c0:ad:20:82:d9:b4:c7:08:26:73:32:70:10:
                    1a:c2:fa:17:5d:f3:fa:1c:80:b9:e5:e8:eb:85:a1:
                    42:4c:7f:93:3e:ed:3e:fb:d4:91:47:72:9b:0f:e1:
                    ee:ab:0b:79:d5:4d:fb:b5:77:3e:f2:82:00:69:7f:
                    d7:3a:a7:10:1d:de:32:6d:c0:f3:6a:ee:64:bf:82:
                    2e:bd:b7:59:49:25:ad:a5:a4:ed:38:06:06:95:51:
                    18:74:0e:f0:0c:f5:ed:fd:c3:fa:92:50:76:69:8a:
                    e3:96:68:dc:4a:40:a7:58:f9:1e:3c:1b:d4:92:8e:
                    33:1e:d3:b2:35:7b:34:1c:cc:d0:c6:35:5d:13:8d:
                    44:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C6:71:C6:A2:2E:79:25:D2:03:13:1B:C8:F3:F4:9E:A1:8A:3D:F3
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144666.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a7e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:2d:cb:4b:cd:48:3e:94:ff:06:2c:3a:37:18:88:5f:08:b2:
         4d:93:74:1d:0a:31:2b:5d:1d:01:56:9c:c1:5d:02:87:52:6e:
         40:d6:6b:16:c6:ff:83:d7:5a:3a:3a:65:cb:ef:ae:b6:08:a2:
         42:af:cb:08:0d:06:73:f4:ea:f6:a5:2c:b9:25:c1:a2:18:8a:
         30:4a:95:5e:8e:fe:70:33:bc:62:34:3f:72:2f:0f:84:d8:57:
         64:ba:e0:fb:fa:4d:b2:4b:14:60:aa:c7:3e:81:f9:2c:b6:a9:
         5c:12:0e:99:89:51:8d:08:f5:bd:1f:dc:e3:75:00:c2:cc:33:
         ec:dc:81:eb:f6:00:40:1f:8b:46:63:8c:99:5b:09:3a:bc:3d:
         c9:67:1d:58:61:69:f8:18:64:69:21:7d:97:ae:b9:03:96:d3:
         7d:51:01:60:da:77:e9:ee:6f:e1:a3:aa:8c:8c:94:f0:09:cb:
         3c:e3:0f:97:7f:bb:40:bb:00:db:f8:1c:51:81:0e:36:4f:ed:
         2b:43:68:9c:2b:dd:4f:23:31:34:ce:d4:74:8e:6f:c4:17:a8:
         e7:10:b0:46:6b:5f:40:fb:17:5e:36:18:39:67:7a:87:f1:e3:
         9c:01:df:ad:1b:e0:32:62:4b:c6:b4:91:a0:03:a1:28:df:64:
         ff:af:66:b2
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUGk8k9UX3l8T1qr/FLgU+quh8XG8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTMzMDVaFw0yNzA1MjQwMTM4MDVaMDMxMTAvBgNV
BAMTKDM1QzY3MUM2QTIyRTc5MjVEMjAzMTMxQkM4RjNGNDlFQTE4QTNERjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLIv3eXJ8TYF0+8yE3UfRLy/iU
Ie1zGm076tP4cso0seFfYMbFuP4KtCjQuE2XDPeLMjFYzPRoDe4353bvyXdcIaGA
1R1AbomGpNmT58dQV6UXDkUsBU8zG6B7Yhow37QastOK+3qVSmyp2vCtXeJpx2xQ
wxafTJYCwK0ggtm0xwgmczJwEBrC+hdd8/ocgLnl6OuFoUJMf5M+7T771JFHcpsP
4e6rC3nVTfu1dz7yggBpf9c6pxAd3jJtwPNq7mS/gi69t1lJJa2lpO04BgaVURh0
DvAM9e39w/qSUHZpiuOWaNxKQKdY+R48G9SSjjMe07I1ezQczNDGNV0TjUTHAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUNcZxxqIueSXSAxMbyPP0nqGKPfMwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NjY2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqn4DANBgkqhkiG9w0BAQsFAAOCAQEAmS3L
S81IPpT/Biw6NxiIXwiyTZN0HQoxK10dAVacwV0Ch1JuQNZrFsb/g9daOjply++u
tgiiQq/LCA0Gc/Tq9qUsuSXBohiKMEqVXo7+cDO8YjQ/ci8PhNhXZLrg+/pNsksU
YKrHPoH5LLapXBIOmYlRjQj1vR/c43UAwswz7NyB6/YAQB+LRmOMmVsJOrw9yWcd
WGFp+BhkaSF9l665A5bTfVEBYNp36e5v4aOqjIyU8AnLPOMPl3+7QLsA2/gcUYEO
Nk/tK0NonCvdTyMxNM7UdI5vxBeo5xCwRmtfQPsXXjYYOWd6h/HjnAHfrRvgMmJL
xrSRoAOhKN9k/69msg==
-----END CERTIFICATE-----