Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142662.roa
File:                     AS142662.roa (raw, json)
Hash identifier:          Qpu3F0eVNkI6FhxciYAUKWSRrGxJUcTad5iengt+uZg=
Subject key identifier:   14:F7:D1:A9:F5:73:84:F2:73:CE:0B:60:41:BE:DA:FE:7F:D8:EF:BF
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       408045F098F0948F9B1A5874C71271DD588A3B75
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142662.roa
Signing time:             Fri 22 May 2026 01:50:37 +0000
ROA not before:           Fri 22 May 2026 01:45:37 +0000
ROA not after:            Fri 21 May 2027 01:50:37 +0000
asID:                     142662
IP address blocks:        240a:a00c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:80:45:f0:98:f0:94:8f:9b:1a:58:74:c7:12:71:dd:58:8a:3b:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:37 2026 GMT
            Not After : May 21 01:50:37 2027 GMT
        Subject: CN=14F7D1A9F57384F273CE0B6041BEDAFE7FD8EFBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3b:d5:f4:9f:50:64:c5:21:20:46:99:37:c9:
                    be:a3:54:be:11:83:5b:dd:a9:e9:fb:e1:3e:52:e5:
                    7f:5f:09:68:c2:6c:90:42:04:55:04:43:91:35:80:
                    70:1b:cf:4a:c3:89:a5:8c:10:cf:e8:c3:e5:37:a0:
                    19:08:d9:4e:f8:be:2c:fa:e4:3a:8f:08:e9:20:c4:
                    bf:8a:b1:97:57:2f:99:09:20:d1:eb:be:52:43:a7:
                    11:75:29:c3:9b:6c:9a:da:ee:83:27:f3:98:9b:da:
                    f9:32:3c:f3:b3:dc:c4:df:32:e0:61:12:dd:b9:f3:
                    64:f8:7f:42:db:9b:31:0d:17:1a:26:bd:ef:56:28:
                    59:e3:47:49:90:46:a9:87:35:cf:93:8e:64:96:3e:
                    95:f4:b9:e3:26:bc:4b:d6:57:51:dc:fe:76:a4:4d:
                    e2:17:0e:d3:76:84:8d:51:6b:0a:e4:42:a4:d6:e3:
                    58:34:52:d0:2a:2a:1c:9c:13:2c:14:43:a0:e7:b6:
                    49:1a:24:84:0e:af:6e:b8:40:c7:04:2a:e5:5e:8e:
                    02:21:ef:ac:f3:3e:4d:af:5e:ce:1b:3f:5b:19:2c:
                    03:26:8f:31:24:8d:a0:6d:10:f6:c2:ec:c1:e4:c8:
                    16:9a:61:bf:43:1f:16:66:c3:3e:7b:16:26:3b:05:
                    82:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F7:D1:A9:F5:73:84:F2:73:CE:0B:60:41:BE:DA:FE:7F:D8:EF:BF
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142662.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a00c::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:33:e2:6f:47:f5:ad:fb:83:94:76:13:04:fb:21:6a:e7:3a:
         ae:a6:02:32:92:60:2c:37:3a:35:44:ef:b5:0a:87:1d:48:46:
         e4:30:d0:7f:c1:59:51:18:d8:76:4b:25:c5:5a:de:f5:a7:df:
         b7:c3:75:4c:cb:3f:c5:c1:f3:c2:69:12:ee:29:73:9e:79:5d:
         9e:44:c5:b5:ea:6f:70:79:6f:47:6c:3f:d6:60:ec:91:fc:16:
         9e:c1:97:96:a2:01:7f:ac:b2:6d:1c:7c:b3:51:57:e2:4e:63:
         af:7e:8d:f3:b1:ab:17:24:a6:c8:12:39:c5:56:29:9b:47:c6:
         49:30:9f:ff:f4:85:c8:ea:65:7b:d8:d3:1e:63:a4:a0:66:16:
         a5:02:c8:d2:01:b0:de:30:92:73:fa:da:25:d8:c9:d0:18:3b:
         d7:83:4d:8e:7f:28:0e:02:6c:f4:d2:6a:40:4b:4d:b6:b5:de:
         62:ff:57:41:b1:7c:46:ed:ae:9a:80:03:a6:c5:f2:7c:28:a9:
         a1:e2:65:a3:1b:e9:c3:61:0a:38:13:9a:b3:5c:e9:50:13:5e:
         6a:e9:0c:ea:41:ef:a1:a5:c4:ae:6c:95:8c:29:cb:cf:4a:f9:
         47:ea:aa:78:e4:5e:15:7a:2a:b7:71:19:6e:b1:0c:5c:32:12:
         9a:98:51:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:03 2026 by rpki-client