Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142716.roa
File:                     AS142716.roa (raw, json)
Hash identifier:          svjwodLz6MoIRyDU6AlLtz/FSIJQHDIDOPKSq38cs4M=
Subject key identifier:   AC:27:A0:BB:EC:EE:CF:7E:0D:36:85:59:0E:80:EC:D4:6C:57:98:D7
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6B6AC96865104BB857603B9C457920CF582022AF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142716.roa
Signing time:             Fri 22 May 2026 04:07:58 +0000
ROA not before:           Fri 22 May 2026 04:02:58 +0000
ROA not after:            Fri 21 May 2027 04:07:58 +0000
asID:                     142716
IP address blocks:        240a:a042::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:6a:c9:68:65:10:4b:b8:57:60:3b:9c:45:79:20:cf:58:20:22:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:02:58 2026 GMT
            Not After : May 21 04:07:58 2027 GMT
        Subject: CN=AC27A0BBECEECF7E0D3685590E80ECD46C5798D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9e:da:a7:ec:9f:d9:c0:0f:e1:3d:9c:d3:39:
                    fc:96:b5:d5:ec:f3:22:4b:31:ad:fc:e9:30:1c:f9:
                    86:7d:58:cf:26:b4:cb:c2:3c:f5:9e:37:fc:91:cd:
                    f7:ec:6d:53:d2:67:00:0c:ed:35:25:d8:cc:e2:d1:
                    05:9b:d8:d7:79:06:86:44:f8:e3:d1:ce:cb:ad:fd:
                    af:fa:e0:c9:74:52:a6:ab:9f:c8:0a:58:cc:4f:ea:
                    03:d2:c8:da:0d:d8:e4:35:a5:79:8c:6d:51:90:6a:
                    ff:03:76:d2:4e:4d:20:dd:a8:3e:48:6b:be:8f:7f:
                    94:a3:ff:88:d1:26:0d:ce:94:fd:eb:9a:b9:8f:bd:
                    39:a1:3c:8d:52:88:f8:ae:79:e0:59:3c:0e:07:a9:
                    36:33:60:36:44:2e:48:f1:1a:0a:19:71:05:3e:4c:
                    bd:7f:ac:35:b2:f8:43:e3:39:2d:db:2a:60:07:c4:
                    65:62:36:c8:9c:f4:80:43:3b:c6:8e:30:d1:a6:19:
                    6d:d3:57:35:b7:21:b3:ba:c4:56:5c:62:1f:87:63:
                    79:12:b2:6e:44:a3:20:31:f5:ce:db:22:17:84:d3:
                    48:e3:1e:ea:9b:fb:a5:c6:e1:a4:99:70:6b:71:28:
                    9a:e8:53:36:eb:4b:86:89:6c:18:d3:81:27:97:18:
                    82:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:27:A0:BB:EC:EE:CF:7E:0D:36:85:59:0E:80:EC:D4:6C:57:98:D7
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142716.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a042::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:63:56:70:18:f2:07:b3:af:00:35:f5:7f:32:45:d1:23:5a:
         bc:c4:8d:dd:3b:2f:35:3a:cb:2f:74:d2:04:e4:57:2e:8f:09:
         09:48:22:f7:e0:f1:04:ad:0d:d8:c7:0e:e2:6f:c4:07:07:af:
         1d:d5:bb:25:45:8a:c4:77:6e:b0:35:64:70:fc:68:a8:61:8c:
         6d:a0:b0:12:d3:e1:41:98:34:78:c2:40:0d:36:6a:9d:0b:d9:
         93:7b:6b:d5:f0:40:fb:5b:94:d7:af:98:22:54:ac:a3:e5:35:
         bc:f8:59:79:0c:e6:6f:ff:ec:99:a2:d3:61:8c:3f:4f:a8:04:
         5b:40:94:c3:21:96:b4:d5:fa:66:24:b3:04:6f:12:34:b0:e4:
         db:fe:a0:54:f2:3c:95:80:a0:76:7d:98:11:d9:3e:2f:8d:66:
         9b:dd:56:a2:1f:23:69:50:d4:b7:c9:a7:bd:cb:3d:4c:a0:cf:
         ff:9a:eb:c9:68:2b:fe:dc:74:8e:53:cf:af:ab:4d:55:2d:de:
         9e:38:2f:72:1a:60:90:c4:d0:8d:43:cf:3f:4c:58:fd:11:42:
         9b:c3:f6:9d:bd:57:8b:c9:46:d4:18:43:c8:21:f2:17:19:60:
         e2:c5:8c:67:d6:91:06:99:7a:88:39:30:06:88:4f:8a:b1:e1:
         7a:59:0b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:10 2026 by rpki-client