Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144856.roa
File:                     AS144856.roa (raw, json)
Hash identifier:          ZruTLiP5Pq5OkVhNPjPMTMmPec98iJ+TA3nL6UYoD14=
Subject key identifier:   55:F6:0E:0E:7F:8C:19:94:E1:8E:6F:8A:A3:72:D9:5F:81:A6:03:F8
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6A5C371A17204D40ADEAF12525B4BB3B649F31C2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144856.roa
Signing time:             Mon 25 May 2026 06:28:24 +0000
ROA not before:           Mon 25 May 2026 06:23:24 +0000
ROA not after:            Mon 24 May 2027 06:28:24 +0000
asID:                     144856
IP address blocks:        240a:a89e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:5c:37:1a:17:20:4d:40:ad:ea:f1:25:25:b4:bb:3b:64:9f:31:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:24 2026 GMT
            Not After : May 24 06:28:24 2027 GMT
        Subject: CN=55F60E0E7F8C1994E18E6F8AA372D95F81A603F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:dc:37:14:a5:c3:24:de:73:56:cb:8d:a8:08:
                    95:ef:9b:fc:74:20:e0:ec:6a:5b:10:3b:2e:e6:fa:
                    dc:d1:e1:59:10:df:b3:71:cc:fa:a2:8a:cb:14:8c:
                    94:7d:48:41:94:3f:3a:6d:1e:7c:85:be:68:1c:27:
                    3c:dd:31:09:46:c1:12:d2:f7:52:74:bf:79:f8:cd:
                    1d:5d:5f:e1:dd:7b:ad:8c:06:93:5a:ff:42:1e:2a:
                    81:93:49:b2:4e:21:68:0f:34:f7:28:28:b7:54:40:
                    d7:29:56:a4:08:f4:39:13:ff:ca:36:c9:a5:ad:42:
                    b3:87:57:6b:9c:50:8e:bb:38:bf:69:d3:3e:ce:a3:
                    e3:ec:3a:bd:dd:ea:5d:5a:24:7e:ac:d6:28:37:a0:
                    4c:f0:f8:3c:ba:50:a5:fd:d0:42:a6:1a:6c:be:52:
                    6b:c5:bb:28:8c:f4:40:57:50:d8:ad:1b:64:4e:74:
                    83:b5:31:34:32:b3:17:7b:eb:46:ea:ea:5e:af:69:
                    ac:64:11:d3:62:1e:0c:c0:b9:37:ce:0a:53:48:31:
                    6c:db:5d:a0:19:ed:0e:5f:c1:a4:2c:71:3d:ef:1c:
                    db:f1:cd:4a:bc:c3:c0:92:0d:ef:ff:c9:65:e5:29:
                    68:45:7c:2c:fc:ad:49:7c:b9:9e:f3:5c:ea:0c:22:
                    b7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F6:0E:0E:7F:8C:19:94:E1:8E:6F:8A:A3:72:D9:5F:81:A6:03:F8
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144856.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a89e::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:2f:f9:0e:2f:70:bc:07:ee:df:29:50:42:50:3f:bd:74:e9:
         e1:1d:7c:16:56:c0:30:60:22:51:a8:97:41:3d:01:00:38:ec:
         b7:ca:1a:f2:91:5d:f5:c9:79:e5:44:ee:ee:ce:51:29:19:63:
         fa:9e:17:9f:0a:16:1b:b5:1a:02:0a:ed:ce:c1:e5:6f:a8:cd:
         d3:23:a6:61:e9:3a:f7:57:3e:66:b5:be:96:9c:66:c0:f3:65:
         f2:0e:67:1b:fa:03:0a:72:0b:fb:b0:ec:03:45:62:04:e1:8b:
         a3:04:3c:05:22:f1:2d:2a:9e:bf:f1:c5:83:76:75:42:4a:f1:
         30:3f:b2:cf:f6:33:08:8f:ab:a8:4e:49:ef:1f:7e:6e:27:86:
         4f:11:f5:1e:98:e4:28:cb:45:d4:9e:8d:8b:47:07:6d:96:1d:
         b4:7d:d0:cd:31:39:19:d1:a7:e2:f4:0b:a1:70:94:22:36:e3:
         f3:31:3d:22:d2:4c:39:ca:67:17:0e:80:b8:b1:4f:6a:da:b3:
         65:78:15:03:47:9c:46:56:c0:7f:42:4c:d7:b8:9a:96:97:e9:
         1f:62:19:67:be:80:cd:27:21:1d:31:69:96:7b:d3:53:95:62:
         5b:f3:ea:c9:19:55:3f:60:50:b1:8d:2a:46:ba:68:39:0d:d4:
         38:c4:48:73
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUalw3GhcgTUCt6vElJbS7O2SfMcIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjIzMjRaFw0yNzA1MjQwNjI4MjRaMDMxMTAvBgNV
BAMTKDU1RjYwRTBFN0Y4QzE5OTRFMThFNkY4QUEzNzJEOTVGODFBNjAzRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc3DcUpcMk3nNWy42oCJXvm/x0
IODsalsQOy7m+tzR4VkQ37NxzPqiissUjJR9SEGUPzptHnyFvmgcJzzdMQlGwRLS
91J0v3n4zR1dX+Hde62MBpNa/0IeKoGTSbJOIWgPNPcoKLdUQNcpVqQI9DkT/8o2
yaWtQrOHV2ucUI67OL9p0z7Oo+PsOr3d6l1aJH6s1ig3oEzw+Dy6UKX90EKmGmy+
UmvFuyiM9EBXUNitG2ROdIO1MTQysxd760bq6l6vaaxkEdNiHgzAuTfOClNIMWzb
XaAZ7Q5fwaQscT3vHNvxzUq8w8CSDe//yWXlKWhFfCz8rUl8uZ7zXOoMIrerAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUVfYODn+MGZThjm+Ko3LZX4GmA/gwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0ODU2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqonjANBgkqhkiG9w0BAQsFAAOCAQEARC/5
Di9wvAfu3ylQQlA/vXTp4R18FlbAMGAiUaiXQT0BADjst8oa8pFd9cl55UTu7s5R
KRlj+p4XnwoWG7UaAgrtzsHlb6jN0yOmYek691c+ZrW+lpxmwPNl8g5nG/oDCnIL
+7DsA0ViBOGLowQ8BSLxLSqev/HFg3Z1QkrxMD+yz/YzCI+rqE5J7x9+bieGTxH1
HpjkKMtF1J6Ni0cHbZYdtH3QzTE5GdGn4vQLoXCUIjbj8zE9ItJMOcpnFw6AuLFP
atqzZXgVA0ecRlbAf0JM17ialpfpH2IZZ76AzSchHTFplnvTU5ViW/PqyRlVP2BQ
sY0qRrpoOQ3UOMRIcw==
-----END CERTIFICATE-----