Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142847.roa
File:                     AS142847.roa (raw, json)
Hash identifier:          +AqCroHOi4kfuYYX0LNcQjzWPNvQhLY+Hd30h+D8yE0=
Subject key identifier:   F3:70:FB:7C:F4:84:12:81:31:54:F8:BB:26:B1:2F:62:6E:7F:68:93
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3EF6C2D1943A223118348AC2AC57F67DED5266E5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142847.roa
Signing time:             Tue 26 May 2026 01:12:57 +0000
ROA not before:           Tue 26 May 2026 01:07:57 +0000
ROA not after:            Tue 25 May 2027 01:12:57 +0000
asID:                     142847
IP address blocks:        240a:a0c5::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f6:c2:d1:94:3a:22:31:18:34:8a:c2:ac:57:f6:7d:ed:52:66:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:07:57 2026 GMT
            Not After : May 25 01:12:57 2027 GMT
        Subject: CN=F370FB7CF48412813154F8BB26B12F626E7F6893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:95:2a:61:07:20:1b:91:10:26:98:c7:37:ee:
                    54:91:32:93:e6:dd:69:ee:98:55:0e:d3:4f:c3:0d:
                    2f:de:d0:04:e1:3b:31:74:46:5a:16:4f:a9:02:44:
                    fc:b6:79:82:df:82:25:84:7f:25:f1:44:78:05:17:
                    2e:4b:28:7e:f6:f6:26:5b:ae:6f:ee:97:50:4e:c4:
                    00:0b:d9:8d:de:28:25:d9:d9:b2:55:00:d3:c1:dc:
                    b9:95:35:ed:88:3c:fc:5b:4a:38:c2:b7:b0:68:21:
                    e5:8f:f6:ed:ab:3f:0e:f5:02:50:a2:19:ce:66:ef:
                    62:94:df:79:c7:41:29:d6:01:7c:fb:6c:be:15:4f:
                    da:88:df:81:6d:69:88:e8:ba:42:0b:91:79:8c:d8:
                    5e:5c:0f:1e:2a:c6:96:1f:36:46:6c:fc:79:70:d0:
                    04:00:6c:b8:5b:de:44:8c:77:01:76:b1:30:9e:13:
                    7f:7e:84:43:93:7c:a3:6b:83:67:0b:38:d3:94:c1:
                    af:f1:42:f6:67:b4:54:5e:d9:84:ca:a1:aa:45:2e:
                    41:9d:7b:94:af:ee:d1:f0:46:23:14:8d:5a:b1:7c:
                    0b:92:6a:94:2d:19:96:80:56:5d:e9:b1:b0:f3:7f:
                    0c:51:cb:7a:f5:39:45:1a:e8:1e:d2:b6:c3:20:6d:
                    48:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:70:FB:7C:F4:84:12:81:31:54:F8:BB:26:B1:2F:62:6E:7F:68:93
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142847.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a0c5::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:32:ae:24:f8:c0:c0:17:18:b1:22:11:ae:e6:30:4c:0d:20:
         5a:e3:2c:7c:3a:f3:94:0f:dd:9a:e9:ab:a4:5c:ce:ff:6c:e1:
         ad:bd:af:1a:a0:2b:c3:d9:75:cd:ba:81:1c:2e:52:04:a7:7e:
         8a:d2:61:15:b6:08:b2:d5:c5:0a:28:a6:c7:6f:a4:19:34:56:
         7c:43:96:94:0a:61:b6:2b:7c:94:a6:05:4e:bd:82:1e:e3:3b:
         58:d2:6c:10:24:85:0b:cc:70:c4:2e:49:88:ae:d7:54:3b:a7:
         3b:4e:69:d0:52:c3:c0:35:34:e2:a6:9b:91:f1:58:71:b5:4b:
         cf:be:2f:84:83:13:6f:04:38:c6:3f:19:0e:d8:21:ff:6c:b2:
         7a:ff:cc:df:4f:63:1a:38:c8:49:36:64:31:c7:27:3d:8f:da:
         e0:ed:28:99:3c:96:56:6a:33:69:73:e2:8c:5a:c1:06:f5:10:
         cc:b6:43:ce:c1:31:14:bb:67:d6:da:67:b7:7e:dc:b0:98:9a:
         23:45:30:3f:49:54:98:d2:f6:0c:77:fa:f9:38:eb:78:4d:fc:
         91:59:9b:2d:78:a7:52:35:92:70:06:1c:15:da:90:6a:b9:bf:
         35:6f:98:15:02:15:fb:38:e0:19:ef:00:5a:e7:82:00:49:49:
         0f:9b:42:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----