Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144759.roa
File:                     AS144759.roa (raw, json)
Hash identifier:          d9SA/PtsMYW4rJqSPuZBm/UlLUwGh8oGFTmMGAlLW5E=
Subject key identifier:   4E:92:B7:5F:24:92:CA:E2:B3:21:43:DC:BD:00:2B:8C:30:3D:17:CB
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       39A8D861B086EDEF18FEB4FB1D809EADF5F4E8B8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144759.roa
Signing time:             Tue 26 May 2026 06:30:34 +0000
ROA not before:           Tue 26 May 2026 06:25:34 +0000
ROA not after:            Tue 25 May 2027 06:30:34 +0000
asID:                     144759
IP address blocks:        240a:a83d::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a8:d8:61:b0:86:ed:ef:18:fe:b4:fb:1d:80:9e:ad:f5:f4:e8:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:34 2026 GMT
            Not After : May 25 06:30:34 2027 GMT
        Subject: CN=4E92B75F2492CAE2B32143DCBD002B8C303D17CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:75:c7:ae:99:7d:50:b3:c4:ad:aa:8b:78:e7:
                    82:8a:2c:8e:2b:4f:00:69:1b:7e:ab:50:ec:4c:9b:
                    a7:da:3c:e0:1e:4c:07:d2:6e:6e:be:79:dd:1e:31:
                    51:bb:20:23:b9:bb:fc:27:b8:3d:23:f5:60:75:37:
                    a0:7b:ce:8d:c3:4e:2b:9e:dd:02:1d:dd:e7:37:62:
                    ee:7c:66:3b:9b:2c:fb:d1:58:26:04:11:7c:81:30:
                    35:3b:d2:0b:04:d2:6f:86:aa:86:d1:be:5a:99:77:
                    a2:95:8e:dd:ed:ca:b3:aa:8c:1c:49:a2:13:76:0e:
                    85:51:a8:c1:6b:db:5f:18:0c:71:74:42:bd:7e:a9:
                    aa:b6:7a:39:bf:ea:d8:d3:da:ba:cb:1b:a8:44:19:
                    fd:32:cf:c7:c0:04:f5:ee:9c:61:5a:7c:18:5b:cc:
                    2f:52:2d:46:c2:e7:b6:14:9c:64:d7:76:5f:91:9b:
                    bc:71:2b:0b:94:db:a3:f5:d1:4e:c7:73:85:e0:a8:
                    47:44:44:77:1a:6a:e5:c8:e8:8a:ad:e0:fb:f6:39:
                    c5:5a:ae:24:c4:2f:6f:1e:27:67:96:8a:7b:9c:0c:
                    10:bb:ae:2d:43:a4:d9:2d:db:f4:dc:9c:68:a6:4a:
                    86:39:ab:a7:bd:17:b6:53:2b:b6:31:39:14:de:34:
                    97:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:92:B7:5F:24:92:CA:E2:B3:21:43:DC:BD:00:2B:8C:30:3D:17:CB
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144759.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a83d::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:3c:cf:2d:43:f1:be:66:c1:c5:07:10:49:6a:b8:b0:f9:ec:
         bd:28:0a:c7:79:53:e0:21:86:13:27:b9:b4:1b:a4:4d:8a:a3:
         0e:ca:7d:08:f7:68:20:cd:81:2f:ec:98:a0:25:81:cf:eb:e0:
         bd:a5:4c:bb:24:fb:1e:d2:fd:32:8e:d0:57:f0:3e:1d:fc:32:
         73:9c:c4:bd:cd:55:19:78:eb:13:10:58:48:ee:fe:ef:45:fc:
         f5:6b:0a:d5:02:55:36:14:9b:a0:c4:36:87:59:a5:f9:e1:3a:
         bd:69:c2:18:77:de:f9:51:1d:8a:d9:bc:42:5f:9d:e5:8d:70:
         a8:a8:6b:f8:38:77:59:11:5b:61:2f:d2:2a:04:23:7e:88:45:
         ac:26:4d:f1:77:c8:67:5c:07:85:83:e2:25:84:d0:db:f9:c8:
         90:af:7b:aa:c4:67:4c:81:f0:e2:d4:f7:6c:52:93:01:66:b1:
         87:88:b9:e6:b1:33:0d:08:1e:a7:fb:8b:56:9f:f3:b5:b9:5f:
         11:97:07:54:e0:1b:e0:e4:cb:2d:15:7d:61:39:43:54:7a:a3:
         c3:ec:bc:e9:4b:6e:04:68:5c:18:08:8c:6f:e4:b3:c9:54:30:
         76:9f:29:b3:3b:0c:28:0d:74:dc:eb:9a:83:15:9c:c5:c6:5a:
         d9:0f:e9:95
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUOajYYbCG7e8Y/rT7HYCerfX06LgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjI1MzRaFw0yNzA1MjUwNjMwMzRaMDMxMTAvBgNV
BAMTKDRFOTJCNzVGMjQ5MkNBRTJCMzIxNDNEQ0JEMDAyQjhDMzAzRDE3Q0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVdceumX1Qs8Stqot454KKLI4r
TwBpG36rUOxMm6faPOAeTAfSbm6+ed0eMVG7ICO5u/wnuD0j9WB1N6B7zo3DTiue
3QId3ec3Yu58ZjubLPvRWCYEEXyBMDU70gsE0m+GqobRvlqZd6KVjt3tyrOqjBxJ
ohN2DoVRqMFr218YDHF0Qr1+qaq2ejm/6tjT2rrLG6hEGf0yz8fABPXunGFafBhb
zC9SLUbC57YUnGTXdl+Rm7xxKwuU26P10U7Hc4XgqEdERHcaauXI6Iqt4Pv2OcVa
riTEL28eJ2eWinucDBC7ri1DpNkt2/TcnGimSoY5q6e9F7ZTK7YxORTeNJclAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUTpK3XySSyuKzIUPcvQArjDA9F8swHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NzU5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqoPTANBgkqhkiG9w0BAQsFAAOCAQEAJjzP
LUPxvmbBxQcQSWq4sPnsvSgKx3lT4CGGEye5tBukTYqjDsp9CPdoIM2BL+yYoCWB
z+vgvaVMuyT7HtL9Mo7QV/A+Hfwyc5zEvc1VGXjrExBYSO7+70X89WsK1QJVNhSb
oMQ2h1ml+eE6vWnCGHfe+VEditm8Ql+d5Y1wqKhr+Dh3WRFbYS/SKgQjfohFrCZN
8XfIZ1wHhYPiJYTQ2/nIkK97qsRnTIHw4tT3bFKTAWaxh4i55rEzDQgep/uLVp/z
tblfEZcHVOAb4OTLLRV9YTlDVHqjw+y86UtuBGhcGAiMb+SzyVQwdp8pszsMKA10
3OuagxWcxcZa2Q/plQ==
-----END CERTIFICATE-----