Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144811.roa
File:                     AS144811.roa (raw, json)
Hash identifier:          NGeItAA1GBwMd3noCM2NVTX7exlCC3jsHp3L9RaidQg=
Subject key identifier:   7A:FD:02:76:E0:E3:5A:43:D2:9D:8C:B7:AD:C6:02:54:A5:0E:F0:6B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4D941411C2AED67620388AEC46410BE91393D959
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144811.roa
Signing time:             Tue 26 May 2026 03:17:10 +0000
ROA not before:           Tue 26 May 2026 03:12:10 +0000
ROA not after:            Tue 25 May 2027 03:17:10 +0000
asID:                     144811
IP address blocks:        240a:a871::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:94:14:11:c2:ae:d6:76:20:38:8a:ec:46:41:0b:e9:13:93:d9:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:12:10 2026 GMT
            Not After : May 25 03:17:10 2027 GMT
        Subject: CN=7AFD0276E0E35A43D29D8CB7ADC60254A50EF06B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:eb:9d:75:32:06:1f:94:51:7e:ab:73:07:a5:
                    90:eb:4e:5e:86:e8:ff:1d:31:a1:3d:81:ba:d3:b0:
                    a9:d4:a6:e4:37:cd:25:34:38:c6:54:28:1e:35:54:
                    8f:02:24:88:6b:a3:d5:d1:a8:43:19:eb:90:30:22:
                    d5:48:35:56:d0:a7:3c:32:c2:4d:ca:a6:17:16:a9:
                    04:48:5a:8a:de:9d:e7:a6:ed:ca:67:f4:26:4f:c7:
                    25:6f:fe:7a:5f:dc:b3:42:09:3f:21:13:07:38:06:
                    7a:41:2c:41:b6:64:56:2b:64:e8:95:6a:1d:8c:f7:
                    3d:dd:41:17:94:a8:4e:56:a2:a6:d0:e3:30:37:97:
                    4c:8d:36:de:5c:48:69:f5:86:65:d5:da:4e:8a:03:
                    cd:2d:e0:a6:86:f0:ff:37:b0:73:53:86:a3:d9:dc:
                    4e:b0:17:7a:4f:04:8b:fe:b6:92:78:74:e6:42:d7:
                    c9:bd:0d:2e:43:ac:10:2b:08:b9:5d:ac:57:64:99:
                    b4:bb:1f:81:31:17:c5:69:c2:90:70:b6:7e:92:c7:
                    66:ba:32:9f:98:5a:cb:94:6d:a9:cd:7c:b8:52:81:
                    1b:2f:64:12:6f:54:1b:0e:7b:5b:fd:e5:39:b6:83:
                    f6:a6:75:a0:78:91:87:16:7d:23:f9:26:49:ac:73:
                    20:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:FD:02:76:E0:E3:5A:43:D2:9D:8C:B7:AD:C6:02:54:A5:0E:F0:6B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144811.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a871::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:d8:5a:20:cb:aa:ab:c1:ed:cc:1f:74:1e:20:48:de:95:39:
         37:38:7a:10:22:5a:ce:d9:01:4b:c4:fa:fb:61:81:a2:d2:2c:
         5b:31:06:41:f1:bb:c9:88:9b:7b:03:16:3c:46:d4:f7:77:c2:
         e3:29:88:f5:7c:0c:09:f8:97:35:8d:37:1d:95:35:4c:cd:f0:
         43:d7:d8:b3:28:dd:77:3a:b5:10:c2:d3:8f:b5:2a:8d:c7:8f:
         c5:7e:03:4b:20:80:4a:f9:c6:e8:a1:96:fc:2b:70:2f:80:bb:
         c1:a3:fc:70:31:6e:6d:f7:1d:b2:3d:5d:b6:70:b0:0b:6d:4d:
         41:96:9b:ca:4d:d2:a2:45:66:16:df:b8:af:ac:04:da:94:57:
         fb:2c:e1:e9:e6:df:f1:8e:93:df:26:c6:e2:bf:f4:b4:e4:7f:
         7c:e3:df:db:39:22:76:e4:57:2e:6d:b5:34:8a:6a:c6:b4:c2:
         84:ed:35:0d:63:01:fc:37:50:2e:d3:57:6e:2a:01:f2:f7:fc:
         6a:89:e0:96:a4:5c:cf:d1:bc:9f:34:49:3a:eb:a7:8c:b6:df:
         37:8d:74:11:1c:83:01:fe:08:55:e9:be:14:bf:e5:92:48:8c:
         a5:93:13:b9:c1:c1:fd:8f:1b:91:ac:b8:8d:28:be:d7:0c:6b:
         28:21:4c:db
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUTZQUEcKu1nYgOIrsRkEL6ROT2VkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMzEyMTBaFw0yNzA1MjUwMzE3MTBaMDMxMTAvBgNV
BAMTKDdBRkQwMjc2RTBFMzVBNDNEMjlEOENCN0FEQzYwMjU0QTUwRUYwNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC96511MgYflFF+q3MHpZDrTl6G
6P8dMaE9gbrTsKnUpuQ3zSU0OMZUKB41VI8CJIhro9XRqEMZ65AwItVINVbQpzwy
wk3KphcWqQRIWoreneem7cpn9CZPxyVv/npf3LNCCT8hEwc4BnpBLEG2ZFYrZOiV
ah2M9z3dQReUqE5WoqbQ4zA3l0yNNt5cSGn1hmXV2k6KA80t4KaG8P83sHNThqPZ
3E6wF3pPBIv+tpJ4dOZC18m9DS5DrBArCLldrFdkmbS7H4ExF8VpwpBwtn6Sx2a6
Mp+YWsuUbanNfLhSgRsvZBJvVBsOe1v95Tm2g/amdaB4kYcWfSP5JkmscyBBAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUev0CduDjWkPSnYy3rcYCVKUO8GswHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0ODExLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqocTANBgkqhkiG9w0BAQsFAAOCAQEAI9ha
IMuqq8HtzB90HiBI3pU5Nzh6ECJaztkBS8T6+2GBotIsWzEGQfG7yYibewMWPEbU
93fC4ymI9XwMCfiXNY03HZU1TM3wQ9fYsyjddzq1EMLTj7UqjcePxX4DSyCASvnG
6KGW/CtwL4C7waP8cDFubfcdsj1dtnCwC21NQZabyk3SokVmFt+4r6wE2pRX+yzh
6ebf8Y6T3ybG4r/0tOR/fOPf2zkiduRXLm21NIpqxrTChO01DWMB/DdQLtNXbioB
8vf8aonglqRcz9G8nzRJOuunjLbfN410ERyDAf4IVem+FL/lkkiMpZMTucHB/Y8b
kay4jSi+1wxrKCFM2w==
-----END CERTIFICATE-----