Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142747.roa
File:                     AS142747.roa (raw, json)
Hash identifier:          u+Oa14I8Z18WhQuj4HPFgOvsS8mZj8aOpNQe4vZJt3Y=
Subject key identifier:   84:5B:7F:AE:0D:1B:0D:04:B1:11:A0:17:7C:92:C5:6C:04:00:28:3A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4078C2E06C616676487B5365971A92C05DC86E13
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142747.roa
Signing time:             Fri 22 May 2026 06:58:39 +0000
ROA not before:           Fri 22 May 2026 06:53:39 +0000
ROA not after:            Fri 21 May 2027 06:58:39 +0000
asID:                     142747
IP address blocks:        240a:a061::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:78:c2:e0:6c:61:66:76:48:7b:53:65:97:1a:92:c0:5d:c8:6e:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:39 2026 GMT
            Not After : May 21 06:58:39 2027 GMT
        Subject: CN=845B7FAE0D1B0D04B111A0177C92C56C0400283A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:97:0f:0f:f2:b5:70:67:55:48:99:c9:45:5c:
                    30:87:a9:df:de:dd:e3:e3:a2:6b:cc:77:46:4f:fe:
                    b3:12:d9:ca:e1:14:2e:64:fc:33:b7:22:b0:cd:3e:
                    7e:d3:be:a5:cc:84:89:e5:af:c1:98:f1:11:dc:7f:
                    a9:d5:65:7c:0c:cf:d3:f1:1e:88:8c:60:b0:ff:06:
                    a2:66:c1:90:4e:6e:26:67:95:e8:2c:e3:eb:15:93:
                    70:34:a7:f6:5f:20:cc:80:e2:71:15:d1:ba:aa:06:
                    89:79:d7:32:80:fc:7a:ea:57:91:98:c5:bb:3e:a0:
                    b5:2e:fc:1d:01:ad:6d:0e:5c:5d:b3:38:81:81:2d:
                    65:29:f0:2d:45:31:7e:19:78:61:e4:68:bf:18:29:
                    b4:31:b8:91:5d:90:f0:95:2d:a4:52:55:9d:c9:19:
                    76:d0:17:01:62:3a:f8:23:cd:8f:fb:b7:4c:43:24:
                    e6:ca:58:52:04:7d:8f:1d:38:0b:17:b6:22:23:0c:
                    1e:36:8c:ad:85:33:d2:41:50:2c:b2:8a:bf:b6:49:
                    c3:7f:c7:77:f6:31:57:8c:27:6f:09:db:88:1d:56:
                    84:f6:c9:ec:5c:5f:e9:56:64:26:83:e5:a9:75:e8:
                    bd:f8:3a:2e:2a:b2:2f:25:c7:b9:67:90:f2:36:34:
                    7a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5B:7F:AE:0D:1B:0D:04:B1:11:A0:17:7C:92:C5:6C:04:00:28:3A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142747.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a061::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:ee:82:a1:fe:c8:6b:ba:63:37:69:ef:34:e9:52:a4:ab:d7:
         04:c7:a0:e7:84:c9:86:61:7a:4e:74:3b:3b:3e:76:34:c7:99:
         ce:ce:6c:31:0c:5d:9c:b4:59:b7:d4:64:02:75:62:41:e0:dc:
         1e:54:ec:dd:25:40:9f:11:77:81:ec:e5:fa:e9:63:5e:73:ac:
         70:32:01:95:aa:3b:55:31:93:bb:1f:8e:07:f2:3c:c1:88:4e:
         92:60:9b:99:7e:8e:10:df:33:9c:0c:9f:6d:53:88:d5:7e:fd:
         c8:e2:77:ad:fb:0c:d6:6a:11:66:1e:e5:53:d3:91:17:61:f8:
         8e:99:d6:56:a0:5f:c2:36:b6:e2:f6:46:c1:25:da:ad:59:94:
         c5:c5:da:25:fe:c7:a3:cc:3b:3e:ec:22:1c:79:c8:32:af:95:
         63:f9:b8:bc:0a:76:8e:c5:18:20:09:88:66:7c:23:ac:35:b8:
         87:a3:c6:e3:8c:4e:64:30:9d:61:a3:77:1b:d0:a6:fa:67:fb:
         2f:14:94:8f:a7:ba:c8:ba:5d:66:67:df:3c:1b:55:1c:ad:ab:
         d7:34:85:3d:56:3b:33:37:0d:b8:4a:26:3b:ef:2a:d5:ff:4f:
         a7:21:b1:18:3b:83:52:3b:71:2c:9a:95:9d:0e:bd:99:d1:ed:
         cd:0a:5d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----