Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142681.roa
File:                     AS142681.roa (raw, json)
Hash identifier:          IuK+Q9MXQOr5MQMpE+FNja+m5J3swMNMQuP0LUbIkSc=
Subject key identifier:   4C:53:08:3B:C9:84:A3:42:2D:99:32:14:85:33:89:4B:C0:2B:46:53
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3433EDC794015674C6E33A6FCB0DB7FB487FBA0F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142681.roa
Signing time:             Fri 22 May 2026 06:05:30 +0000
ROA not before:           Fri 22 May 2026 06:00:30 +0000
ROA not after:            Fri 21 May 2027 06:05:30 +0000
asID:                     142681
IP address blocks:        240a:a01f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:33:ed:c7:94:01:56:74:c6:e3:3a:6f:cb:0d:b7:fb:48:7f:ba:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:00:30 2026 GMT
            Not After : May 21 06:05:30 2027 GMT
        Subject: CN=4C53083BC984A3422D9932148533894BC02B4653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:87:d5:39:b9:58:d5:ad:8a:28:2e:58:88:fd:
                    19:e6:0a:fa:b1:59:49:65:ee:5e:02:44:cd:fe:4e:
                    bc:a2:26:db:a9:80:f5:68:13:36:22:d6:a7:89:58:
                    e9:27:79:b1:28:7c:f9:c6:5e:6e:65:fb:8a:fd:2a:
                    c7:ed:9f:fb:33:86:e5:42:89:cf:01:9f:91:a9:36:
                    ee:ee:0c:5a:c8:57:90:af:8a:c7:13:47:b2:a8:c4:
                    85:55:8d:53:37:fe:72:b6:aa:97:17:41:f9:90:04:
                    66:ab:f4:4c:91:5c:f0:26:06:81:dd:05:7d:9e:12:
                    32:af:43:02:f3:f7:51:89:30:4b:5f:4e:00:d9:a2:
                    82:76:fd:9a:84:f9:a9:07:a8:19:5e:d2:13:03:f9:
                    25:95:cf:38:03:6c:99:62:93:5e:b3:1f:95:c5:20:
                    05:84:1f:3b:80:87:97:6f:72:d1:54:af:de:a6:25:
                    8a:41:ae:c7:18:6c:8f:67:72:04:c6:82:ec:04:f2:
                    15:22:92:53:92:7c:9c:d9:fc:89:7b:9a:51:51:b8:
                    af:a9:e8:ad:89:bd:9d:af:5d:ab:47:e4:a9:ca:1f:
                    86:8c:59:4e:e3:f9:3f:29:05:36:57:dc:9f:93:d2:
                    39:32:a4:0b:11:de:d1:b6:f8:9b:d4:70:10:b9:e2:
                    fd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:53:08:3B:C9:84:A3:42:2D:99:32:14:85:33:89:4B:C0:2B:46:53
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142681.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a01f::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:f4:74:95:a3:66:2e:2b:45:97:8e:3d:b7:4f:02:69:39:bf:
         eb:9f:05:27:fa:1b:95:a5:3b:55:2a:36:e4:ac:ab:79:99:6c:
         ba:bb:f3:86:43:26:57:5b:df:f9:0d:5a:c2:33:d1:ca:aa:5c:
         6a:81:6f:25:17:e5:1c:0a:24:10:94:c8:05:24:e2:13:c6:05:
         0a:c0:98:f4:c1:d7:c3:fc:dd:ec:6f:b2:c1:fd:bd:5b:0d:c3:
         da:1b:e5:40:e4:30:1c:ba:49:aa:69:ad:70:d1:d4:a7:a5:b8:
         d5:f6:d4:2e:13:03:20:22:06:87:8f:f9:3d:71:c0:28:7f:a8:
         5f:f4:20:cd:c4:4e:44:33:e2:6d:b8:84:6f:13:ac:47:41:78:
         89:ae:5e:21:2c:0a:5a:78:20:5b:3c:1b:8e:88:73:a9:f6:6c:
         73:25:41:0b:5d:23:e8:f1:ec:08:8c:e1:bf:d9:ea:3e:f0:59:
         a5:c5:4e:e2:6e:4a:87:d8:4c:9d:e4:86:5c:76:a4:36:d4:d7:
         68:d0:df:6f:26:4c:91:91:bb:c6:9d:9c:a3:c3:b7:de:1a:33:
         1a:65:73:59:eb:80:c7:65:4e:39:3f:27:c0:53:7f:32:33:5e:
         f9:5f:f9:f8:27:1c:d6:17:9a:7e:cf:bf:b4:cb:00:fa:7a:fd:
         eb:7b:09:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:24:26 2026 by rpki-client