Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142795.roa
File:                     AS142795.roa (raw, json)
Hash identifier:          bL6ToBN8EuO0qVmswrf382Xa8cOwxv2z4GeRZf8fD+k=
Subject key identifier:   3F:E8:CF:3E:4B:97:7F:F4:35:EE:49:0E:91:33:3E:31:22:21:70:1F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6B83D2C8AAF3277522DA5B5E8E2919B71BBC120E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142795.roa
Signing time:             Fri 22 May 2026 02:48:00 +0000
ROA not before:           Fri 22 May 2026 02:43:00 +0000
ROA not after:            Fri 21 May 2027 02:48:00 +0000
asID:                     142795
IP address blocks:        240a:a091::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:83:d2:c8:aa:f3:27:75:22:da:5b:5e:8e:29:19:b7:1b:bc:12:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:43:00 2026 GMT
            Not After : May 21 02:48:00 2027 GMT
        Subject: CN=3FE8CF3E4B977FF435EE490E91333E312221701F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:57:b4:15:2c:23:4b:f6:83:ab:b9:b7:19:61:
                    da:66:f3:19:1f:a5:11:bd:fe:42:c4:a1:22:7e:ab:
                    d0:35:61:d9:3a:14:55:20:1d:93:34:e9:f2:3e:5f:
                    fb:2f:ce:11:02:79:fe:e6:09:d6:dd:3d:c2:02:6c:
                    54:e5:46:d7:6b:82:9a:fc:c4:f0:3e:f0:18:0d:ad:
                    0b:5e:2d:aa:ca:ba:8a:8a:fc:5e:4f:00:b0:07:28:
                    44:99:93:91:6b:7a:ef:ea:ea:79:f9:77:16:8e:76:
                    28:f6:12:48:b9:be:88:e0:f3:12:38:ce:af:2e:c3:
                    50:2f:25:bc:6e:1d:5d:8b:3d:b7:2c:14:f7:df:71:
                    9d:72:38:e0:42:1a:03:50:ae:31:aa:4f:94:b3:fa:
                    3e:de:d1:ec:d3:dd:68:4b:bf:fb:a9:ee:2f:b7:db:
                    72:b7:30:9f:71:d1:37:92:bb:b8:16:ef:76:0c:7d:
                    19:af:19:62:a6:fb:d8:6f:4f:8c:84:5a:c6:ba:97:
                    81:40:3b:1d:3c:55:97:31:f9:a8:fd:ab:9f:0c:b8:
                    7f:f1:99:70:65:19:d5:5e:3b:c0:78:66:9c:1f:26:
                    d2:22:51:e6:b1:f1:dd:29:7b:1e:71:03:52:f6:7d:
                    23:ec:42:d3:ef:0a:7e:2e:86:ab:48:f3:df:e3:fc:
                    66:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E8:CF:3E:4B:97:7F:F4:35:EE:49:0E:91:33:3E:31:22:21:70:1F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142795.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a091::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:be:16:13:4f:1f:94:c5:c1:4e:ea:a2:a2:a2:fd:c0:c0:b0:
         ae:5a:cc:8c:57:9c:52:7c:e5:ad:22:97:0d:b8:cf:39:5a:e4:
         f9:7b:f1:08:99:a2:6f:78:5f:76:05:49:25:a8:50:1b:49:00:
         9d:e0:04:89:ce:19:1e:8b:3c:37:74:48:9b:66:85:c0:f6:6c:
         db:83:16:f4:df:ac:58:4a:35:d9:9a:5b:ce:ee:53:47:6f:b4:
         c7:38:c4:5e:12:73:fe:de:e4:48:ea:d4:fd:15:b1:c6:27:5b:
         c0:83:33:f4:a5:86:ec:b1:77:83:3b:40:47:5c:0c:30:46:c3:
         6e:01:05:89:65:43:16:45:26:6d:26:18:4b:b7:24:50:67:bd:
         3f:4c:d5:09:72:64:9d:86:e3:5d:1c:78:02:7e:7e:8f:4e:ee:
         6c:41:c7:b4:a5:12:a7:7f:14:83:3a:6f:3f:c9:ed:d4:4a:d5:
         d3:4a:92:85:62:01:7b:0f:82:5f:d1:79:45:71:2c:fd:12:18:
         95:a0:46:fb:6f:56:71:c6:1c:11:73:d6:52:53:5d:e8:a4:dd:
         bc:46:68:74:15:b7:71:24:b5:56:d9:a5:5d:02:a9:be:16:37:
         7f:6b:47:5f:15:dd:35:01:47:ed:d1:e6:22:e9:50:35:22:af:
         59:ab:a7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----