Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142717.roa
File:                     AS142717.roa (raw, json)
Hash identifier:          AfdWEdGU93Owmkcyl+TrtbLnOdqilRnkLAD15TFGYKU=
Subject key identifier:   47:42:39:A6:DE:2F:6B:C5:B4:BD:D3:4B:BD:C4:AA:B9:4B:63:21:3F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4AF69B6D88CEC6B9C7458FA8F495DC402BE8CF2C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142717.roa
Signing time:             Fri 22 May 2026 07:32:23 +0000
ROA not before:           Fri 22 May 2026 07:27:23 +0000
ROA not after:            Fri 21 May 2027 07:32:23 +0000
asID:                     142717
IP address blocks:        240a:a043::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:f6:9b:6d:88:ce:c6:b9:c7:45:8f:a8:f4:95:dc:40:2b:e8:cf:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:23 2026 GMT
            Not After : May 21 07:32:23 2027 GMT
        Subject: CN=474239A6DE2F6BC5B4BDD34BBDC4AAB94B63213F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a2:f0:1e:6b:7d:cd:28:0a:a9:15:ea:e0:3d:
                    b6:f5:f5:fe:b7:50:38:2a:81:69:8a:2e:a2:bc:39:
                    70:dd:db:fb:4c:a2:6c:92:c7:85:fb:16:1b:43:df:
                    6f:0c:ca:0e:24:c3:23:ad:6f:ea:31:2d:30:2b:8d:
                    33:e0:df:eb:1f:df:99:4d:7d:75:bb:f4:8c:75:34:
                    a7:54:8b:14:e3:17:ee:fa:eb:fc:f5:04:c3:fc:26:
                    c1:0c:09:dd:34:b3:ef:1f:76:f9:76:cd:f0:21:a8:
                    1a:8b:2e:8f:59:df:8f:3b:d3:64:79:5a:bb:09:8e:
                    0b:cd:a2:bd:fb:9c:6c:d8:f5:f4:f5:15:25:2b:c0:
                    e6:6a:1b:fa:21:92:5a:fd:1a:53:c6:0c:44:37:ab:
                    00:65:bc:10:10:6b:42:a1:6d:fd:58:45:7f:fd:57:
                    e6:ff:e8:85:eb:0a:18:84:e5:40:8f:bc:c1:59:af:
                    d8:25:b9:d6:96:11:7d:c4:7b:1b:ea:29:8e:60:6e:
                    4d:ee:c8:bb:53:8a:d2:fa:6a:22:d4:36:c2:50:af:
                    75:70:4a:08:47:39:f3:68:34:b9:12:14:41:e8:59:
                    f7:68:5e:37:35:91:67:c2:7b:82:88:ec:7f:8a:9e:
                    1b:f5:aa:88:df:bf:e1:e4:bb:61:88:c4:f9:b9:e1:
                    5b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:42:39:A6:DE:2F:6B:C5:B4:BD:D3:4B:BD:C4:AA:B9:4B:63:21:3F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142717.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a043::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:c5:1b:31:0f:ae:6c:17:47:17:c0:3d:ee:f0:e7:d1:56:11:
         65:11:2b:03:e9:6d:24:16:9f:65:39:4f:63:a6:3d:55:d8:d7:
         f7:85:6a:db:3a:01:1c:15:fe:3c:f5:17:5e:c2:0e:5b:c6:c5:
         27:b7:90:bf:db:c0:67:a2:bd:c6:5a:36:8a:6d:de:70:0b:4a:
         b9:5f:ad:4a:86:0c:9a:d8:e0:ea:0d:bb:bd:38:d8:01:b6:a1:
         b7:08:ff:d1:97:5a:77:b8:f1:14:41:28:a6:04:e0:22:77:36:
         ac:61:d5:6f:f8:d7:40:8c:f7:26:de:ef:d1:de:37:b8:39:ec:
         3d:09:16:1e:b2:e1:8a:dd:a5:0c:18:2f:78:7c:99:6f:4f:39:
         db:f7:ef:0c:7f:1c:78:27:65:77:7c:6c:f5:f2:f8:bd:df:67:
         a8:56:77:41:26:e0:35:ef:84:af:45:45:36:84:1f:37:46:48:
         5b:a3:40:f0:58:12:99:e2:40:74:77:e0:9c:78:c0:8c:9c:98:
         cf:f8:05:38:7d:72:c8:95:67:c4:a0:86:63:1a:93:9d:1e:41:
         4f:75:ee:16:5f:a0:56:21:3d:44:ae:8d:30:00:d8:25:a0:dd:
         58:bb:d9:07:6a:15:71:1a:90:f8:ef:20:21:72:35:f0:19:c0:
         d4:9c:c1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----