Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142775.roa
File:                     AS142775.roa (raw, json)
Hash identifier:          IlSu9sCq3u23SxQwHx2uCo3V+flxclt/9baoi9v7B0M=
Subject key identifier:   54:C4:F1:C5:CA:81:C5:8F:11:BF:16:06:6E:F1:24:CA:85:82:29:E0
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4BDA564D4D80C05F2B6F0FD5DB3C441D4B69F9F7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142775.roa
Signing time:             Fri 22 May 2026 07:08:53 +0000
ROA not before:           Fri 22 May 2026 07:03:53 +0000
ROA not after:            Fri 21 May 2027 07:08:53 +0000
asID:                     142775
IP address blocks:        240a:a07d::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:da:56:4d:4d:80:c0:5f:2b:6f:0f:d5:db:3c:44:1d:4b:69:f9:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:03:53 2026 GMT
            Not After : May 21 07:08:53 2027 GMT
        Subject: CN=54C4F1C5CA81C58F11BF16066EF124CA858229E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:32:f9:54:4b:4f:c7:f1:2e:89:44:c9:38:0a:
                    d2:2b:0c:0f:11:db:57:b7:60:99:92:54:51:fa:44:
                    06:ac:99:58:d0:05:d3:a3:df:30:b8:63:ed:32:5f:
                    8f:33:6c:2b:78:03:0b:76:0e:5b:44:21:a6:53:56:
                    6e:a4:93:d6:d3:99:51:8d:3e:b2:7d:fd:46:f4:2c:
                    d3:fa:c4:7d:e7:3b:80:ef:eb:d0:de:a0:c9:a0:5d:
                    02:ed:48:0b:33:61:d2:aa:b2:a9:8f:09:47:4e:cb:
                    5f:cf:1d:17:fb:63:09:a8:ee:09:07:ff:6c:07:14:
                    99:91:f0:66:f8:44:dc:1f:3e:f3:98:84:28:a6:cc:
                    7c:4b:31:ee:3d:38:0e:d7:a2:39:dc:4e:32:db:11:
                    57:85:03:a2:2e:2a:4c:4d:cb:d5:07:7d:df:5f:26:
                    d3:5d:20:5d:b8:5e:df:1c:4a:cd:2e:33:95:19:43:
                    ce:11:7d:a4:22:b9:a2:d3:29:d2:6f:ee:cc:d1:67:
                    35:22:77:30:c5:77:20:09:32:3f:54:33:da:85:6d:
                    a3:6a:9c:2f:96:a4:7e:6a:08:9e:7f:8e:b1:c0:94:
                    fd:82:13:22:b6:c0:70:1f:9b:3e:fb:a8:e9:2b:17:
                    0a:d8:f8:7c:c3:44:42:c0:bb:c1:13:87:64:3e:ee:
                    41:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C4:F1:C5:CA:81:C5:8F:11:BF:16:06:6E:F1:24:CA:85:82:29:E0
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142775.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a07d::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:d8:28:a9:ef:2e:cf:90:25:aa:d5:35:05:d0:34:51:33:71:
         16:78:7e:e1:e8:a2:5f:bb:ca:09:36:66:c1:41:b9:76:ba:7d:
         18:8c:de:ce:30:4b:23:a3:b2:f4:ee:04:6c:0b:27:1a:ea:14:
         ad:ea:e3:92:0e:74:32:7b:09:01:04:42:07:04:04:82:78:fe:
         4c:a0:c7:24:cc:38:4d:d7:6b:aa:bb:17:8b:31:e6:07:8f:6e:
         4e:99:d4:01:39:5d:2f:b4:f8:20:d0:bf:f4:f2:f2:87:bc:81:
         75:c5:01:49:f4:f4:70:09:d4:f8:e0:62:e4:d4:98:5b:fa:6e:
         97:c7:52:3b:9c:7d:13:2e:ea:1a:e5:68:b2:e1:fe:a2:87:df:
         82:c8:27:8e:b1:15:11:80:f6:8d:d8:91:84:cb:cb:44:cb:c9:
         56:44:56:ca:55:36:92:bc:0d:72:4b:ad:54:ad:11:e0:02:02:
         27:df:e8:da:31:0f:87:37:f2:16:4e:04:f4:55:c0:ce:10:5d:
         59:4b:72:02:ab:09:5c:b5:e5:9a:54:90:70:94:38:d4:68:fd:
         4a:93:4b:09:17:d3:92:2a:18:98:1c:85:1d:39:83:c2:2d:a3:
         dc:5c:15:0a:23:96:c5:72:35:4e:1e:e0:26:00:c7:4a:cf:94:
         aa:dd:44:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:48 2026 by rpki-client