Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144918.roa
File:                     AS144918.roa (raw, json)
Hash identifier:          qjwC+JYq5m24BBjCYZ/TD42IOtDvRHNcA8gS0Qxt+9I=
Subject key identifier:   E9:01:9B:E0:14:17:89:7C:28:40:B7:4E:DB:D2:B2:16:2F:D0:77:9E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       64E89EF1E9374ABC5EB23CF741C447018AC7D81A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144918.roa
Signing time:             Mon 25 May 2026 03:19:18 +0000
ROA not before:           Mon 25 May 2026 03:14:18 +0000
ROA not after:            Mon 24 May 2027 03:19:18 +0000
asID:                     144918
IP address blocks:        240a:a8dc::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:e8:9e:f1:e9:37:4a:bc:5e:b2:3c:f7:41:c4:47:01:8a:c7:d8:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:18 2026 GMT
            Not After : May 24 03:19:18 2027 GMT
        Subject: CN=E9019BE01417897C2840B74EDBD2B2162FD0779E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:6e:10:74:8c:f6:c0:a7:d7:ed:74:3b:12:ca:
                    f1:21:5d:2c:eb:58:82:25:00:ea:67:9a:19:e3:9c:
                    70:3c:37:d6:d3:86:aa:d4:b1:92:31:bf:39:a7:74:
                    fe:fc:f7:03:b0:42:e5:3f:4d:e5:ad:42:56:18:5f:
                    de:1c:be:c5:d8:ed:bd:61:51:fe:da:18:01:9b:5d:
                    d2:90:9d:8f:d3:85:e9:87:96:c0:ae:f1:f7:2d:96:
                    a3:6c:3d:81:c3:b9:25:d2:cc:81:ae:88:d8:81:cf:
                    0b:b0:6d:4f:68:c7:ca:86:28:0c:5e:54:ba:34:ab:
                    7f:d7:d9:4d:35:18:fe:87:a2:ce:a9:6c:45:c7:07:
                    76:c1:a9:06:4b:97:19:f5:b8:a6:23:52:14:88:5c:
                    33:0b:69:b1:48:3d:4a:0b:32:66:61:e6:eb:2a:2c:
                    c6:4e:80:d1:3e:ed:82:f5:6d:14:33:0d:45:ed:e4:
                    37:8c:91:94:4e:7f:22:f6:02:10:01:55:37:02:40:
                    85:d3:65:da:3e:4d:cd:4f:e4:ce:bd:86:0d:fd:2f:
                    27:9d:87:14:0e:5c:1a:2c:c8:c1:64:85:0b:0e:db:
                    78:aa:a0:9d:47:55:69:18:d9:0a:12:42:10:0d:8b:
                    ec:57:b8:12:d0:fc:4f:03:81:b6:98:91:e7:ab:8b:
                    8c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:01:9B:E0:14:17:89:7C:28:40:B7:4E:DB:D2:B2:16:2F:D0:77:9E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144918.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a8dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:3d:30:df:94:6c:43:b0:02:74:6c:cf:9f:a1:62:7b:63:e3:
         8a:c1:25:8b:3d:9b:d4:a7:be:8e:15:d8:cb:82:b4:15:31:e3:
         0d:14:4d:ca:73:93:62:16:ec:1c:65:59:10:cd:d4:da:c9:0c:
         26:8c:c5:58:1b:b0:ed:c1:7d:8f:44:19:3e:b8:e8:64:17:42:
         cb:af:f8:8d:b3:f6:68:6a:13:ca:15:e2:98:4d:f5:df:e4:39:
         ca:c6:b9:20:dd:e9:fd:a0:b0:64:a1:57:4f:53:b9:53:bf:ed:
         01:4a:b2:e3:d7:39:b6:d7:30:fe:4c:a8:5d:02:3b:2c:1c:cf:
         93:98:31:28:0c:cf:eb:d8:ad:bc:8e:e6:cb:78:b8:00:3f:8d:
         cc:80:1a:37:fd:a7:8c:5f:54:3d:10:06:b4:67:50:76:a1:60:
         01:3b:af:ef:94:c9:42:8d:bf:8c:18:d2:ef:1e:4e:0a:3e:e9:
         4e:bd:7a:e6:e6:56:0a:2d:e5:51:51:65:e1:53:ba:25:ab:2a:
         23:d4:3f:6d:55:59:5e:da:6f:7e:34:66:46:46:d3:96:db:ab:
         0b:28:c6:b4:d7:c4:aa:14:6f:2a:08:1c:4b:e3:ec:11:7c:61:
         b8:71:77:10:d8:c4:57:09:3e:95:ad:ee:97:96:c0:06:50:6d:
         4d:7b:1f:f4
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUZOie8ek3Srxesjz3QcRHAYrH2BowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMzE0MThaFw0yNzA1MjQwMzE5MThaMDMxMTAvBgNV
BAMTKEU5MDE5QkUwMTQxNzg5N0MyODQwQjc0RURCRDJCMjE2MkZEMDc3OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4bhB0jPbAp9ftdDsSyvEhXSzr
WIIlAOpnmhnjnHA8N9bThqrUsZIxvzmndP789wOwQuU/TeWtQlYYX94cvsXY7b1h
Uf7aGAGbXdKQnY/ThemHlsCu8fctlqNsPYHDuSXSzIGuiNiBzwuwbU9ox8qGKAxe
VLo0q3/X2U01GP6Hos6pbEXHB3bBqQZLlxn1uKYjUhSIXDMLabFIPUoLMmZh5usq
LMZOgNE+7YL1bRQzDUXt5DeMkZROfyL2AhABVTcCQIXTZdo+Tc1P5M69hg39Lyed
hxQOXBosyMFkhQsO23iqoJ1HVWkY2QoSQhANi+xXuBLQ/E8DgbaYkeeri4wDAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU6QGb4BQXiXwoQLdO29KyFi/Qd54wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0OTE4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqo3DANBgkqhkiG9w0BAQsFAAOCAQEAsD0w
35RsQ7ACdGzPn6Fie2PjisEliz2b1Ke+jhXYy4K0FTHjDRRNynOTYhbsHGVZEM3U
2skMJozFWBuw7cF9j0QZPrjoZBdCy6/4jbP2aGoTyhXimE313+Q5ysa5IN3p/aCw
ZKFXT1O5U7/tAUqy49c5ttcw/kyoXQI7LBzPk5gxKAzP69itvI7my3i4AD+NzIAa
N/2njF9UPRAGtGdQdqFgATuv75TJQo2/jBjS7x5OCj7pTr165uZWCi3lUVFl4VO6
JasqI9Q/bVVZXtpvfjRmRkbTlturCyjGtNfEqhRvKggcS+PsEXxhuHF3ENjEVwk+
la3ul5bABlBtTXsf9A==
-----END CERTIFICATE-----