Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142701.roa
File:                     AS142701.roa (raw, json)
Hash identifier:          0ji2BfTBXen7hsdls/UnOmJ0V6U0opo1OiV1x3fv1oA=
Subject key identifier:   2E:24:C4:CD:FD:4C:D6:F5:23:AE:E7:A1:19:88:53:87:90:E2:5B:4B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       074D4857CF52821CEF1EF7542947C1DCFFF7C008
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142701.roa
Signing time:             Fri 22 May 2026 04:08:11 +0000
ROA not before:           Fri 22 May 2026 04:03:11 +0000
ROA not after:            Fri 21 May 2027 04:08:11 +0000
asID:                     142701
IP address blocks:        240a:a033::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:4d:48:57:cf:52:82:1c:ef:1e:f7:54:29:47:c1:dc:ff:f7:c0:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:03:11 2026 GMT
            Not After : May 21 04:08:11 2027 GMT
        Subject: CN=2E24C4CDFD4CD6F523AEE7A11988538790E25B4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e1:6e:f0:48:19:2f:08:d8:21:14:10:74:71:
                    37:25:9b:b6:d8:82:14:2c:11:ea:86:fc:78:40:cc:
                    63:90:75:a1:17:17:ea:56:56:eb:6e:aa:66:02:bf:
                    49:f7:45:d0:a0:8f:9d:06:c4:b0:7f:10:71:05:2d:
                    1e:3b:57:2b:59:ba:32:6d:d4:50:0b:ab:69:e2:bc:
                    ef:69:09:ce:aa:47:9b:1e:a1:0b:4b:f7:ad:f0:c3:
                    ae:d6:e3:39:5f:99:d3:6e:84:3f:3b:2a:b6:41:41:
                    92:71:77:c7:cb:e9:06:b1:9e:1e:9c:58:85:4a:54:
                    9e:96:73:5e:14:1a:c5:a9:42:e8:e8:85:48:ab:eb:
                    55:dd:5b:a5:d8:bf:12:06:14:eb:ea:1e:d2:06:8a:
                    a7:8f:f2:7e:0b:b5:fe:f4:b6:38:0c:3d:04:52:ee:
                    7c:3e:40:14:90:65:0a:f0:6d:1d:4d:7a:3f:27:99:
                    84:80:e7:b5:90:c7:a2:32:50:02:d4:3c:df:e5:4b:
                    af:c9:73:5e:fc:70:de:98:31:4b:b1:28:0b:ee:61:
                    66:6a:8e:32:1c:4a:ac:b7:4a:10:38:11:1e:b6:0e:
                    5e:3c:8e:d5:de:6c:17:b1:21:79:49:9c:72:f6:a0:
                    39:60:9e:c4:c7:10:67:38:b2:13:e0:bd:b4:55:6a:
                    e0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:24:C4:CD:FD:4C:D6:F5:23:AE:E7:A1:19:88:53:87:90:E2:5B:4B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142701.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a033::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:bb:6e:46:2d:ab:fd:9c:a8:63:91:18:35:4d:5a:32:62:31:
         bb:fd:be:2b:bf:fa:c0:af:d8:e1:64:f4:14:a8:02:4f:af:99:
         d3:b1:e8:87:76:6a:cb:f7:c8:68:aa:86:21:e6:c9:ed:c0:2f:
         29:e2:48:2c:e4:f7:bc:bc:8c:aa:f1:69:94:bf:a8:c7:78:b4:
         c3:1a:57:6b:52:bc:e3:01:84:01:9f:7d:c4:fc:3a:3c:16:e5:
         12:05:e7:94:92:90:e2:05:cc:ea:25:a1:18:64:d6:47:02:5c:
         16:e0:4e:8a:50:ff:62:3d:0b:10:55:72:ab:b0:8d:63:7c:e3:
         7b:6e:c1:4e:da:69:50:bd:24:a1:e6:24:28:ec:c3:a8:3b:b0:
         df:fd:9b:7f:9a:9d:3e:66:70:1d:7d:60:2e:dd:26:ad:d1:e1:
         30:de:2e:65:b6:76:84:cf:cd:14:07:52:70:91:f8:fa:47:51:
         81:52:6f:2f:69:39:84:b2:ca:77:aa:8e:6f:3c:6f:a5:7a:5f:
         0e:46:33:c8:58:f4:a7:39:fb:b8:e3:0a:9d:e2:1d:8b:ee:b8:
         a6:e6:4b:d7:ea:f3:dd:2e:72:74:6c:75:60:d2:e1:bc:14:53:
         7f:4d:90:a0:20:4f:cf:cf:38:2d:39:d3:36:bd:ef:f6:b2:9c:
         2c:4a:58:de
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUB01IV89SghzvHvdUKUfB3P/3wAgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDAzMTFaFw0yNzA1MjEwNDA4MTFaMDMxMTAvBgNV
BAMTKDJFMjRDNENERkQ0Q0Q2RjUyM0FFRTdBMTE5ODg1Mzg3OTBFMjVCNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh4W7wSBkvCNghFBB0cTclm7bY
ghQsEeqG/HhAzGOQdaEXF+pWVutuqmYCv0n3RdCgj50GxLB/EHEFLR47VytZujJt
1FALq2nivO9pCc6qR5seoQtL963ww67W4zlfmdNuhD87KrZBQZJxd8fL6Qaxnh6c
WIVKVJ6Wc14UGsWpQujohUir61XdW6XYvxIGFOvqHtIGiqeP8n4Ltf70tjgMPQRS
7nw+QBSQZQrwbR1Nej8nmYSA57WQx6IyUALUPN/lS6/Jc178cN6YMUuxKAvuYWZq
jjIcSqy3ShA4ER62Dl48jtXebBexIXlJnHL2oDlgnsTHEGc4shPgvbRVauBFAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQULiTEzf1M1vUjruehGYhTh5DiW0swHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyNzAxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqgMzANBgkqhkiG9w0BAQsFAAOCAQEAprtu
Ri2r/ZyoY5EYNU1aMmIxu/2+K7/6wK/Y4WT0FKgCT6+Z07Hoh3Zqy/fIaKqGIebJ
7cAvKeJILOT3vLyMqvFplL+ox3i0wxpXa1K84wGEAZ99xPw6PBblEgXnlJKQ4gXM
6iWhGGTWRwJcFuBOilD/Yj0LEFVyq7CNY3zje27BTtppUL0koeYkKOzDqDuw3/2b
f5qdPmZwHX1gLt0mrdHhMN4uZbZ2hM/NFAdScJH4+kdRgVJvL2k5hLLKd6qObzxv
pXpfDkYzyFj0pzn7uOMKneIdi+64puZL1+rz3S5ydGx1YNLhvBRTf02QoCBPz884
LTnTNr3v9rKcLEpY3g==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:16 2026 by rpki-client