Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142713.roa
File:                     AS142713.roa (raw, json)
Hash identifier:          VzNYNJwIiABlVc7vNZ/i9yx1eHi46D1SxArpqhs+vqQ=
Subject key identifier:   EA:73:61:39:59:82:10:64:57:7D:12:DB:15:00:54:BD:E8:1D:AF:70
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1ECD59DD2BCFDFEB222ACCB505DD845987AA9CBA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142713.roa
Signing time:             Mon 25 May 2026 06:49:09 +0000
ROA not before:           Mon 25 May 2026 06:44:09 +0000
ROA not after:            Mon 24 May 2027 06:49:09 +0000
asID:                     142713
IP address blocks:        240a:a03f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:cd:59:dd:2b:cf:df:eb:22:2a:cc:b5:05:dd:84:59:87:aa:9c:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:44:09 2026 GMT
            Not After : May 24 06:49:09 2027 GMT
        Subject: CN=EA73613959821064577D12DB150054BDE81DAF70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:4c:70:29:2c:a0:1b:6c:e5:96:0a:1c:c4:1a:
                    90:e3:7e:f5:6a:19:46:10:86:5f:4d:bf:59:34:fe:
                    6a:53:b5:b6:df:10:bb:d2:97:be:6b:1c:f9:79:08:
                    8e:3e:8f:1b:7e:1b:79:ce:be:b1:c0:95:71:b7:1b:
                    9c:6d:0c:6d:52:e3:40:45:7c:a5:7d:0c:59:8b:3e:
                    85:ab:89:c2:0c:26:8f:e2:f6:cd:54:95:8d:89:a7:
                    1e:65:5d:d3:8e:76:e9:cd:86:92:18:9f:54:70:89:
                    0a:ed:2a:a6:de:10:6f:7f:f9:b1:7f:65:6f:e3:3e:
                    7b:e9:f9:c6:0c:c1:56:88:01:6f:9c:8d:75:32:04:
                    2d:34:75:a8:1b:90:81:ba:72:ca:e5:61:ab:6c:c7:
                    c2:cd:73:85:d2:d5:34:5f:47:99:c3:52:5a:0a:34:
                    fb:6d:24:72:63:4d:5b:e2:52:df:5d:33:84:55:34:
                    d7:c9:ce:7c:a3:7a:ba:e6:85:a5:86:94:2a:bf:e9:
                    d5:ee:24:4b:8e:e9:16:b8:57:e6:ab:0d:8a:9d:22:
                    ee:ee:e3:6c:50:2c:e7:ae:b1:19:03:df:9e:d5:61:
                    67:b4:eb:10:9a:8d:c5:29:a3:b4:17:7a:3c:58:30:
                    1a:8f:a4:02:9b:5c:75:ed:26:ae:ac:12:83:30:a6:
                    86:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:73:61:39:59:82:10:64:57:7D:12:DB:15:00:54:BD:E8:1D:AF:70
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142713.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a03f::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:39:31:99:e5:7c:71:e3:83:74:17:e4:0d:f2:33:58:3a:97:
         3d:af:b0:b0:b5:bf:95:8c:f2:dd:c4:e8:b0:a9:48:c9:82:70:
         54:21:32:16:b4:d8:dd:62:b6:5b:dc:5b:54:dd:61:d7:10:46:
         9f:26:ed:6d:44:c6:28:40:46:e8:90:b5:82:35:17:77:ca:10:
         b0:d8:46:f9:00:a8:12:e2:36:21:d8:19:7c:e8:ec:ea:46:78:
         a7:eb:9b:4b:c3:85:50:b3:03:c5:9b:32:00:d7:f5:0c:5e:be:
         ca:19:66:b5:05:ba:26:56:07:f7:a2:1b:0f:a8:cf:d8:d3:a8:
         93:21:b8:e4:7e:9d:8e:a8:4a:cd:93:69:c6:de:ed:68:ba:ba:
         b9:93:12:9f:49:f7:d5:52:10:7f:fc:b4:5c:12:1a:70:7a:d9:
         76:1a:2e:2f:ab:d4:20:c5:7a:99:3a:ac:33:24:b6:f0:16:dc:
         03:86:a1:8a:ba:75:90:b1:60:dc:71:82:e2:38:47:da:8c:d0:
         1f:53:8c:08:e1:79:71:c7:b5:9e:51:a9:ed:7e:b6:f0:b1:8b:
         1c:d8:41:a7:dc:0d:d0:a9:a5:e3:f6:ff:ba:89:fb:63:67:5c:
         67:ac:15:4e:b9:d3:67:ce:ce:ec:06:a0:e3:5b:09:d0:ba:bd:
         99:bd:4a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:02 2026 by rpki-client