Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144738.roa
File:                     AS144738.roa (raw, json)
Hash identifier:          hiXIhzmtIenkh3W+fCVc+MwKb+JIRac8aZ34+c+oMeI=
Subject key identifier:   76:09:93:92:C3:6E:BE:62:D2:D9:56:8C:94:0A:F3:42:A0:26:75:A0
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       ED8DA5A1F71AA9F857CD8DDC32C568E3524D9F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144738.roa
Signing time:             Fri 22 May 2026 04:27:03 +0000
ROA not before:           Fri 22 May 2026 04:22:03 +0000
ROA not after:            Fri 21 May 2027 04:27:03 +0000
asID:                     144738
IP address blocks:        240a:a828::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ed:8d:a5:a1:f7:1a:a9:f8:57:cd:8d:dc:32:c5:68:e3:52:4d:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:22:03 2026 GMT
            Not After : May 21 04:27:03 2027 GMT
        Subject: CN=76099392C36EBE62D2D9568C940AF342A02675A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:39:26:bc:6f:d6:41:68:c6:f8:cd:d2:52:09:
                    8a:d9:ea:40:76:5a:bd:50:fa:b4:27:c1:0c:80:b2:
                    ae:48:17:c0:7b:8b:9b:79:93:a6:ea:70:03:c4:ee:
                    35:67:c9:1a:43:cf:d7:24:f3:b2:7f:b2:84:0e:99:
                    b9:92:9a:74:46:83:18:80:c3:99:06:3d:05:44:4e:
                    48:f7:58:96:35:bd:62:18:7c:8f:e6:6c:53:19:b1:
                    10:d0:b5:c2:0d:1d:2c:23:4d:25:cf:88:4e:14:96:
                    1a:ad:9e:fc:f6:5b:06:fb:b5:ef:8a:11:2c:fd:aa:
                    cb:df:21:26:18:ae:9d:56:97:86:20:a7:d5:00:99:
                    e2:87:be:91:0f:0c:c3:ec:5b:a5:91:c6:25:93:22:
                    83:9f:0d:3c:c2:10:9d:1f:89:15:51:f5:b8:ea:13:
                    e4:ef:98:bc:ba:b9:fc:ed:af:b2:e2:33:49:2e:b2:
                    8e:ea:2e:ea:ff:73:d5:ac:21:a7:e7:1d:c1:0f:e1:
                    aa:24:6f:1e:ee:cc:bb:13:52:e1:c7:63:60:59:27:
                    6f:71:d0:44:29:a1:bc:cc:54:dc:77:b2:3d:b5:65:
                    62:34:0b:ed:af:5b:44:61:c8:64:57:71:b8:b1:a7:
                    00:2e:fe:4e:04:e9:d4:bc:7f:55:ec:d1:b9:11:15:
                    43:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:09:93:92:C3:6E:BE:62:D2:D9:56:8C:94:0A:F3:42:A0:26:75:A0
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a828::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:36:90:91:32:8d:9c:c1:1e:67:49:1a:36:b1:fc:c2:36:47:
         30:9f:8a:c2:16:f0:70:52:7e:e5:8f:26:69:a3:a6:ec:86:7c:
         ce:83:06:80:86:55:7d:68:17:dc:62:fa:4d:b3:26:c3:ec:d8:
         a0:8b:69:e8:5a:b3:16:14:5d:9d:69:d9:02:43:4d:d1:13:f9:
         5b:e2:3b:ad:71:e2:05:89:20:45:fc:dd:5b:c4:cf:fa:89:e1:
         e7:5f:bf:19:ad:f9:6a:dd:51:54:6f:51:c0:0d:14:2a:f0:be:
         e7:38:df:04:4f:67:28:5d:de:90:d5:56:89:e5:a3:80:5c:55:
         03:d4:c9:fe:3d:35:89:17:07:42:b0:51:b7:fe:3a:0f:77:2b:
         27:a1:c8:5e:02:00:57:45:51:aa:9c:73:dc:01:b0:fa:b7:fb:
         3c:3e:83:6f:82:2a:45:c2:54:2b:50:01:91:c4:1c:43:28:67:
         fd:f4:4b:53:09:ed:c8:83:49:76:36:2e:81:0b:98:51:e8:d2:
         a3:7d:90:39:c3:d8:ee:66:d4:0f:4e:af:d8:a2:9b:1a:1f:88:
         cc:bd:b9:34:01:58:13:ec:bc:e1:dc:46:2c:4c:d7:c1:51:51:
         a9:d0:de:c8:b2:e3:b4:16:34:1a:9e:77:e3:df:bf:ea:44:ed:
         1d:82:2e:03
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUAO2NpaH3Gqn4V82N3DLFaONSTZ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDIyMDNaFw0yNzA1MjEwNDI3MDNaMDMxMTAvBgNV
BAMTKDc2MDk5MzkyQzM2RUJFNjJEMkQ5NTY4Qzk0MEFGMzQyQTAyNjc1QTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNOSa8b9ZBaMb4zdJSCYrZ6kB2
Wr1Q+rQnwQyAsq5IF8B7i5t5k6bqcAPE7jVnyRpDz9ck87J/soQOmbmSmnRGgxiA
w5kGPQVETkj3WJY1vWIYfI/mbFMZsRDQtcINHSwjTSXPiE4Ulhqtnvz2Wwb7te+K
ESz9qsvfISYYrp1Wl4Ygp9UAmeKHvpEPDMPsW6WRxiWTIoOfDTzCEJ0fiRVR9bjq
E+TvmLy6ufztr7LiM0kuso7qLur/c9WsIafnHcEP4aokbx7uzLsTUuHHY2BZJ29x
0EQpobzMVNx3sj21ZWI0C+2vW0RhyGRXcbixpwAu/k4E6dS8f1Xs0bkRFUMFAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUdgmTksNuvmLS2VaMlArzQqAmdaAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqoKDANBgkqhkiG9w0BAQsFAAOCAQEAsTaQ
kTKNnMEeZ0kaNrH8wjZHMJ+KwhbwcFJ+5Y8maaOm7IZ8zoMGgIZVfWgX3GL6TbMm
w+zYoItp6FqzFhRdnWnZAkNN0RP5W+I7rXHiBYkgRfzdW8TP+onh51+/Ga35at1R
VG9RwA0UKvC+5zjfBE9nKF3ekNVWieWjgFxVA9TJ/j01iRcHQrBRt/46D3crJ6HI
XgIAV0VRqpxz3AGw+rf7PD6Db4IqRcJUK1ABkcQcQyhn/fRLUwntyINJdjYugQuY
UejSo32QOcPY7mbUD06v2KKbGh+IzL25NAFYE+y84dxGLEzXwVFRqdDeyLLjtBY0
Gp5349+/6kTtHYIuAw==
-----END CERTIFICATE-----