Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142776.roa
File:                     AS142776.roa (raw, json)
Hash identifier:          aZlfrwjKIyJzoq97IB1QqreUqLjkKeRvpD9OWi2+2Zo=
Subject key identifier:   92:4B:EF:75:8A:6E:67:AF:14:91:B6:D5:84:A9:4F:75:9C:83:E8:8F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0228DFADF363D197F8173405C34EAE90D4F66915
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142776.roa
Signing time:             Mon 25 May 2026 01:38:23 +0000
ROA not before:           Mon 25 May 2026 01:33:23 +0000
ROA not after:            Mon 24 May 2027 01:38:23 +0000
asID:                     142776
IP address blocks:        240a:a07e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:28:df:ad:f3:63:d1:97:f8:17:34:05:c3:4e:ae:90:d4:f6:69:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:23 2026 GMT
            Not After : May 24 01:38:23 2027 GMT
        Subject: CN=924BEF758A6E67AF1491B6D584A94F759C83E88F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:58:4b:84:a0:34:28:82:ad:a4:d9:1f:dd:db:
                    2a:7d:77:72:f9:c6:9c:79:4a:9e:6e:46:e4:6c:08:
                    8d:33:3c:9a:ff:98:6c:5f:3a:79:d1:f5:22:57:f4:
                    09:4b:44:f0:b7:c9:cf:4d:f7:90:69:c5:bb:2b:2a:
                    97:87:0b:38:0c:cf:eb:32:2f:0b:55:a7:06:10:47:
                    88:75:df:eb:49:34:f0:5e:72:0d:08:c0:15:a9:ab:
                    c6:51:8e:eb:45:9d:51:92:4b:ab:be:2b:f4:a5:01:
                    27:26:35:a8:83:23:a9:e7:55:fd:55:40:0a:45:7c:
                    3e:c5:aa:64:27:c5:cd:29:a1:7f:d4:ff:fc:a0:e5:
                    95:13:3d:0b:dc:e5:c9:98:8f:b2:c4:1e:e8:20:50:
                    2d:d7:53:fd:39:e3:e9:f3:db:70:6a:2f:7d:30:e9:
                    be:ce:d5:a3:17:ce:c4:6c:3f:82:b3:df:4a:9d:7e:
                    c2:aa:62:67:7f:75:93:90:b5:3e:0a:0c:5c:33:40:
                    8b:fe:6b:15:f2:5f:12:5a:58:41:f0:76:63:ad:6d:
                    ca:94:91:76:a3:52:f4:5d:a2:23:12:a3:04:f4:63:
                    6d:3a:14:da:09:b4:e7:65:67:71:c5:a0:5d:b4:24:
                    21:1a:17:ee:5e:da:d2:cb:25:04:47:2e:11:1a:b6:
                    c2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:4B:EF:75:8A:6E:67:AF:14:91:B6:D5:84:A9:4F:75:9C:83:E8:8F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142776.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a07e::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:04:ef:24:fd:b7:71:dd:0f:7c:d1:c6:cb:c3:a3:38:12:bf:
         76:4b:cf:de:92:1b:c0:b8:d6:55:51:7e:99:1d:66:1c:ab:7c:
         3e:57:4a:0d:0a:78:a6:51:91:c5:8d:27:6d:8e:1a:36:84:fc:
         53:b8:83:70:3e:f0:52:34:fa:45:12:7d:02:59:e2:31:b1:89:
         68:51:8b:34:03:38:5a:32:94:c9:49:ce:9c:7c:8f:76:7e:d7:
         08:63:4b:24:ae:6f:16:7e:8e:6e:54:00:84:1d:e0:39:7b:d0:
         29:87:97:7c:b7:e8:55:c1:c5:27:54:e3:92:f9:a5:99:19:e2:
         25:bd:a2:d7:89:f1:fd:08:c4:6f:87:ff:6a:b8:57:6c:e4:e7:
         87:4a:ee:c9:75:e3:bd:08:5b:e2:98:61:63:f9:fc:04:d3:ff:
         dc:83:74:d0:99:46:1e:f3:20:1f:26:58:85:15:f7:b3:7b:8e:
         5b:e0:b5:2c:d7:04:68:55:e8:0d:a9:c0:a4:70:47:e1:72:bf:
         d5:a5:56:a2:54:57:a4:8c:60:98:c5:bd:11:ea:4d:a9:26:69:
         aa:c7:82:f8:1c:4b:44:a2:d9:f6:ee:53:70:78:9a:a2:f2:1a:
         0c:c2:bd:c4:73:56:a9:11:bd:57:d7:d3:59:9b:11:6d:a8:e4:
         46:b6:b7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:34 2026 by rpki-client