Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142690.roa
File:                     AS142690.roa (raw, json)
Hash identifier:          F6JDK8iP/APgwfQvxYKPWsgcnBwopVo1A5E70NykIEg=
Subject key identifier:   45:7E:E0:AC:0B:9F:3E:9E:6C:EC:35:CF:80:C7:DC:10:32:38:1F:74
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       320B91AA6768B4ECD1EAA4203393E8867C9ABCB9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142690.roa
Signing time:             Tue 26 May 2026 03:17:03 +0000
ROA not before:           Tue 26 May 2026 03:12:03 +0000
ROA not after:            Tue 25 May 2027 03:17:03 +0000
asID:                     142690
IP address blocks:        240a:a028::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:0b:91:aa:67:68:b4:ec:d1:ea:a4:20:33:93:e8:86:7c:9a:bc:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:12:03 2026 GMT
            Not After : May 25 03:17:03 2027 GMT
        Subject: CN=457EE0AC0B9F3E9E6CEC35CF80C7DC1032381F74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:81:2b:a8:9b:04:9a:3d:62:a8:d6:a5:f4:11:
                    42:ef:4d:34:76:1b:c6:01:16:28:fa:10:7d:24:e6:
                    4c:39:23:61:0c:ee:43:1e:97:e7:1b:e8:df:d2:62:
                    e1:21:ef:89:ee:8a:dd:af:c3:a4:f6:5e:4e:0e:1b:
                    02:4c:3c:32:c1:ec:3a:2e:3b:4f:ca:b7:cd:16:7a:
                    80:a4:44:03:92:9d:31:1c:a4:48:ad:eb:6f:b7:7f:
                    2c:e4:da:ff:44:9b:04:0a:6d:e7:06:af:d3:32:fc:
                    6a:0b:11:43:d2:3f:a7:45:76:ff:8f:0b:87:b9:de:
                    bb:21:0d:31:eb:16:48:c6:1d:f2:4a:9e:15:28:b1:
                    95:b9:6e:a8:03:cd:a7:2c:8d:b3:3f:14:2a:51:ef:
                    ac:54:13:12:a8:ee:51:5f:0f:6f:fe:1d:68:47:47:
                    86:4b:9a:48:26:6e:7d:1f:f9:ef:c6:d2:ea:1f:bb:
                    e4:60:db:26:14:3e:eb:8c:bd:70:0e:ce:60:f4:c1:
                    36:57:15:d0:7c:48:4c:aa:d1:1c:89:77:56:51:b5:
                    81:6f:58:d4:55:a0:08:a4:5e:90:90:f8:f7:a4:7d:
                    9c:26:04:a5:c6:9f:8b:5b:28:c5:1c:e2:c0:90:dd:
                    cb:e3:cc:09:2a:ad:33:03:09:e1:3e:97:6a:f6:55:
                    1b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:7E:E0:AC:0B:9F:3E:9E:6C:EC:35:CF:80:C7:DC:10:32:38:1F:74
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142690.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a028::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:cd:32:1d:fd:57:a2:5a:97:05:6d:a8:d8:c6:4a:a3:26:a6:
         3e:3e:3b:3d:b7:6f:20:a1:a5:e3:56:99:9f:fd:12:bf:73:8d:
         4e:84:8b:7b:af:4d:7f:e5:69:c2:9c:cb:02:6d:d0:a5:a3:25:
         93:a8:a2:17:48:aa:1b:31:0f:64:1c:97:48:48:46:c0:20:59:
         18:bf:96:69:65:24:5e:d3:7a:bd:c7:00:7d:f4:67:8b:8f:8b:
         9b:87:c5:b6:7a:45:73:26:7b:aa:24:8c:ac:24:de:1b:e6:fd:
         1f:ce:95:f2:f4:f1:03:69:40:6e:ab:db:ff:f0:5d:04:ee:45:
         4b:f0:32:d5:67:ec:40:90:94:21:b6:be:b8:c4:64:d0:aa:d7:
         af:56:9c:45:d0:bf:f2:9c:64:4c:89:a0:05:ca:98:df:96:23:
         6e:f0:1d:9d:65:5c:3e:ee:81:3f:8c:41:ae:17:19:1f:31:43:
         ac:1d:7a:eb:1a:ca:20:f7:f6:5a:fe:01:b1:0e:95:2b:ca:36:
         c4:f0:0c:97:da:fe:db:b0:ae:d6:2b:8b:29:90:a9:22:8e:c6:
         d6:ff:f4:26:b7:bb:9f:7f:70:ea:8e:2e:cb:4b:96:74:93:44:
         ec:1d:d2:e9:70:a5:ad:72:d7:a7:be:2c:6e:fb:cb:95:0d:19:
         42:fb:d2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----