Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144988.roa
File:                     AS144988.roa (raw, json)
Hash identifier:          cEAUP6Oe6o1qTeBujSdktpzUMzqNHu4hcIo2frHmyOs=
Subject key identifier:   09:85:1A:5F:40:8E:9D:F5:73:51:E5:C6:AD:82:AA:52:36:35:D8:86
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       45A1CF444E4C17CB87C4837C2FF8B214634DECE2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144988.roa
Signing time:             Fri 22 May 2026 04:26:54 +0000
ROA not before:           Fri 22 May 2026 04:21:54 +0000
ROA not after:            Fri 21 May 2027 04:26:54 +0000
asID:                     144988
IP address blocks:        240a:a922::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:a1:cf:44:4e:4c:17:cb:87:c4:83:7c:2f:f8:b2:14:63:4d:ec:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:21:54 2026 GMT
            Not After : May 21 04:26:54 2027 GMT
        Subject: CN=09851A5F408E9DF57351E5C6AD82AA523635D886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6a:c6:94:82:7a:9c:1d:62:b6:7d:65:6d:44:
                    14:90:c8:65:09:31:b8:54:c4:5a:17:b9:07:f2:91:
                    86:73:c5:4d:f4:a8:c7:17:9a:6d:59:1d:39:8e:90:
                    6a:6a:19:18:c8:61:bd:1f:43:24:5d:2d:0b:a0:ee:
                    0a:1f:87:48:79:27:c3:55:54:ac:5e:6e:a4:f7:40:
                    f1:73:ad:de:a5:25:0f:a9:95:c7:0f:db:04:f3:38:
                    07:32:03:09:01:a2:6c:73:55:fc:ea:43:94:36:c6:
                    7d:51:82:51:22:25:bb:1b:dd:a6:0e:3f:7c:6c:8b:
                    6f:08:d0:70:4e:46:8f:c6:05:b0:e4:a0:6e:29:ee:
                    14:5c:63:94:18:b7:15:3f:17:b8:49:70:8f:77:cc:
                    a8:4b:a3:59:b6:35:1a:a8:80:ed:fa:54:35:72:f8:
                    a7:2c:b5:62:c6:5f:fa:05:00:ba:09:64:6e:76:ff:
                    44:ea:a1:2a:12:8d:05:b9:c8:23:85:2c:52:b8:ae:
                    39:4f:57:34:7d:92:51:a2:db:2d:42:7d:f8:de:7c:
                    17:9f:a7:c4:79:a3:b8:d4:9b:8b:84:3c:dd:0a:1d:
                    93:3c:18:40:98:eb:30:9c:de:23:bc:07:27:05:72:
                    a8:33:1f:43:8a:59:a0:0f:e1:34:25:74:c1:5c:2c:
                    47:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:85:1A:5F:40:8E:9D:F5:73:51:E5:C6:AD:82:AA:52:36:35:D8:86
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144988.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a922::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:1c:c3:59:3f:3b:cd:3a:67:0c:ef:4a:f4:92:bc:5b:1a:32:
         2b:c9:92:13:ea:1d:7c:7c:f0:c5:6f:90:7e:40:db:ca:03:7c:
         7d:db:a1:3e:29:c9:51:79:c6:95:e8:a3:68:7c:89:57:94:6c:
         b0:ca:be:12:a8:38:d3:ba:48:c5:3f:35:3e:40:72:2f:4e:5d:
         36:8e:8c:02:1b:60:f2:b5:ca:bd:d2:14:7c:e0:ac:6b:4b:3a:
         e9:74:34:9f:a1:3a:f7:d2:69:a7:a6:75:b2:05:04:87:53:55:
         1c:3a:b6:29:e2:42:3b:e0:aa:29:f0:6f:4a:80:0b:21:67:fa:
         54:ce:18:1b:8e:8a:15:a7:29:db:02:2a:93:17:94:7b:03:0f:
         37:b8:2b:5d:a9:7d:99:af:ad:3a:39:44:61:1c:0b:b8:c1:52:
         ce:2e:f5:a9:0d:61:b2:fb:7f:5b:6e:1a:16:9e:90:f5:4a:ba:
         82:ab:b3:09:6c:a8:38:0a:86:1e:11:45:2a:ad:f2:49:3c:c0:
         89:95:62:7c:3d:cd:02:7a:9d:47:45:95:3a:7b:56:76:fd:ca:
         97:86:29:c1:f9:68:5a:31:46:66:dd:cf:74:c5:c8:7f:b3:60:
         1d:c4:c1:23:b0:42:1d:6f:d4:55:28:fe:f5:ef:7d:7c:1f:b4:
         f2:a5:51:d4
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIURaHPRE5MF8uHxIN8L/iyFGNN7OIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDIxNTRaFw0yNzA1MjEwNDI2NTRaMDMxMTAvBgNV
BAMTKDA5ODUxQTVGNDA4RTlERjU3MzUxRTVDNkFEODJBQTUyMzYzNUQ4ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbasaUgnqcHWK2fWVtRBSQyGUJ
MbhUxFoXuQfykYZzxU30qMcXmm1ZHTmOkGpqGRjIYb0fQyRdLQug7gofh0h5J8NV
VKxebqT3QPFzrd6lJQ+plccP2wTzOAcyAwkBomxzVfzqQ5Q2xn1RglEiJbsb3aYO
P3xsi28I0HBORo/GBbDkoG4p7hRcY5QYtxU/F7hJcI93zKhLo1m2NRqogO36VDVy
+KcstWLGX/oFALoJZG52/0TqoSoSjQW5yCOFLFK4rjlPVzR9klGi2y1CffjefBef
p8R5o7jUm4uEPN0KHZM8GECY6zCc3iO8BycFcqgzH0OKWaAP4TQldMFcLEdrAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUCYUaX0COnfVzUeXGrYKqUjY12IYwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0OTg4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqpIjANBgkqhkiG9w0BAQsFAAOCAQEAGxzD
WT87zTpnDO9K9JK8WxoyK8mSE+odfHzwxW+QfkDbygN8fduhPinJUXnGleijaHyJ
V5RssMq+Eqg407pIxT81PkByL05dNo6MAhtg8rXKvdIUfOCsa0s66XQ0n6E699Jp
p6Z1sgUEh1NVHDq2KeJCO+CqKfBvSoALIWf6VM4YG46KFacp2wIqkxeUewMPN7gr
Xal9ma+tOjlEYRwLuMFSzi71qQ1hsvt/W24aFp6Q9Uq6gquzCWyoOAqGHhFFKq3y
STzAiZVifD3NAnqdR0WVOntWdv3Kl4YpwfloWjFGZt3PdMXIf7NgHcTBI7BCHW/U
VSj+9e99fB+08qVR1A==
-----END CERTIFICATE-----