Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142724.roa
File:                     AS142724.roa (raw, json)
Hash identifier:          FGlSc58f26mvW94pcNrRqPGIxNopalr4/VCqplqkq24=
Subject key identifier:   CE:43:6B:CA:B4:BD:C1:70:5C:A4:A2:05:C5:CE:BA:B1:92:E4:0F:20
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       77023CC6A13CA95EB905B2A33D82A6F7973C35D3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142724.roa
Signing time:             Fri 22 May 2026 07:32:05 +0000
ROA not before:           Fri 22 May 2026 07:27:05 +0000
ROA not after:            Fri 21 May 2027 07:32:05 +0000
asID:                     142724
IP address blocks:        240a:a04a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:02:3c:c6:a1:3c:a9:5e:b9:05:b2:a3:3d:82:a6:f7:97:3c:35:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:05 2026 GMT
            Not After : May 21 07:32:05 2027 GMT
        Subject: CN=CE436BCAB4BDC1705CA4A205C5CEBAB192E40F20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:45:09:d7:43:3a:d2:d6:28:16:4c:45:e4:7c:
                    d1:2a:d3:e5:84:2a:be:5f:12:5f:78:a9:c1:3e:d6:
                    f1:87:fe:d6:ef:da:78:4d:50:aa:6c:54:40:78:dc:
                    d3:02:4a:5b:39:39:5e:76:61:31:6f:15:7a:4f:0c:
                    4c:2e:bb:80:b3:ee:e1:71:4c:0d:1d:d1:0e:b8:83:
                    12:19:77:da:68:fb:67:44:f7:1d:74:3a:dc:74:2f:
                    1a:bd:bb:99:1a:b9:fe:88:ba:5f:89:81:3e:b1:05:
                    c8:0b:52:ed:f8:23:2a:36:9e:a2:6b:73:e5:01:52:
                    2c:df:dc:a5:c0:37:0c:d0:8f:14:47:06:03:d2:68:
                    13:7c:74:e5:7b:74:4e:6a:f4:91:d7:f2:00:ee:67:
                    14:3c:12:35:9d:28:d7:c4:f4:b4:2f:bb:66:d6:03:
                    64:87:c5:65:21:35:24:2c:60:53:c5:54:3e:75:ca:
                    70:2e:a5:73:37:c5:65:da:dd:2e:de:2d:17:93:ed:
                    d3:f9:9b:04:a0:45:b2:49:99:db:17:4d:67:a6:d8:
                    ba:b9:ee:2a:6a:a6:ae:39:c5:13:de:e6:57:2c:b3:
                    a6:cc:2b:f0:5b:06:66:b6:0a:76:1f:35:94:d0:98:
                    d1:36:21:c0:e2:0a:55:45:80:a3:2a:32:96:14:99:
                    8f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:43:6B:CA:B4:BD:C1:70:5C:A4:A2:05:C5:CE:BA:B1:92:E4:0F:20
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142724.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a04a::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:44:06:3b:25:a0:b4:d0:40:61:f0:43:88:e3:8c:9c:d0:99:
         1d:71:29:76:9d:25:bd:a9:85:72:7d:22:44:92:d2:b1:14:2f:
         d1:a3:f2:ef:4c:14:a8:40:9a:c2:bc:db:75:78:75:0f:02:ff:
         d5:7b:35:a1:2c:00:8f:a6:0f:5d:8f:14:e7:1c:ea:62:dc:94:
         c6:30:48:4e:57:d8:15:e9:5b:4b:71:16:8f:5a:9f:fb:34:2b:
         7c:2e:71:23:96:6f:b1:ee:d4:4e:ea:52:ce:53:88:33:cd:2c:
         4d:08:8c:33:16:89:03:31:41:0c:a7:29:0b:45:25:dc:0f:89:
         a8:ae:e6:1b:80:2a:8f:66:28:3b:1d:d9:e1:a6:bb:ae:05:cf:
         15:4a:6b:4c:f3:4d:ee:fc:0e:79:ba:0b:b0:ac:ce:6f:8c:ec:
         9c:16:33:01:b4:e7:f6:8d:1c:11:2a:50:d1:6b:95:85:38:45:
         b5:69:04:f2:5f:fc:80:c2:ef:71:fb:9b:54:91:77:f1:3e:49:
         93:13:ec:98:53:e6:da:00:04:88:cd:0b:42:ec:43:86:6a:b2:
         d0:8d:e6:1f:d1:9a:87:b2:eb:51:e3:4c:5f:79:f3:b1:4e:9b:
         7d:0c:59:a0:47:a9:5c:a6:76:54:da:a3:b4:fc:5c:2e:52:a0:
         37:8e:44:92
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUdwI8xqE8qV65BbKjPYKm95c8NdMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzI3MDVaFw0yNzA1MjEwNzMyMDVaMDMxMTAvBgNV
BAMTKENFNDM2QkNBQjRCREMxNzA1Q0E0QTIwNUM1Q0VCQUIxOTJFNDBGMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0RQnXQzrS1igWTEXkfNEq0+WE
Kr5fEl94qcE+1vGH/tbv2nhNUKpsVEB43NMCSls5OV52YTFvFXpPDEwuu4Cz7uFx
TA0d0Q64gxIZd9po+2dE9x10Otx0Lxq9u5kauf6Iul+JgT6xBcgLUu34Iyo2nqJr
c+UBUizf3KXANwzQjxRHBgPSaBN8dOV7dE5q9JHX8gDuZxQ8EjWdKNfE9LQvu2bW
A2SHxWUhNSQsYFPFVD51ynAupXM3xWXa3S7eLReT7dP5mwSgRbJJmdsXTWem2Lq5
7ipqpq45xRPe5lcss6bMK/BbBma2CnYfNZTQmNE2IcDiClVFgKMqMpYUmY/JAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUzkNryrS9wXBcpKIFxc66sZLkDyAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyNzI0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqgSjANBgkqhkiG9w0BAQsFAAOCAQEAJUQG
OyWgtNBAYfBDiOOMnNCZHXEpdp0lvamFcn0iRJLSsRQv0aPy70wUqECawrzbdXh1
DwL/1Xs1oSwAj6YPXY8U5xzqYtyUxjBITlfYFelbS3EWj1qf+zQrfC5xI5Zvse7U
TupSzlOIM80sTQiMMxaJAzFBDKcpC0Ul3A+JqK7mG4Aqj2YoOx3Z4aa7rgXPFUpr
TPNN7vwOeboLsKzOb4zsnBYzAbTn9o0cESpQ0WuVhThFtWkE8l/8gMLvcfubVJF3
8T5JkxPsmFPm2gAEiM0LQuxDhmqy0I3mH9Gah7LrUeNMX3nzsU6bfQxZoEepXKZ2
VNqjtPxcLlKgN45Ekg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:00 2026 by rpki-client