Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142779.roa
File:                     AS142779.roa (raw, json)
Hash identifier:          Gc7Ps0FTP1I7Vh026S4+1Q8LRqxN4LBx+ZsnopsIvsU=
Subject key identifier:   BC:98:40:25:6B:33:9E:DF:70:4F:FD:76:AC:76:A0:DF:B5:40:38:47
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       035D6D730FCF4EDA1B4754AB5A8B0F84FF9E8A20
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142779.roa
Signing time:             Fri 22 May 2026 07:32:37 +0000
ROA not before:           Fri 22 May 2026 07:27:37 +0000
ROA not after:            Fri 21 May 2027 07:32:37 +0000
asID:                     142779
IP address blocks:        240a:a081::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:5d:6d:73:0f:cf:4e:da:1b:47:54:ab:5a:8b:0f:84:ff:9e:8a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:37 2026 GMT
            Not After : May 21 07:32:37 2027 GMT
        Subject: CN=BC9840256B339EDF704FFD76AC76A0DFB5403847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:68:c5:e2:69:5b:3f:da:35:8e:4d:68:ec:1c:
                    6b:fa:82:a8:85:34:ea:ba:4b:37:2b:34:44:a8:46:
                    30:7c:c5:e2:34:48:d7:fc:72:55:45:6a:fd:b1:4a:
                    9c:46:55:61:4a:3d:53:68:5f:91:94:b0:f1:ae:45:
                    c2:b8:74:5a:36:67:f6:ee:a2:fd:ef:44:8c:3b:f5:
                    f8:55:a5:a4:02:e3:0a:6d:ab:f7:f8:b9:8c:49:1b:
                    9b:f7:09:6c:8e:a9:ec:d7:ee:e2:12:12:cd:47:a2:
                    ec:69:48:cc:b3:60:b7:5b:d2:66:d7:ca:48:9a:70:
                    0f:52:35:58:fb:21:3a:2e:e9:16:03:49:ea:a7:9a:
                    b0:29:1b:12:85:6e:47:fb:72:29:7f:8a:9a:f2:db:
                    cf:ea:3b:77:74:a0:74:b3:6b:a0:aa:a7:b6:0f:e8:
                    50:57:8b:98:bc:46:bf:6e:e2:66:aa:8a:b6:b5:94:
                    2a:e1:5d:e8:44:e2:a1:28:71:92:35:92:2c:e9:a3:
                    65:d6:46:0b:26:9b:35:fe:ee:d2:24:5c:19:2a:69:
                    12:7f:1f:0f:60:cd:67:5f:9e:04:2b:e7:0a:86:ee:
                    da:fa:64:87:e2:49:7b:ec:b1:85:5b:4a:d3:56:83:
                    4f:b9:f4:76:e9:27:f2:15:51:eb:c1:b3:76:13:ab:
                    74:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:98:40:25:6B:33:9E:DF:70:4F:FD:76:AC:76:A0:DF:B5:40:38:47
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142779.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a081::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:2c:26:ae:b0:42:9a:ba:09:57:bf:3a:a4:4f:72:29:5e:49:
         d2:0f:1d:0b:1c:a3:d5:d6:16:42:7d:70:3d:57:90:a0:13:5d:
         15:d9:b4:3b:c2:23:b0:8f:82:c3:aa:73:f8:16:d0:5e:01:46:
         19:a9:70:19:a0:7e:ee:d6:e4:d7:bb:2b:da:1c:e6:3c:6a:23:
         29:27:c4:93:68:d1:6a:d2:a6:1c:2e:b9:7b:1b:e6:2f:63:26:
         88:07:5c:c4:56:6e:f4:18:ee:a6:07:6c:0e:02:ca:a5:a7:01:
         42:d8:e9:77:70:5e:f1:d2:f0:0b:3e:31:9c:6f:f0:e0:53:b5:
         60:05:9a:10:69:da:e0:cf:41:83:8a:38:ca:fa:91:e8:a4:7e:
         2d:8d:98:5b:03:94:90:c0:db:e2:d6:73:99:f2:fd:b5:e4:66:
         6d:ba:e5:7a:ab:79:71:9f:ff:14:5d:c3:50:bb:33:ae:ef:cf:
         fa:42:36:ad:bc:f8:b1:85:d4:bc:ba:c8:a8:b5:5a:43:ba:42:
         2d:5e:6e:55:06:7e:f2:e2:2b:cc:95:7b:3e:69:45:1c:b1:95:
         74:2d:f9:b1:83:17:26:4a:1e:7a:9a:38:fa:ee:cd:81:62:9a:
         ae:b6:b3:17:a8:46:ae:df:1c:5c:76:f2:32:e5:93:c1:19:36:
         13:ac:b5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:09 2026 by rpki-client