Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142741.roa
File:                     AS142741.roa (raw, json)
Hash identifier:          qfupDBjh75rF2AF1hE2fTtAkFKti07Z3thwavsvWHmo=
Subject key identifier:   6D:DB:C9:32:3B:D6:6E:90:72:F1:45:D8:CD:7D:4B:70:13:74:21:37
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       17DF0538CF299D2A0C18B732793813530251DF49
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142741.roa
Signing time:             Fri 22 May 2026 06:58:45 +0000
ROA not before:           Fri 22 May 2026 06:53:45 +0000
ROA not after:            Fri 21 May 2027 06:58:45 +0000
asID:                     142741
IP address blocks:        240a:a05b::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:df:05:38:cf:29:9d:2a:0c:18:b7:32:79:38:13:53:02:51:df:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:45 2026 GMT
            Not After : May 21 06:58:45 2027 GMT
        Subject: CN=6DDBC9323BD66E9072F145D8CD7D4B7013742137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:be:b7:bc:5a:73:55:ab:0e:d4:ae:f9:9e:47:
                    c3:7b:68:fd:0e:2f:60:b0:04:1d:db:73:61:38:d1:
                    dc:a6:fd:71:95:72:45:ab:87:b9:71:23:1c:d1:cc:
                    ea:fc:47:99:0a:fd:3e:d8:5b:e4:47:e9:0b:36:ca:
                    9c:a4:3c:3e:10:a8:24:83:22:5e:23:6e:73:39:e6:
                    fe:e1:59:1b:8c:0a:87:79:f1:9b:a2:bc:2d:03:7a:
                    c5:61:e8:3f:8b:9a:4a:e6:c3:dd:45:71:98:13:a5:
                    66:91:79:e6:39:b4:56:e9:9f:5f:d7:a0:e7:81:6e:
                    a7:00:06:53:f1:d7:ec:b2:1d:4e:00:d6:09:b6:a4:
                    e3:25:43:5d:76:19:c5:55:e8:21:fe:6d:0b:3d:87:
                    c4:f1:03:a8:b9:77:9f:6d:da:97:6d:01:4b:cd:87:
                    8b:63:ca:4d:5f:75:4c:42:02:49:ee:08:26:92:28:
                    4a:65:48:1e:f7:61:a2:e0:d1:e0:89:44:e8:9a:06:
                    7f:35:06:87:e8:10:65:1c:2a:bf:3e:69:4c:7c:7b:
                    82:a3:3a:80:2d:46:e3:e7:e4:0d:d5:86:19:2a:65:
                    13:2e:05:95:a4:1c:8c:b6:79:18:7f:44:72:48:a9:
                    53:74:e6:e4:25:1a:04:96:02:ed:8d:3e:6a:f6:3f:
                    4c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:DB:C9:32:3B:D6:6E:90:72:F1:45:D8:CD:7D:4B:70:13:74:21:37
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142741.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a05b::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:f6:6c:fa:31:63:d3:99:ff:7c:7b:ca:fb:c7:10:3d:6d:e3:
         a4:1b:4c:fd:a7:b6:2d:2b:dd:a9:3e:05:e2:4e:2a:36:e5:9d:
         3f:1c:1a:c8:4d:3b:c5:66:cf:a4:95:22:cd:c9:cd:0a:8c:5e:
         1f:3f:4c:6f:dd:9d:43:52:c1:8e:20:15:88:36:28:c7:aa:f1:
         ec:4c:93:c7:dc:f5:e5:2d:ca:82:74:fd:16:f3:ee:8a:1f:b1:
         63:88:13:10:32:82:f1:e9:03:f4:02:13:a8:ac:d3:c2:e7:ff:
         ba:0c:3b:58:73:68:d6:24:92:2a:ca:e1:04:97:7a:b7:1c:d5:
         a2:21:e4:e0:cf:03:a5:1d:63:43:3d:6b:b3:42:b5:bc:a4:97:
         48:2f:f7:3b:9e:1a:a0:31:1a:a7:d6:5c:ed:f2:09:0e:13:29:
         ff:28:03:cc:15:c6:50:d2:3d:32:74:4b:21:20:a6:75:75:1d:
         9f:93:f4:21:d4:73:28:23:d3:c0:f5:16:ac:27:8c:be:79:37:
         08:71:72:42:37:80:d3:bc:99:48:5a:79:64:30:63:63:b7:e3:
         99:e1:9a:ce:ec:15:3d:a7:a4:f0:ab:61:bb:67:64:d0:e5:a2:
         48:0c:4d:0f:5c:37:6d:3d:fc:84:8e:f9:c4:05:69:27:a3:b2:
         da:e8:98:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----