Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142674.roa
File:                     AS142674.roa (raw, json)
Hash identifier:          0PPcnsTem29k78Cy0sKSz+OLVjyR/x5Yr5xwNuldULE=
Subject key identifier:   A1:A2:9B:16:80:E6:5C:2A:34:CA:CA:31:C2:2D:C6:82:9C:A1:E1:79
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       32BB4D4B2FE2382354AF0A9E4D5D90A9885C61A3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142674.roa
Signing time:             Fri 22 May 2026 06:46:15 +0000
ROA not before:           Fri 22 May 2026 06:41:15 +0000
ROA not after:            Fri 21 May 2027 06:46:15 +0000
asID:                     142674
IP address blocks:        240a:a018::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:bb:4d:4b:2f:e2:38:23:54:af:0a:9e:4d:5d:90:a9:88:5c:61:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:15 2026 GMT
            Not After : May 21 06:46:15 2027 GMT
        Subject: CN=A1A29B1680E65C2A34CACA31C22DC6829CA1E179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:20:1e:eb:0f:23:a2:b8:0e:51:81:ba:8d:8c:
                    e6:b9:b2:76:28:1d:22:83:0e:03:fa:c8:83:d0:2c:
                    a9:1f:23:3f:7a:53:b8:9b:2f:af:94:00:57:4f:a5:
                    e8:8d:d6:df:3d:df:92:08:0e:fc:3e:f9:8f:3f:3f:
                    b2:f9:92:3d:b7:6f:7d:6f:b9:c6:f1:03:83:5d:72:
                    3c:e5:78:b4:17:3f:ba:08:e1:77:3a:49:54:90:6f:
                    86:ee:f9:3d:e4:ef:30:3e:30:b3:89:e4:13:b8:a3:
                    52:93:7a:8f:08:0b:68:6b:c3:2e:1b:01:68:8c:bb:
                    80:29:2e:40:dc:47:62:36:84:66:7f:c9:2d:2c:98:
                    6e:d0:83:1d:49:34:9d:e6:5f:55:0e:da:ab:cf:e6:
                    ad:4d:2b:05:03:c0:89:a4:72:68:c5:65:f8:69:db:
                    f2:fb:03:5c:b9:ad:49:50:95:fd:85:ec:07:b6:3f:
                    df:4d:b0:36:03:03:5d:46:48:82:ce:37:34:b9:13:
                    5a:b8:57:c9:d7:5f:24:03:0a:c1:5d:e2:ea:da:cb:
                    58:41:5c:9f:4e:e5:ed:27:e0:8c:ee:40:f5:d3:d3:
                    35:f4:86:3a:84:ab:63:6c:06:75:32:74:b0:59:8b:
                    8a:49:5a:f3:55:cc:bf:84:c0:54:4e:57:9c:5c:54:
                    47:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A2:9B:16:80:E6:5C:2A:34:CA:CA:31:C2:2D:C6:82:9C:A1:E1:79
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142674.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a018::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:b9:73:5e:6f:a7:1f:23:c3:9f:2a:5d:78:9f:2e:36:4c:2f:
         2d:92:57:62:95:b3:65:44:1d:7d:be:f9:6f:0d:eb:c3:c8:98:
         de:3b:c8:0e:49:6a:22:7f:12:92:39:df:8e:bc:4f:62:0b:82:
         29:d6:72:03:e5:ec:20:e5:41:11:0b:57:1a:d0:78:af:1c:93:
         9f:78:e1:1d:e4:20:69:32:a1:0d:3d:b3:0a:d0:2d:00:68:cc:
         92:6f:3d:e4:77:fa:32:07:a6:b5:14:89:11:c8:8b:48:ee:1c:
         84:63:2f:ec:ee:5d:40:91:ae:ff:c8:37:cf:f9:bc:4b:52:63:
         b8:08:19:52:c5:f6:3d:24:2c:ed:bd:24:0f:98:00:b4:1d:ef:
         b8:ff:74:6b:d4:67:43:11:f9:d0:1c:ae:c5:a6:0a:2b:28:79:
         c9:cd:e8:13:4d:59:b5:a1:a8:b5:d5:11:7f:63:35:69:f9:c9:
         6f:bf:9d:b7:5a:eb:de:89:25:2b:ac:23:e2:ab:e4:e5:d1:e0:
         33:a9:8b:5a:f9:b7:d0:98:53:0d:6d:4d:f7:42:32:cf:42:7f:
         16:93:78:88:ab:05:5c:bb:0e:b7:ba:b4:0f:13:c6:59:da:7b:
         e0:a5:59:9b:60:8b:69:23:bb:a4:0b:1c:6e:32:6b:04:e7:d0:
         f0:3e:f3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:51 2026 by rpki-client