Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142872.roa
File:                     AS142872.roa (raw, json)
Hash identifier:          dV4Pbn5Do/b50ALedCr7jnvRP0NT3kb+LREKVjqrQkc=
Subject key identifier:   C8:92:2C:F2:59:DF:85:5B:7A:30:EF:04:2C:3C:7D:22:3C:11:F6:1E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       43D82F5C50D7EE4ED7019054C25E366A8E8E4D2D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142872.roa
Signing time:             Fri 22 May 2026 01:50:13 +0000
ROA not before:           Fri 22 May 2026 01:45:13 +0000
ROA not after:            Fri 21 May 2027 01:50:13 +0000
asID:                     142872
IP address blocks:        240a:a0de::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:d8:2f:5c:50:d7:ee:4e:d7:01:90:54:c2:5e:36:6a:8e:8e:4d:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:13 2026 GMT
            Not After : May 21 01:50:13 2027 GMT
        Subject: CN=C8922CF259DF855B7A30EF042C3C7D223C11F61E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:65:e9:70:dd:b8:22:a6:8c:8d:27:f9:92:58:
                    02:0b:15:7b:96:a7:69:b3:ce:46:f6:50:99:ca:0b:
                    db:55:3f:59:e9:e3:e1:9c:e8:9d:0e:30:8c:82:3b:
                    9d:e9:7e:b7:e8:d0:25:e0:7b:cb:b9:2a:9d:a4:c2:
                    09:8c:67:68:6d:54:2e:79:52:16:32:2a:c9:ea:df:
                    01:bc:5b:bd:30:85:51:a1:8e:62:0f:66:67:dd:49:
                    5a:a8:de:5f:f4:5b:67:89:06:19:ea:a5:9b:70:e0:
                    34:7d:66:fd:06:a6:4a:47:a0:51:ea:2e:89:3f:ea:
                    fd:60:25:2d:2d:1f:31:d1:32:91:52:7f:0d:ce:c2:
                    62:d4:bf:0c:11:a2:43:35:d3:b9:e5:06:66:ca:71:
                    ff:d1:92:22:07:96:84:85:21:cb:38:b8:47:26:6d:
                    3d:06:02:84:3d:7f:cc:4c:bf:d1:e2:d0:55:34:ea:
                    b6:a5:25:00:cc:5b:01:b5:7c:6e:24:1f:56:94:7e:
                    6c:03:53:73:70:7c:84:61:e0:7e:c7:ed:ad:d0:97:
                    9c:38:eb:ee:72:11:00:eb:c8:54:3e:1f:1a:fb:19:
                    b1:a7:f2:0b:de:2c:ff:fe:a8:d4:b5:ec:2f:e4:c8:
                    fc:3e:a9:42:e6:01:cd:9c:2f:7c:96:43:4d:ea:fc:
                    7d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:92:2C:F2:59:DF:85:5B:7A:30:EF:04:2C:3C:7D:22:3C:11:F6:1E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142872.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a0de::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:02:d9:c4:db:f6:4f:c0:3a:be:e5:88:ef:5f:da:ff:65:50:
         f9:b6:19:2f:a6:89:fe:fe:9a:ef:8a:96:7d:a8:eb:c5:4f:fc:
         34:b1:f1:64:5f:3f:ed:dd:11:d4:3c:02:67:5c:2e:5b:bb:ef:
         e4:7a:01:64:ee:88:d3:98:39:5e:9d:36:78:9b:d3:44:aa:57:
         bd:15:3c:75:25:71:90:af:70:08:c9:01:1a:8e:55:a3:55:31:
         77:07:29:09:ce:0b:66:93:a8:96:f3:d1:dd:df:de:08:2b:2a:
         8f:84:7d:14:26:f0:fd:4d:31:69:d7:0e:61:36:ee:98:85:52:
         38:8f:f2:40:ac:e7:b1:a8:1d:18:3e:26:80:01:95:fc:2a:a5:
         5b:c5:c9:20:42:33:73:02:f2:29:69:bd:7d:b3:d7:c5:d0:b8:
         85:a5:12:b5:4f:6f:7c:f6:29:67:63:ae:e3:8f:b4:07:68:8d:
         03:41:74:ac:c3:cf:43:de:b7:dc:39:5d:bc:1b:4f:9d:e3:05:
         8f:c4:5e:9b:dd:38:c6:50:1b:6b:85:13:cd:12:0c:29:3a:95:
         39:2f:a7:58:99:d6:3f:9c:27:c5:5a:9d:99:e9:c2:83:bb:f6:
         0d:fc:90:11:e2:44:5d:68:8a:98:5b:fc:43:f7:38:8d:a4:d7:
         e0:c7:f0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----