Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144704.roa
File:                     AS144704.roa (raw, json)
Hash identifier:          xCpkunOweMnXs16Ht4as3E+fjPcsLeWj0Gy6o8CGi7A=
Subject key identifier:   41:66:A5:E5:0E:C2:EE:DA:BD:FF:0F:BB:B3:7E:11:B9:16:65:D1:84
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4EA4009BB902A93C568B2BE73C439BED648D5046
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144704.roa
Signing time:             Mon 25 May 2026 01:38:00 +0000
ROA not before:           Mon 25 May 2026 01:33:00 +0000
ROA not after:            Mon 24 May 2027 01:38:00 +0000
asID:                     144704
IP address blocks:        240a:a806::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:a4:00:9b:b9:02:a9:3c:56:8b:2b:e7:3c:43:9b:ed:64:8d:50:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:00 2026 GMT
            Not After : May 24 01:38:00 2027 GMT
        Subject: CN=4166A5E50EC2EEDABDFF0FBBB37E11B91665D184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:03:88:11:3c:c8:16:f4:f6:5b:61:00:c2:ad:
                    da:da:80:4f:20:f0:36:cd:d8:48:b2:fc:de:78:75:
                    e7:d5:0a:54:d4:d2:7f:aa:49:b3:0e:2d:34:9d:03:
                    d1:dd:2d:57:13:ef:ca:aa:ea:b6:cc:e6:ed:40:00:
                    00:a1:ec:80:10:2b:27:e3:17:85:0d:7b:b1:bf:4c:
                    3b:37:df:e7:17:0b:16:d9:e7:27:b3:33:e9:6f:11:
                    60:47:6f:56:0e:cc:54:b7:04:b2:4c:51:7f:de:bf:
                    8e:34:13:2e:17:87:48:f9:0c:23:46:fb:16:6e:4f:
                    a8:32:a7:04:a4:a3:21:4f:e4:aa:1f:e3:b8:c4:26:
                    94:b6:81:49:4a:d7:c3:1d:60:8a:29:67:00:77:ed:
                    6c:61:44:3a:bf:9d:62:b7:6a:a5:f1:9e:5c:2e:7c:
                    b1:70:b7:8c:b9:ec:aa:5d:4a:65:09:fc:1b:1e:10:
                    08:1c:24:c6:6a:ea:0c:3b:c5:9e:fa:3d:1f:a0:54:
                    a1:92:b1:5c:00:14:82:a2:15:b8:88:50:0a:f8:8a:
                    bd:d6:a3:31:61:a0:09:37:eb:77:0f:a8:b3:be:12:
                    05:87:b0:2f:88:f9:b8:87:d1:3f:12:97:3c:a5:07:
                    d3:1c:97:8c:61:d9:50:eb:5a:a9:57:1b:01:c6:1c:
                    e5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:66:A5:E5:0E:C2:EE:DA:BD:FF:0F:BB:B3:7E:11:B9:16:65:D1:84
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144704.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a806::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:05:cb:22:fb:70:11:df:62:09:2e:41:51:cb:54:40:e7:33:
         80:72:71:76:8a:42:02:22:09:46:4b:61:71:e6:7f:6e:99:08:
         30:b8:c4:e4:b1:56:8e:7c:3a:44:e0:5b:c3:bf:77:17:c4:57:
         d5:d2:85:74:0d:19:19:50:6c:5c:70:b3:99:d1:2a:81:fb:79:
         71:c7:d1:ab:d2:e3:5b:6c:f1:2e:4e:0d:d8:03:94:13:45:cb:
         21:95:04:07:ae:46:23:7e:3d:36:97:ae:c6:49:42:35:68:0e:
         42:b6:8d:bb:80:ef:30:1c:63:b7:e9:22:68:05:29:b2:17:71:
         20:a7:b9:7b:77:f6:22:9f:2b:40:9a:9d:ec:fa:aa:0e:2e:5e:
         83:65:01:13:78:18:62:9a:51:d7:f7:85:f2:49:b4:74:c7:56:
         c1:fa:a0:97:4c:af:77:25:a6:5e:3f:f4:d0:6c:b4:d0:f4:d0:
         fd:ee:02:ea:8d:c1:17:65:4f:67:0e:f2:9b:f4:92:6c:3d:15:
         5e:2a:f2:39:0c:db:5a:7d:25:75:33:a4:cc:26:28:db:4e:ed:
         b2:82:6b:8b:a5:3d:aa:e4:f6:cc:e6:69:25:0b:e5:92:e9:66:
         54:b5:23:e1:d8:02:7b:be:68:14:2a:dd:49:fb:c9:71:99:ba:
         5b:52:b1:20
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUTqQAm7kCqTxWiyvnPEOb7WSNUEYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTMzMDBaFw0yNzA1MjQwMTM4MDBaMDMxMTAvBgNV
BAMTKDQxNjZBNUU1MEVDMkVFREFCREZGMEZCQkIzN0UxMUI5MTY2NUQxODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpA4gRPMgW9PZbYQDCrdragE8g
8DbN2Eiy/N54defVClTU0n+qSbMOLTSdA9HdLVcT78qq6rbM5u1AAACh7IAQKyfj
F4UNe7G/TDs33+cXCxbZ5yezM+lvEWBHb1YOzFS3BLJMUX/ev440Ey4Xh0j5DCNG
+xZuT6gypwSkoyFP5Kof47jEJpS2gUlK18MdYIopZwB37WxhRDq/nWK3aqXxnlwu
fLFwt4y57KpdSmUJ/BseEAgcJMZq6gw7xZ76PR+gVKGSsVwAFIKiFbiIUAr4ir3W
ozFhoAk363cPqLO+EgWHsC+I+biH0T8SlzylB9Mcl4xh2VDrWqlXGwHGHOUtAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUQWal5Q7C7tq9/w+7s34RuRZl0YQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NzA0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqoBjANBgkqhkiG9w0BAQsFAAOCAQEAUwXL
IvtwEd9iCS5BUctUQOczgHJxdopCAiIJRkthceZ/bpkIMLjE5LFWjnw6ROBbw793
F8RX1dKFdA0ZGVBsXHCzmdEqgft5ccfRq9LjW2zxLk4N2AOUE0XLIZUEB65GI349
NpeuxklCNWgOQraNu4DvMBxjt+kiaAUpshdxIKe5e3f2Ip8rQJqd7PqqDi5eg2UB
E3gYYppR1/eF8km0dMdWwfqgl0yvdyWmXj/00Gy00PTQ/e4C6o3BF2VPZw7ym/SS
bD0VXiryOQzbWn0ldTOkzCYo207tsoJri6U9quT2zOZpJQvlkulmVLUj4dgCe75o
FCrdSfvJcZm6W1KxIA==
-----END CERTIFICATE-----