Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142792.roa
File:                     AS142792.roa (raw, json)
Hash identifier:          ltsjoYiniJATAqWumwPcsJE/vAW4MJYte/mJXd0ep7g=
Subject key identifier:   F3:BD:83:B5:48:1A:F4:05:3E:3A:6A:C0:B7:0B:F3:F9:6F:3B:DB:88
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       665C367EB7243CCFF1B6CD7D4131C19B19AC3E4D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142792.roa
Signing time:             Tue 26 May 2026 08:53:01 +0000
ROA not before:           Tue 26 May 2026 08:48:01 +0000
ROA not after:            Tue 25 May 2027 08:53:01 +0000
asID:                     142792
IP address blocks:        240a:a08e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:5c:36:7e:b7:24:3c:cf:f1:b6:cd:7d:41:31:c1:9b:19:ac:3e:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 08:48:01 2026 GMT
            Not After : May 25 08:53:01 2027 GMT
        Subject: CN=F3BD83B5481AF4053E3A6AC0B70BF3F96F3BDB88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:57:32:a2:12:07:94:2c:fb:d3:56:8f:ec:c2:
                    d1:85:0f:78:a6:9f:dc:8a:5f:be:b4:62:94:b8:73:
                    4e:72:59:38:9a:78:ce:2f:fe:ac:aa:96:ec:d0:8d:
                    90:24:0c:15:55:4a:88:45:a0:73:22:2a:b7:99:06:
                    db:dc:31:42:05:db:08:bf:83:63:82:57:ea:f4:ff:
                    00:de:6d:49:36:14:a3:ed:46:7c:17:d7:96:b4:93:
                    f5:66:16:c9:9d:fe:d4:aa:5f:f3:bc:01:6e:f1:6d:
                    9a:f2:66:84:75:be:3f:30:9e:3c:9e:d1:3f:ff:ab:
                    37:71:3c:2c:48:7c:cc:67:b6:86:a1:03:4f:04:5e:
                    fa:5d:6c:a4:a2:d7:1c:39:a0:8c:9d:00:6e:80:d9:
                    78:6a:ca:08:0b:4e:b6:50:96:b8:e3:b4:6d:ce:26:
                    65:db:d1:ef:0b:b3:f3:a1:5e:c7:fa:5c:7c:26:71:
                    22:5d:c9:03:44:92:36:ee:2f:98:36:a3:b4:4e:9a:
                    43:eb:c2:01:91:57:86:73:15:3c:b4:74:fc:95:01:
                    71:1c:21:84:9f:69:1d:be:bc:b4:2d:01:60:72:3c:
                    27:a3:a8:bc:a2:94:83:af:ae:50:2d:37:45:d4:0a:
                    0f:15:e0:fc:e9:74:6d:98:bc:90:bb:f9:7a:dd:a7:
                    2d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:BD:83:B5:48:1A:F4:05:3E:3A:6A:C0:B7:0B:F3:F9:6F:3B:DB:88
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142792.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a08e::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:16:99:45:ff:a0:db:33:bf:4c:8f:ba:bb:95:52:96:45:d5:
         0e:d1:4c:6d:73:1c:73:07:bb:d2:8e:0a:25:42:3a:c9:83:f2:
         10:b7:20:92:0e:c9:20:6b:da:1d:58:ca:3f:2d:18:3e:3e:35:
         7f:a0:b2:95:58:e4:6f:54:25:cf:6e:d7:a6:b9:22:f1:d3:16:
         05:5c:68:76:c8:fb:25:a3:ee:4f:a3:68:0b:67:10:71:59:cd:
         5f:76:c0:9e:79:33:c0:b6:61:a8:38:f1:66:bb:f9:c1:11:48:
         bb:23:68:38:a7:1e:0b:c4:97:0b:cc:e1:3e:2b:e2:fd:3d:49:
         e1:97:fb:6f:0f:a4:ed:bb:5e:b6:38:4e:3e:54:c6:8d:31:5c:
         5d:71:b0:a7:be:e0:b6:63:0c:b6:f4:42:c8:df:0f:cf:9a:29:
         10:07:80:23:f4:ca:df:26:42:ca:33:3b:2d:a7:74:c4:b1:b3:
         61:a1:9a:58:40:7a:90:3d:e3:74:89:a6:64:d6:f1:8a:61:a0:
         6a:05:a1:a8:01:82:3c:1b:d2:ed:c1:34:c7:03:fb:e4:30:2a:
         12:a4:f9:49:37:36:82:4c:33:5e:7c:b3:2c:45:94:ae:65:40:
         ae:79:75:4e:0d:4c:32:2f:76:16:74:97:77:c6:e8:d8:7d:4f:
         0a:25:62:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:47 2026 by rpki-client