Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142936.roa
File:                     AS142936.roa (raw, json)
Hash identifier:          eMD+mCiqaK9Lgj4twQX1sg2j+iDap9I1LfERrojanwM=
Subject key identifier:   25:5F:C1:DB:E5:3A:63:2D:56:68:FF:DD:65:AC:FC:A0:BD:98:87:3C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3C46DF7FEC091D1E118498A9FC39149DD82DEB28
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142936.roa
Signing time:             Mon 25 May 2026 02:22:27 +0000
ROA not before:           Mon 25 May 2026 02:17:27 +0000
ROA not after:            Mon 24 May 2027 02:22:27 +0000
asID:                     142936
IP address blocks:        240a:a11e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:46:df:7f:ec:09:1d:1e:11:84:98:a9:fc:39:14:9d:d8:2d:eb:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 02:17:27 2026 GMT
            Not After : May 24 02:22:27 2027 GMT
        Subject: CN=255FC1DBE53A632D5668FFDD65ACFCA0BD98873C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:22:c2:48:e6:d4:4f:1d:e7:3e:80:7f:8f:41:
                    0d:2e:01:58:cd:05:9f:57:bf:a9:c2:89:e7:85:12:
                    28:84:4b:a6:47:8b:5f:6f:a1:f4:a6:f7:cc:71:31:
                    dc:00:ec:88:24:5c:12:aa:f9:94:91:90:13:0c:95:
                    6c:24:df:0c:29:2c:ea:6c:fc:a7:1c:d8:47:e0:84:
                    2a:0a:9c:d5:d4:56:71:61:76:bc:8d:b2:50:ef:30:
                    c3:47:5a:f7:35:92:8b:a7:48:f1:7b:b3:d7:3c:9e:
                    5d:26:3c:56:68:31:42:27:71:19:04:18:0a:3e:a6:
                    31:af:e4:83:b0:c0:10:18:c5:cd:2f:ac:fc:4f:a8:
                    2d:09:d4:78:88:d2:78:b5:e0:18:88:81:d5:b7:3a:
                    68:15:50:96:6d:07:5e:56:57:37:96:7c:c4:1e:1a:
                    ff:30:56:5d:24:5f:5c:21:00:18:11:25:c7:04:1c:
                    09:72:3a:b5:31:9b:5f:8f:98:1b:75:05:de:93:a5:
                    b5:35:c9:4c:08:bf:b6:92:e2:f6:15:39:61:b5:5f:
                    3d:16:03:9a:8d:a2:99:2d:42:42:4f:aa:86:ea:0e:
                    62:7a:56:cb:5e:c0:5d:40:9d:53:73:2a:07:45:bf:
                    8e:73:1b:14:fc:5d:a7:3b:6d:0f:93:a6:58:3a:2c:
                    42:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5F:C1:DB:E5:3A:63:2D:56:68:FF:DD:65:AC:FC:A0:BD:98:87:3C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a11e::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:a3:25:bc:25:34:28:1c:44:58:c8:1e:f8:bd:8c:75:f3:65:
         c4:11:31:0c:92:d2:2c:11:be:09:6f:22:b1:44:06:de:b9:22:
         f8:48:e3:e6:23:39:7e:a2:d9:20:63:5d:e8:ce:6a:0f:6d:f2:
         72:3e:99:a5:ac:72:12:c6:34:4a:fe:f3:03:d9:73:8c:01:82:
         4c:08:1c:20:03:cc:49:0a:ed:35:56:30:86:ed:38:bf:1e:52:
         5e:a1:78:a5:99:ba:ad:94:75:e4:35:69:69:3e:e5:4f:b1:23:
         3b:4f:da:3e:3a:db:29:ec:0e:e9:d1:8a:be:a3:ee:08:07:57:
         5b:e4:68:99:66:64:d0:b2:34:58:8d:de:0b:c2:ff:82:ee:f3:
         76:c3:ea:41:9b:c1:25:57:f9:f1:00:5b:99:26:eb:d1:60:52:
         ca:de:2e:06:93:f9:b5:14:9f:94:7c:ed:b7:11:b0:f1:3d:c7:
         d4:84:73:83:31:bf:e8:6b:48:1e:d8:6a:17:01:61:97:c5:0d:
         00:7a:f0:05:43:63:d6:83:c4:18:f7:77:03:12:c4:c1:0f:02:
         b5:a8:4b:82:b9:00:eb:6e:86:25:e3:22:1f:f8:d2:82:99:c8:
         db:a8:76:59:3a:5b:64:2a:c3:42:e3:29:d2:d0:7a:b3:6a:85:
         46:39:a2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----