Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142925.roa
File:                     AS142925.roa (raw, json)
Hash identifier:          VkUlqv7dWm1Zo+KiuGR/90Doohe4HvAkS0uzbZMUelI=
Subject key identifier:   32:EE:BD:BE:59:08:C6:BE:2B:7B:B0:A8:52:6E:02:B6:D7:5F:6B:3F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       045CF49F841DABCC185D4372770CD71FB629F173
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142925.roa
Signing time:             Fri 22 May 2026 02:47:57 +0000
ROA not before:           Fri 22 May 2026 02:42:57 +0000
ROA not after:            Fri 21 May 2027 02:47:57 +0000
asID:                     142925
IP address blocks:        240a:a113::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:5c:f4:9f:84:1d:ab:cc:18:5d:43:72:77:0c:d7:1f:b6:29:f1:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:42:57 2026 GMT
            Not After : May 21 02:47:57 2027 GMT
        Subject: CN=32EEBDBE5908C6BE2B7BB0A8526E02B6D75F6B3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:07:f1:99:39:47:75:da:c1:a6:11:54:ec:d2:
                    1e:fd:d7:ad:35:c5:e6:ff:9c:4f:dd:65:10:fe:81:
                    75:08:50:9f:92:db:4c:80:09:7d:7e:e4:cf:cd:79:
                    3b:16:66:c8:2f:7c:96:e4:78:a8:16:97:3a:87:a8:
                    23:09:76:ad:80:31:67:4f:b1:7e:c4:dd:36:e0:be:
                    d0:1e:09:c6:76:ea:d6:80:6b:f7:96:87:b2:63:ff:
                    c9:69:24:96:5b:46:21:97:81:b4:d3:78:c3:2a:84:
                    f2:cd:7c:55:2a:f1:79:4d:29:38:98:21:01:81:1c:
                    6c:03:b7:35:2e:0e:7b:57:66:eb:7b:20:32:f2:57:
                    b2:34:55:19:57:d3:8b:81:21:ca:0e:b6:0d:51:34:
                    fa:fa:aa:d8:b7:1c:83:24:12:51:0a:6d:13:19:1a:
                    78:ab:52:9b:f8:6d:b2:23:43:1b:4e:62:98:a7:41:
                    4b:ca:6c:3c:f4:48:2b:19:f4:fe:de:e0:5d:30:d4:
                    d0:bd:39:37:ad:2d:79:4b:8f:93:6d:21:13:dd:1c:
                    98:61:a0:2e:7e:0b:a5:4f:83:81:c6:82:97:f2:4b:
                    2e:d6:d4:97:48:35:a4:ad:2b:ef:9c:fe:05:c1:5c:
                    6d:fc:e8:fc:5c:03:c7:f5:e3:e7:79:27:84:4b:ca:
                    1a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:EE:BD:BE:59:08:C6:BE:2B:7B:B0:A8:52:6E:02:B6:D7:5F:6B:3F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142925.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a113::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:8b:aa:d2:44:d8:93:20:c5:9f:9f:c8:55:be:82:1d:c7:38:
         bc:d8:bf:a2:3c:21:cc:05:06:87:ae:f4:e9:e7:9d:87:0a:3d:
         dd:6b:85:92:da:43:42:ac:b2:b7:eb:61:a7:6d:69:58:04:49:
         69:18:95:36:3b:3d:dd:a2:2a:3f:be:2a:49:5b:cc:90:71:62:
         e4:04:19:9c:7e:bc:54:a1:52:91:c3:c7:9f:41:42:33:96:f4:
         ca:27:3b:c7:02:9a:f1:8a:cc:6a:d1:b4:49:7a:fd:f2:f2:56:
         ba:43:c5:7d:ee:63:2b:e7:66:a1:4c:a0:7c:e6:1e:d9:89:06:
         d1:2c:da:3b:e7:b2:4f:58:14:51:ec:36:2e:9d:ce:51:22:79:
         38:c8:7c:4e:58:48:86:b8:84:0c:58:a2:27:93:a0:aa:56:95:
         b9:16:d3:4d:49:e5:c9:ec:5d:cd:87:b2:82:c8:a1:05:bc:18:
         59:2e:f2:79:8f:6e:f1:d0:a5:f5:33:9c:ed:40:dc:6f:47:7e:
         e5:08:c6:22:86:97:dc:b2:e2:29:ad:1d:8f:b4:a2:4e:6d:60:
         08:6f:c6:3b:64:3e:b9:be:83:0a:92:f8:da:78:ec:5d:b6:c5:
         18:09:8c:a5:c7:42:f2:89:51:a2:64:86:a4:77:66:45:fb:5e:
         45:6f:99:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:51 2026 by rpki-client