Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142916.roa
File:                     AS142916.roa (raw, json)
Hash identifier:          TDGDsJRu9T8zmp5R0AjfkPbki+nFAge64Y7ANZbQtkI=
Subject key identifier:   B9:2B:52:E3:58:08:F1:9F:42:D2:EA:2A:BF:8E:71:AA:C3:EB:7D:A1
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       411D60318D25D74A376C60309D9EA35626A163D9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142916.roa
Signing time:             Mon 25 May 2026 06:48:42 +0000
ROA not before:           Mon 25 May 2026 06:43:42 +0000
ROA not after:            Mon 24 May 2027 06:48:42 +0000
asID:                     142916
IP address blocks:        240a:a10a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:1d:60:31:8d:25:d7:4a:37:6c:60:30:9d:9e:a3:56:26:a1:63:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:43:42 2026 GMT
            Not After : May 24 06:48:42 2027 GMT
        Subject: CN=B92B52E35808F19F42D2EA2ABF8E71AAC3EB7DA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:17:d7:5f:c7:d6:ee:e4:b9:00:25:1f:b1:0a:
                    6b:91:88:0f:63:0e:cc:89:18:0e:a7:c3:bf:40:d9:
                    75:40:fe:55:e2:de:1b:1e:83:a9:52:97:e4:02:1e:
                    c0:4d:e5:3b:f1:df:9d:77:d9:12:46:2f:ec:c2:65:
                    c8:05:36:c2:3e:95:5c:5a:2c:2f:7a:da:b8:17:ce:
                    48:80:6b:2c:8e:be:0c:1b:5f:76:1f:38:ae:86:73:
                    16:04:6b:b2:48:ad:9f:f7:0f:c0:ef:c1:08:72:25:
                    7c:5e:1c:4a:06:9a:4d:9d:55:8b:3b:10:54:07:20:
                    03:b2:4e:7b:e9:2b:e0:f4:07:04:bd:1e:a4:30:5e:
                    15:f3:96:e8:bc:76:c6:fc:de:2c:9b:85:e6:83:62:
                    be:a4:04:11:43:66:8b:cc:55:84:d4:94:50:f1:cf:
                    e8:ca:2d:52:15:be:42:9c:04:11:ee:cd:1b:dd:ca:
                    95:73:75:f5:2e:43:b7:86:16:4e:2f:13:44:ed:5d:
                    8c:2c:5c:7a:a9:be:65:59:33:da:cb:7c:71:4e:62:
                    26:d2:84:6a:46:e9:5d:1c:76:2b:dd:5a:c6:45:dc:
                    52:0b:c1:31:4e:51:a3:9b:da:73:c6:c6:f1:d1:fd:
                    74:86:b7:9a:c5:32:da:88:20:38:e8:a1:17:27:ff:
                    a9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:2B:52:E3:58:08:F1:9F:42:D2:EA:2A:BF:8E:71:AA:C3:EB:7D:A1
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142916.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a10a::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:92:1e:3f:ca:28:41:53:3f:06:5f:0a:e1:59:5a:ed:11:d6:
         55:30:2b:1a:c3:6a:f5:94:12:69:2a:f3:04:ad:e4:67:c4:75:
         13:12:91:2f:c9:8f:c5:8d:9f:1f:ae:b7:7a:be:c3:77:da:61:
         36:a2:9e:d2:84:9a:a6:91:4a:5d:b3:e1:a9:16:da:69:21:b1:
         59:b8:59:4d:d9:71:4e:b0:66:87:a3:7b:94:d5:4b:2a:5d:af:
         38:68:a6:0e:f0:8c:a8:c6:a7:54:9d:37:1c:82:94:7a:aa:5f:
         16:6f:24:35:29:5e:89:a7:bd:cb:85:ed:2e:d2:ec:d2:01:fa:
         77:c8:16:32:bb:ce:f2:21:02:5f:98:46:1a:60:32:e6:27:9b:
         82:99:66:b7:44:57:37:09:ad:9f:01:a3:bf:db:b0:e3:6b:24:
         eb:70:a9:ff:31:b0:c4:e6:37:3b:7b:ee:10:7e:c7:53:eb:92:
         7c:e1:34:ca:60:80:4b:79:ba:6b:22:a0:df:19:e8:5d:dd:fc:
         eb:26:54:f0:fc:c2:89:86:f7:22:16:1c:53:0d:e2:30:14:42:
         87:4f:f0:a8:20:92:06:a2:df:91:79:51:89:22:fa:93:13:70:
         3d:66:f6:39:80:e3:b7:59:1b:e4:0c:a4:e8:71:23:4b:53:23:
         ac:92:08:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----