Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142714.roa
File:                     AS142714.roa (raw, json)
Hash identifier:          xSX4YV4NsItz/K5F9lCJnL0YhcFRVEkNIyFMJ2jcDSQ=
Subject key identifier:   DE:14:D4:FB:EC:44:B1:32:61:6E:C0:BB:F1:45:61:6F:24:FD:E1:CC
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       731ACEA56D84A4FBD3360C8C9D25619DB7318A6C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142714.roa
Signing time:             Fri 22 May 2026 06:58:27 +0000
ROA not before:           Fri 22 May 2026 06:53:27 +0000
ROA not after:            Fri 21 May 2027 06:58:27 +0000
asID:                     142714
IP address blocks:        240a:a040::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:1a:ce:a5:6d:84:a4:fb:d3:36:0c:8c:9d:25:61:9d:b7:31:8a:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:27 2026 GMT
            Not After : May 21 06:58:27 2027 GMT
        Subject: CN=DE14D4FBEC44B132616EC0BBF145616F24FDE1CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:88:65:c4:e3:40:01:f9:e3:87:a4:45:e5:e7:
                    b1:43:d4:f3:52:ae:58:88:90:0b:10:60:bb:61:ac:
                    1b:35:45:61:f9:66:0b:69:32:bd:63:a9:11:af:ad:
                    6b:95:fe:8c:04:2f:f4:a5:64:4a:f9:a5:05:ee:47:
                    ca:8b:f5:cb:93:f9:d4:71:d2:6c:a1:8a:7f:49:e4:
                    03:f8:37:c4:59:13:fe:a5:40:2b:c5:7a:69:a8:a7:
                    fd:65:df:db:67:20:10:02:c5:75:74:6c:57:32:09:
                    42:30:3f:50:64:21:8b:47:0e:1b:33:7b:a4:fd:71:
                    13:5b:9b:2b:a0:35:5a:92:f4:6c:fa:06:f2:9b:b1:
                    03:fb:58:c4:02:77:5a:a8:16:f5:b4:9c:a7:a0:01:
                    07:d2:22:94:e9:2f:e3:2b:25:29:0a:92:cd:7b:2f:
                    11:37:d1:14:6f:ef:9c:c4:35:29:b7:54:f8:dc:ef:
                    48:b5:03:5a:68:ac:76:1c:14:f6:37:28:10:a0:3b:
                    97:7b:93:8f:77:30:a5:de:93:6d:f6:cf:9f:a6:83:
                    d2:67:f0:ab:9a:62:9d:5a:22:72:ae:2e:7d:ee:8b:
                    c5:dc:c2:f4:91:3a:92:73:c3:50:16:41:49:e5:35:
                    11:0d:95:69:59:23:cf:e2:34:32:66:6d:72:aa:7c:
                    f1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:14:D4:FB:EC:44:B1:32:61:6E:C0:BB:F1:45:61:6F:24:FD:E1:CC
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142714.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a040::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:32:85:33:9f:f2:4d:88:70:4c:84:d0:0a:f8:ac:1e:7c:e7:
         bf:a4:e4:4a:5f:b7:68:3f:22:44:f8:65:78:be:0d:68:bd:38:
         c3:ab:6c:04:1c:39:ae:cf:45:30:bd:5b:8c:ff:56:ba:bd:dc:
         58:5f:fc:2c:c4:d1:0f:4c:9e:c3:17:b0:ef:d6:c7:84:2f:13:
         f0:98:c3:d8:b0:86:4e:de:3c:3b:f0:a6:89:21:df:cb:58:d6:
         b8:2d:87:c2:bb:61:cc:1c:a4:a0:5f:bb:81:a3:ec:fe:ba:bf:
         5a:f1:b8:44:2d:06:6f:c8:12:89:24:04:f0:2b:c0:6e:fe:b8:
         d5:6b:04:ec:6b:b1:c9:e7:3f:3e:42:f6:6d:00:6a:ef:15:09:
         8e:1c:91:1c:b5:d6:93:be:ca:44:ce:df:6b:79:99:e4:32:9e:
         59:7c:48:ba:34:dc:70:b2:0f:0e:a1:8c:3a:77:68:52:83:90:
         b2:71:6f:48:a1:63:4b:9a:e5:6b:d4:0a:de:e1:f5:84:62:ce:
         89:c6:7a:b3:48:6b:6f:fb:a3:65:6f:03:f4:0f:a1:90:3d:8e:
         9a:bf:d3:9f:93:a2:b6:76:c6:3d:ff:51:7d:64:9c:c9:5f:9b:
         80:ff:e1:2c:74:6f:65:5c:01:57:56:29:9e:08:97:7e:71:41:
         5b:de:93:f4
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUcxrOpW2EpPvTNgyMnSVhnbcximwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjUzMjdaFw0yNzA1MjEwNjU4MjdaMDMxMTAvBgNV
BAMTKERFMTRENEZCRUM0NEIxMzI2MTZFQzBCQkYxNDU2MTZGMjRGREUxQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEiGXE40AB+eOHpEXl57FD1PNS
rliIkAsQYLthrBs1RWH5ZgtpMr1jqRGvrWuV/owEL/SlZEr5pQXuR8qL9cuT+dRx
0myhin9J5AP4N8RZE/6lQCvFemmop/1l39tnIBACxXV0bFcyCUIwP1BkIYtHDhsz
e6T9cRNbmyugNVqS9Gz6BvKbsQP7WMQCd1qoFvW0nKegAQfSIpTpL+MrJSkKks17
LxE30RRv75zENSm3VPjc70i1A1porHYcFPY3KBCgO5d7k493MKXek232z5+mg9Jn
8KuaYp1aInKuLn3ui8XcwvSROpJzw1AWQUnlNRENlWlZI8/iNDJmbXKqfPGHAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU3hTU++xEsTJhbsC78UVhbyT94cwwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyNzE0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqgQDANBgkqhkiG9w0BAQsFAAOCAQEAozKF
M5/yTYhwTITQCvisHnznv6TkSl+3aD8iRPhleL4NaL04w6tsBBw5rs9FML1bjP9W
ur3cWF/8LMTRD0yewxew79bHhC8T8JjD2LCGTt48O/CmiSHfy1jWuC2HwrthzByk
oF+7gaPs/rq/WvG4RC0Gb8gSiSQE8CvAbv641WsE7Guxyec/PkL2bQBq7xUJjhyR
HLXWk77KRM7fa3mZ5DKeWXxIujTccLIPDqGMOndoUoOQsnFvSKFjS5rla9QK3uH1
hGLOicZ6s0hrb/ujZW8D9A+hkD2Omr/Tn5OitnbGPf9RfWScyV+bgP/hLHRvZVwB
V1YpngiXfnFBW96T9A==
-----END CERTIFICATE-----