Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142664.roa
File:                     AS142664.roa (raw, json)
Hash identifier:          w0N5j9jsmISis+LaD1aftIu91z03+uz1F1yXsDdTQYI=
Subject key identifier:   A1:D3:14:7E:63:0E:5D:A8:17:3B:9F:E6:FB:4C:2C:32:DC:16:E7:7C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       657B667170E408D575D25E2981C733D887DBD95E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142664.roa
Signing time:             Tue 26 May 2026 06:30:28 +0000
ROA not before:           Tue 26 May 2026 06:25:28 +0000
ROA not after:            Tue 25 May 2027 06:30:28 +0000
asID:                     142664
IP address blocks:        240a:a00e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:7b:66:71:70:e4:08:d5:75:d2:5e:29:81:c7:33:d8:87:db:d9:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:28 2026 GMT
            Not After : May 25 06:30:28 2027 GMT
        Subject: CN=A1D3147E630E5DA8173B9FE6FB4C2C32DC16E77C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e5:b9:e0:f8:9a:10:e3:04:f5:1a:88:1e:f6:
                    eb:5a:29:20:12:01:dc:d8:5e:b6:f1:76:6b:7d:0f:
                    3c:f2:e0:d8:a5:26:83:f1:7a:da:71:45:90:11:c9:
                    36:29:16:c4:0d:4b:00:61:a0:8d:9b:68:4e:c9:86:
                    6e:07:d6:ad:2d:be:1a:be:e5:de:1a:1d:8c:ba:74:
                    d9:47:ee:00:7e:1d:dc:16:e0:cc:b4:07:5b:c7:91:
                    5b:76:56:07:4c:55:54:45:a4:43:23:30:c4:52:60:
                    ce:8b:f2:05:6b:07:96:2d:ef:2c:70:d9:f7:0a:05:
                    38:2e:6b:db:6f:ef:b2:43:56:34:32:3b:84:f8:a1:
                    e5:0b:84:c1:08:4f:97:20:61:33:71:72:27:62:4a:
                    d8:f4:0c:b0:74:8c:3c:2f:0e:85:22:80:2b:d6:2d:
                    29:fb:98:cf:89:5f:9e:87:a5:77:c5:79:ca:b4:b2:
                    61:2a:f7:5f:73:5e:48:ab:ac:60:4b:17:19:73:a7:
                    59:ae:4f:6b:69:69:7d:01:02:4a:0e:ef:0b:31:1f:
                    85:a4:3c:81:32:1f:1e:68:5a:77:a3:17:1b:fd:d7:
                    0b:f6:f3:32:13:f0:0a:85:b0:e7:54:8e:b1:ad:b8:
                    74:af:dc:6d:17:03:48:18:97:51:2b:21:d1:e1:fd:
                    20:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D3:14:7E:63:0E:5D:A8:17:3B:9F:E6:FB:4C:2C:32:DC:16:E7:7C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142664.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a00e::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:25:fa:e5:a9:fe:aa:14:92:aa:78:ec:5b:90:8a:4a:43:18:
         a5:8f:83:40:29:42:e4:8d:07:51:54:db:6a:6a:90:1b:7c:f4:
         a4:05:c2:b1:bd:e6:62:2e:78:04:00:72:a4:e8:2a:7d:af:b2:
         03:d7:8c:59:68:28:89:c1:04:99:28:04:d1:cc:0b:8c:ca:f9:
         c5:e6:93:fd:49:b3:88:7d:63:0a:f2:6a:be:43:68:2f:fb:cb:
         7d:3f:aa:0a:3c:0c:c5:1b:3f:40:a5:bd:25:20:8c:c6:9c:a2:
         cf:93:0a:85:aa:47:54:1b:09:fc:41:31:5e:04:26:6f:dc:95:
         06:b6:29:d1:b6:83:20:bb:f8:f3:1b:f5:b3:90:6d:51:50:12:
         ea:ec:d7:6f:4b:7d:0c:82:30:d1:d4:ef:13:c0:2a:21:f1:ac:
         ca:5f:4b:c5:35:28:33:eb:c0:c0:3d:f9:4e:f8:86:78:8c:a5:
         d2:98:4f:bb:53:09:a7:b0:65:e6:c6:87:23:00:c9:ae:2c:38:
         90:63:3e:0b:d5:4d:4a:28:75:e7:77:c0:c5:3e:15:34:87:53:
         f6:b1:76:82:8f:0b:f4:a4:a0:09:52:4e:e9:41:b5:53:67:c9:
         b8:01:7b:f7:1c:63:69:bc:12:5a:54:32:40:d8:1c:7e:70:86:
         01:01:63:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----