Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142816.roa
File:                     AS142816.roa (raw, json)
Hash identifier:          pTZv3jxbs6gGvnwsv/y+5FoKUKFL7ZCO8a8Q35jZ3/c=
Subject key identifier:   49:4A:FA:00:B0:D4:B0:C0:4D:C7:06:19:71:DE:9C:BA:BB:C3:B7:77
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       24CB2444FD8F15A7B08AB62A446151C28ED1539A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142816.roa
Signing time:             Fri 22 May 2026 07:41:23 +0000
ROA not before:           Fri 22 May 2026 07:36:23 +0000
ROA not after:            Fri 21 May 2027 07:41:23 +0000
asID:                     142816
IP address blocks:        240a:a0a6::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:cb:24:44:fd:8f:15:a7:b0:8a:b6:2a:44:61:51:c2:8e:d1:53:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:36:23 2026 GMT
            Not After : May 21 07:41:23 2027 GMT
        Subject: CN=494AFA00B0D4B0C04DC7061971DE9CBABBC3B777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:92:84:ba:c1:90:bf:b4:25:b4:ca:bf:ea:9f:
                    3e:4f:97:bf:4f:51:11:70:fb:15:7b:d9:e4:7f:02:
                    c3:90:77:ac:6a:a3:73:a1:6c:aa:37:fe:0d:c7:66:
                    11:c8:81:35:91:f2:a8:4e:19:b0:55:4e:2d:6b:10:
                    7b:e5:42:06:88:f3:b3:0e:39:0b:cc:8a:f2:3d:20:
                    90:39:99:db:04:c7:37:d0:34:16:e2:dc:b7:fd:5f:
                    da:8d:e4:44:8a:21:9e:b3:79:2c:11:7c:f7:c0:b8:
                    fa:ec:c5:25:7e:c1:3d:0d:01:18:e5:75:37:f8:a3:
                    8c:c0:76:ee:47:7f:2e:ac:77:c5:69:f8:1d:e7:8d:
                    b2:a8:67:53:3d:0e:fa:28:54:f7:fc:1b:f0:26:e4:
                    92:c0:3e:22:a3:c1:2c:2a:a7:4b:26:fe:0a:d9:08:
                    4f:08:c1:e5:33:0f:28:71:36:c0:ad:a0:ab:1a:ad:
                    0a:fa:0c:6e:b7:ab:9f:60:0d:0a:4a:07:17:e0:c5:
                    13:c5:c4:91:60:47:86:d1:63:a4:05:68:35:a2:28:
                    c9:51:b2:b9:50:0f:2d:43:f0:65:a9:c0:6d:a2:8d:
                    9b:62:27:41:44:ec:24:21:12:9f:e7:17:23:87:17:
                    15:37:c6:ed:5b:18:8a:35:a5:1b:af:5f:bb:b2:bb:
                    af:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:4A:FA:00:B0:D4:B0:C0:4D:C7:06:19:71:DE:9C:BA:BB:C3:B7:77
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142816.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a0a6::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:3f:f2:31:92:40:64:33:92:f1:59:8c:6a:11:2a:c5:5f:59:
         e3:bb:13:1b:ca:4b:87:a6:cc:f2:1e:8d:cf:ec:90:99:70:f7:
         79:56:3b:06:c3:9a:b1:2b:95:11:de:aa:56:cf:8a:0f:ca:6a:
         a4:96:d6:48:47:5b:dc:00:4f:fb:b7:db:6b:d4:d3:4e:89:14:
         fc:48:14:5f:7b:9b:f5:44:b6:0a:20:66:83:af:7e:76:43:3a:
         4f:2a:f4:c6:ad:84:1a:fd:b2:7a:be:f8:87:fd:fc:19:d1:81:
         ce:30:3f:74:47:a0:8d:c3:7d:a7:ed:fd:06:4c:bd:02:0e:26:
         ce:52:72:5c:27:68:30:16:ed:0f:79:49:1e:f3:33:57:c0:07:
         cf:e7:67:a8:21:9d:45:49:7c:52:4b:62:37:6e:20:42:06:00:
         82:eb:79:19:a4:92:95:9c:9e:3e:df:e1:0d:a3:7d:23:20:42:
         0a:a5:73:80:e5:22:fb:85:05:d0:47:11:a0:db:82:aa:13:c8:
         a2:88:2f:77:2e:1b:b8:7e:11:59:0b:4a:96:f3:0a:ae:77:32:
         90:a5:b3:bc:99:02:14:8a:b2:e2:3b:3b:dd:55:b0:62:b2:95:
         8c:d8:2a:61:3e:0b:c3:4c:d0:8a:b0:bb:d5:74:fd:5e:3e:0c:
         e7:ce:a9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----