Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142782.roa
File:                     AS142782.roa (raw, json)
Hash identifier:          pDI/mzHw0GrJB7SGw7E7dbnRkrIz85M1vZ7eTgVF1Ck=
Subject key identifier:   00:38:D5:A3:89:CD:94:90:E9:8F:5B:6D:98:ED:49:06:AC:07:F3:09
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4BEA8D94A7B782873ABF399C43F0017FEF04B0F6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142782.roa
Signing time:             Fri 22 May 2026 04:26:46 +0000
ROA not before:           Fri 22 May 2026 04:21:46 +0000
ROA not after:            Fri 21 May 2027 04:26:46 +0000
asID:                     142782
IP address blocks:        240a:a084::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ea:8d:94:a7:b7:82:87:3a:bf:39:9c:43:f0:01:7f:ef:04:b0:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:21:46 2026 GMT
            Not After : May 21 04:26:46 2027 GMT
        Subject: CN=0038D5A389CD9490E98F5B6D98ED4906AC07F309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:92:b7:f6:08:90:46:fe:4f:0f:71:37:c5:af:
                    50:0a:20:1a:6f:9c:7e:5f:77:34:0e:ac:3d:cf:70:
                    25:c7:49:d2:b6:e2:12:de:e8:84:a7:89:da:84:d3:
                    3f:bf:ee:f2:62:b0:6c:73:fd:7e:d2:b8:48:78:88:
                    40:9c:06:69:f8:84:3b:5e:43:46:d2:2a:3f:08:a8:
                    9f:1f:84:6e:e6:94:34:0a:84:62:59:c5:84:f1:94:
                    93:da:fe:a2:21:a1:04:9b:c2:bc:37:f2:9b:c7:fb:
                    98:7b:72:81:e3:b0:86:01:f2:b6:71:35:de:b0:68:
                    ef:29:9f:32:71:53:99:7f:c7:62:1f:90:37:64:21:
                    c1:d4:fe:b3:6e:6b:1a:8d:1a:fa:5d:5e:9a:7b:99:
                    d0:b1:ea:38:53:b2:8e:02:bb:b4:06:80:26:e5:df:
                    7f:89:8b:32:e5:4e:a3:cd:2f:c3:b7:56:4e:9a:6d:
                    21:08:8b:de:44:9e:f0:29:f0:3c:df:fa:a4:bb:cc:
                    84:d3:fc:cc:af:8c:d9:7a:30:0a:01:2d:c7:20:5e:
                    7d:19:dc:25:45:6c:e7:64:33:ad:2d:3c:ca:8d:78:
                    70:ee:ba:7d:d0:1c:e7:4f:73:27:5c:13:4e:eb:e6:
                    6c:81:10:4a:17:78:45:13:34:7d:98:16:09:e7:a7:
                    81:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:38:D5:A3:89:CD:94:90:E9:8F:5B:6D:98:ED:49:06:AC:07:F3:09
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142782.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a084::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:09:4c:9c:c8:54:52:4f:5f:53:92:67:58:6a:f8:32:2b:d7:
         55:18:eb:0f:60:7e:25:df:d0:2a:9e:60:bb:4e:04:64:af:af:
         ab:7b:ef:0c:2e:0c:37:44:5b:7e:bf:a9:08:52:8d:b5:b0:e6:
         7b:1a:cb:45:e8:8a:45:f0:2c:3a:5e:1f:66:4d:00:ec:de:cb:
         f0:d6:65:7e:7d:6f:61:d9:c2:d0:5a:70:5c:2a:b4:74:cd:1b:
         ff:71:20:f4:74:2f:8e:ed:03:ba:f7:36:d6:79:52:f7:13:a8:
         3b:c9:b6:ac:f1:fa:db:a0:0d:61:25:b6:32:d2:55:3b:e1:a7:
         1c:84:56:68:f6:82:3c:79:72:2b:da:72:2a:02:77:81:d5:d7:
         2e:96:a8:f9:50:fc:d2:f2:48:da:45:9b:a0:74:f8:d9:5f:22:
         75:f1:f1:70:f1:72:ad:12:93:5a:0b:49:4e:40:39:d3:a5:27:
         36:0e:3a:67:92:0e:8f:30:a8:c8:01:13:d5:6e:81:ed:01:71:
         aa:4a:e6:b2:3d:09:98:d0:46:94:47:6d:02:a1:cf:c1:96:6e:
         3f:0c:9c:72:cc:5f:7b:ac:26:e1:a8:6d:5f:9b:f3:64:ce:6e:
         d2:c4:43:58:2a:c7:0f:da:0a:a2:9c:74:e1:f2:12:db:ae:31:
         c1:2b:1a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:35 2026 by rpki-client