Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144912.roa
File:                     AS144912.roa (raw, json)
Hash identifier:          GFrVlnwWKQqesYk33cU+SGpEHDhzaC5qY0JD1r28EMo=
Subject key identifier:   DE:3C:B7:D4:69:7D:CF:FC:99:58:6D:69:4E:2F:62:5A:64:BA:72:19
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7F7C4AB34EAA63C76C1B348E7D455C2D59DF9723
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144912.roa
Signing time:             Tue 26 May 2026 03:16:55 +0000
ROA not before:           Tue 26 May 2026 03:11:55 +0000
ROA not after:            Tue 25 May 2027 03:16:55 +0000
asID:                     144912
IP address blocks:        240a:a8d6::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:7c:4a:b3:4e:aa:63:c7:6c:1b:34:8e:7d:45:5c:2d:59:df:97:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:11:55 2026 GMT
            Not After : May 25 03:16:55 2027 GMT
        Subject: CN=DE3CB7D4697DCFFC99586D694E2F625A64BA7219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bc:3a:a1:fe:ad:34:91:a0:38:d5:93:aa:e6:
                    ea:8b:86:b0:97:ce:53:74:fa:b7:89:dc:86:ff:86:
                    b8:d2:72:e5:e0:68:2d:a1:54:72:77:6b:f2:45:2f:
                    fb:c3:e3:c1:55:b7:b3:36:35:b4:d9:11:cb:e9:4b:
                    59:c7:1b:5d:fd:de:8d:32:6c:d0:5b:69:2f:a5:df:
                    41:af:93:2f:9f:ac:94:28:54:3d:da:c7:11:72:7e:
                    3e:d6:92:ed:17:69:46:9c:d5:80:24:87:49:bc:51:
                    1a:5a:d2:9f:f6:0c:b0:9a:0c:35:91:22:e7:b3:cc:
                    ae:5a:e5:d9:4a:ab:ba:02:c4:a9:f1:8e:86:c2:ce:
                    a9:b4:8d:68:fa:03:18:ac:69:a3:f2:7c:46:8b:27:
                    83:25:c4:22:18:76:f8:d9:34:0d:bd:e0:06:66:f6:
                    bb:3c:34:5a:38:97:37:7c:98:38:97:fe:af:49:9f:
                    ae:1b:49:d5:98:d0:2e:4e:46:97:b3:82:c4:50:1e:
                    ed:f0:0e:fc:b9:ca:b8:d3:a1:a7:85:e1:4b:65:f8:
                    e8:cf:47:d3:b0:12:1f:a1:39:ac:1f:9e:6f:c2:0f:
                    f4:a6:ac:d3:8c:22:f5:11:e1:e9:11:b6:f7:cb:14:
                    72:21:42:68:30:87:f8:40:ab:eb:f7:28:16:5c:bf:
                    a9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:3C:B7:D4:69:7D:CF:FC:99:58:6D:69:4E:2F:62:5A:64:BA:72:19
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144912.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a8d6::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:dc:25:b1:dc:db:6c:eb:ca:c0:ab:74:92:62:ed:ea:71:dc:
         34:05:d5:b6:b3:da:b4:92:ec:3d:bd:6f:79:5b:9f:4d:67:41:
         bf:ee:ba:61:28:f5:5b:88:bc:f5:8b:ce:19:2b:bd:12:4c:de:
         64:db:a4:06:1a:44:29:c5:0a:3e:27:79:3d:2f:6c:72:00:81:
         3d:71:f0:ac:a5:86:f6:b6:67:62:2a:23:94:7f:0e:97:b2:a5:
         07:f5:9e:f9:de:7a:75:52:41:04:6a:62:d0:d5:7f:fa:5c:71:
         32:8c:31:da:cc:79:e3:f1:37:66:f5:57:1d:08:2c:87:2e:ec:
         3b:76:2c:fd:44:06:88:7b:69:ff:c5:86:22:e5:b8:67:dc:6c:
         49:c4:5e:c5:0c:63:24:d3:e2:4b:44:ba:80:6f:8a:74:57:87:
         07:e8:1d:11:a8:f8:c0:a7:94:13:bb:e0:9a:4e:4a:ec:95:b0:
         4b:d3:cf:db:6e:6c:8c:9f:11:4b:45:10:c1:b2:54:07:bd:67:
         6a:12:8f:83:b4:e9:68:6a:7f:5c:4e:12:cc:fa:c7:1e:5f:47:
         aa:54:1e:8d:b2:64:26:60:0f:84:5f:17:48:d4:b8:40:4d:39:
         34:5e:42:1f:96:15:25:79:1d:1f:46:90:a4:7d:77:82:3d:ed:
         f9:f8:a6:73
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUf3xKs06qY8dsGzSOfUVcLVnflyMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMzExNTVaFw0yNzA1MjUwMzE2NTVaMDMxMTAvBgNV
BAMTKERFM0NCN0Q0Njk3RENGRkM5OTU4NkQ2OTRFMkY2MjVBNjRCQTcyMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCivDqh/q00kaA41ZOq5uqLhrCX
zlN0+reJ3Ib/hrjScuXgaC2hVHJ3a/JFL/vD48FVt7M2NbTZEcvpS1nHG1393o0y
bNBbaS+l30Gvky+frJQoVD3axxFyfj7Wku0XaUac1YAkh0m8URpa0p/2DLCaDDWR
IuezzK5a5dlKq7oCxKnxjobCzqm0jWj6AxisaaPyfEaLJ4MlxCIYdvjZNA294AZm
9rs8NFo4lzd8mDiX/q9Jn64bSdWY0C5ORpezgsRQHu3wDvy5yrjToaeF4Utl+OjP
R9OwEh+hOawfnm/CD/SmrNOMIvUR4ekRtvfLFHIhQmgwh/hAq+v3KBZcv6lDAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU3jy31Gl9z/yZWG1pTi9iWmS6chkwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0OTEyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqo1jANBgkqhkiG9w0BAQsFAAOCAQEAV9wl
sdzbbOvKwKt0kmLt6nHcNAXVtrPatJLsPb1veVufTWdBv+66YSj1W4i89YvOGSu9
EkzeZNukBhpEKcUKPid5PS9scgCBPXHwrKWG9rZnYiojlH8Ol7KlB/We+d56dVJB
BGpi0NV/+lxxMowx2sx54/E3ZvVXHQgshy7sO3Ys/UQGiHtp/8WGIuW4Z9xsScRe
xQxjJNPiS0S6gG+KdFeHB+gdEaj4wKeUE7vgmk5K7JWwS9PP225sjJ8RS0UQwbJU
B71nahKPg7TpaGp/XE4SzPrHHl9HqlQejbJkJmAPhF8XSNS4QE05NF5CH5YVJXkd
H0aQpH13gj3t+fimcw==
-----END CERTIFICATE-----