Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142715.roa
File:                     AS142715.roa (raw, json)
Hash identifier:          sKBh1li+oAmOVQXuSyXCTEUym5/afW2JuWSPLZwCx08=
Subject key identifier:   F6:C7:46:12:67:36:D4:22:1F:1C:F0:69:3D:D5:A0:29:16:63:14:99
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       459741C4C818F7EADD9835771B51C2B9DB6F46B1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142715.roa
Signing time:             Mon 25 May 2026 01:20:27 +0000
ROA not before:           Mon 25 May 2026 01:15:27 +0000
ROA not after:            Mon 24 May 2027 01:20:27 +0000
asID:                     142715
IP address blocks:        240a:a041::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:97:41:c4:c8:18:f7:ea:dd:98:35:77:1b:51:c2:b9:db:6f:46:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:15:27 2026 GMT
            Not After : May 24 01:20:27 2027 GMT
        Subject: CN=F6C746126736D4221F1CF0693DD5A02916631499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1d:ce:e4:86:88:dd:6f:4a:ab:64:2a:b5:53:
                    82:3a:43:1d:8a:1d:ff:c3:96:6d:0c:d1:ca:a0:be:
                    1b:f9:4a:90:27:a7:d9:13:fd:90:87:9b:eb:ff:80:
                    fa:19:3b:46:d0:aa:df:b4:0a:32:ba:0b:0c:4c:47:
                    95:33:de:5a:4c:05:9a:b4:d4:ae:d4:af:88:d6:21:
                    bb:78:ed:54:34:21:99:51:2d:4a:16:2c:0f:d7:6b:
                    4d:17:68:a4:6e:d5:57:2b:fd:05:d5:ca:7b:00:fe:
                    ea:cc:31:22:b7:45:f8:05:ee:11:f6:ba:b3:de:90:
                    65:be:72:e5:72:d6:50:48:e7:a6:d0:ae:3b:8a:69:
                    5e:1e:96:7a:6a:d3:4a:82:bf:b9:7a:10:d4:58:53:
                    d7:0f:19:94:d7:2b:03:d6:16:f5:9e:de:c4:aa:21:
                    d7:18:34:c8:36:0b:90:7e:0c:02:a2:91:14:01:7c:
                    f8:94:41:6c:d9:35:35:35:c1:07:e0:f4:ce:9a:76:
                    b4:ab:fc:46:a7:38:c5:7c:ba:a5:02:89:6f:d8:2d:
                    06:8a:4a:80:00:1e:b8:7f:ac:c6:37:8e:1d:0e:94:
                    2c:10:66:5a:5b:c0:90:49:a8:d7:73:9a:0d:bc:90:
                    e1:9e:8f:1e:b1:0a:37:40:2e:3b:3b:06:ce:eb:3c:
                    39:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C7:46:12:67:36:D4:22:1F:1C:F0:69:3D:D5:A0:29:16:63:14:99
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142715.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a041::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:f3:08:84:cb:62:1a:c4:b0:68:c9:da:a0:b4:ed:71:46:38:
         c5:ba:26:ae:0e:4a:65:70:c3:23:8a:38:e7:21:02:66:05:23:
         8d:65:a1:a7:39:0d:65:45:9b:b1:6a:54:ac:85:67:db:b9:cb:
         ec:3b:9e:f6:32:b9:c1:a2:22:4a:e0:4c:14:1c:8e:ee:62:88:
         32:ea:9f:27:5f:de:03:10:2f:70:16:2c:69:54:e9:fb:39:3e:
         73:16:37:a3:15:02:59:c6:7e:d9:c9:c9:db:02:ff:c1:ca:b2:
         f2:29:f0:eb:ab:76:98:f8:26:78:0f:e4:76:92:cd:e5:5e:44:
         cd:b9:4b:fe:6f:89:72:73:fc:bd:1c:d1:4c:e7:5b:72:58:66:
         51:15:42:90:c2:00:c3:68:df:a8:7b:eb:db:40:49:46:9f:30:
         ba:5e:2a:92:c8:a4:49:d6:c1:ed:77:62:c0:a3:74:28:8f:0c:
         27:0a:93:37:6c:46:fe:b6:c4:5f:eb:dd:95:36:3c:4f:15:9f:
         e9:09:c9:ab:50:5b:a0:c5:aa:a0:15:01:23:2b:2a:d7:6e:65:
         a0:3d:c2:0f:ca:8c:ab:39:f7:81:60:ca:c9:bc:dc:41:fa:fa:
         4f:5e:21:0b:cc:d4:71:7e:6b:96:53:38:80:79:48:f8:d9:09:
         93:c3:8b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:24:37 2026 by rpki-client