Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142883.roa
File:                     AS142883.roa (raw, json)
Hash identifier:          l6SEgcJHbVf0vEdkNjvPRBGPqbco7kPzYY73Awde7iU=
Subject key identifier:   E2:90:B8:C5:4B:E4:DD:0C:CF:30:BB:E2:F5:EC:C7:F4:31:9C:55:79
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0F78902B59E82877A12A583A03135C793066B96F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142883.roa
Signing time:             Tue 26 May 2026 03:17:18 +0000
ROA not before:           Tue 26 May 2026 03:12:18 +0000
ROA not after:            Tue 25 May 2027 03:17:18 +0000
asID:                     142883
IP address blocks:        240a:a0e9::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:78:90:2b:59:e8:28:77:a1:2a:58:3a:03:13:5c:79:30:66:b9:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:12:18 2026 GMT
            Not After : May 25 03:17:18 2027 GMT
        Subject: CN=E290B8C54BE4DD0CCF30BBE2F5ECC7F4319C5579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:de:bd:76:57:12:d9:07:de:f1:40:1b:07:de:
                    6c:f2:71:f2:e8:73:c0:dc:64:7e:fe:e6:e3:6c:11:
                    25:b5:f3:25:bd:53:42:01:ed:66:57:ed:29:c2:74:
                    4e:41:a3:59:c5:23:70:d9:28:86:42:6c:79:64:21:
                    d7:29:90:19:74:ff:cc:5e:66:6d:39:4d:f9:62:61:
                    fd:31:1f:f7:04:4f:75:5d:4f:30:41:ed:7f:46:e1:
                    97:b3:5f:0e:f9:f4:e4:35:0c:5a:31:9d:55:e0:b7:
                    e9:9b:6c:4b:e6:1e:04:47:02:6b:19:03:77:38:e1:
                    20:5a:cd:c6:9f:d8:be:7b:14:c0:07:87:75:92:dd:
                    8e:bb:ff:05:ce:d1:9d:8b:25:46:60:a7:0b:a0:11:
                    c6:1b:59:27:9c:1a:c4:49:f3:9b:96:86:21:2f:19:
                    5b:76:3c:da:b7:ef:b8:a9:46:8d:43:39:40:50:a3:
                    62:63:16:f1:2d:3e:a2:af:c3:7b:44:a4:d0:b9:b0:
                    d7:ca:47:f5:ff:32:58:ab:48:18:41:fa:48:7b:8d:
                    20:2f:71:03:78:98:a1:3c:ec:05:61:58:3e:c6:e3:
                    d8:b6:8b:ec:1f:fb:32:e6:ba:0b:d0:01:b6:07:2b:
                    5b:a3:47:72:02:1f:80:76:33:e1:a7:7e:5a:7e:84:
                    50:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:90:B8:C5:4B:E4:DD:0C:CF:30:BB:E2:F5:EC:C7:F4:31:9C:55:79
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142883.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a0e9::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:af:c6:89:7a:56:3e:82:c9:fd:e2:4e:23:84:b0:34:7c:68:
         35:60:f6:58:0c:9f:bd:1d:4b:53:7d:b9:8f:f8:02:24:b7:e1:
         b9:30:99:42:82:d6:12:2b:7e:b5:54:5f:09:c2:88:ae:4b:65:
         ea:ad:99:af:a7:c0:16:93:e6:63:03:43:40:f2:b1:4b:ab:aa:
         35:ed:77:db:51:f3:d0:0d:3f:9b:e4:4e:55:b3:73:22:52:99:
         b6:ff:8d:71:96:fa:11:82:55:d0:8b:49:09:78:2f:74:1b:1d:
         54:80:5e:00:05:0a:dd:e4:02:43:0e:55:a3:5d:c6:c2:a0:0d:
         c8:b9:e9:c7:6c:a4:90:77:f6:b0:bc:ac:5b:6b:d2:f8:76:2f:
         8c:96:5e:09:aa:65:cf:62:ea:39:bc:23:6b:39:f0:e0:75:8c:
         22:c4:86:57:34:fa:7c:c5:26:87:32:2c:6c:3c:f9:db:08:23:
         68:af:f1:dc:be:9f:49:9d:be:c7:7c:0c:6f:7e:80:77:e4:fc:
         58:67:fd:25:cc:68:32:dd:4f:9d:68:c0:eb:a0:b8:62:da:bb:
         60:26:42:f0:2e:d6:a6:1b:f5:1f:12:2c:93:13:7e:29:21:ac:
         ce:ea:4a:c4:e8:a0:70:f9:bd:7c:fb:62:2d:51:7a:aa:25:9a:
         5c:27:91:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:44 2026 by rpki-client