Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142939.roa
File:                     AS142939.roa (raw, json)
Hash identifier:          ewohjAp8ThggzUnCx7VG86OQ4mdamWdRd0eF+OVH9rg=
Subject key identifier:   A9:7E:8A:E7:A3:2D:7B:40:48:9A:FA:C3:8C:17:BD:11:D1:AA:FA:44
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       351FAE261EDC6C40E9E6B0FBB3367FC9D0FDD237
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142939.roa
Signing time:             Fri 22 May 2026 06:46:13 +0000
ROA not before:           Fri 22 May 2026 06:41:13 +0000
ROA not after:            Fri 21 May 2027 06:46:13 +0000
asID:                     142939
IP address blocks:        240a:a121::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:1f:ae:26:1e:dc:6c:40:e9:e6:b0:fb:b3:36:7f:c9:d0:fd:d2:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:13 2026 GMT
            Not After : May 21 06:46:13 2027 GMT
        Subject: CN=A97E8AE7A32D7B40489AFAC38C17BD11D1AAFA44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:86:30:15:f7:47:cf:dc:f8:e8:2d:6b:94:78:
                    58:d2:93:c3:15:69:dc:94:1d:54:bf:5f:dc:92:f1:
                    ee:e6:08:d1:12:3b:d2:c6:8e:8d:49:37:3b:ae:ba:
                    58:45:1e:18:64:7f:27:12:a5:05:ca:52:e5:c4:f3:
                    b9:5a:ec:69:6f:95:79:45:ae:41:87:31:f8:92:27:
                    3f:3f:1c:46:70:77:3e:d6:e3:84:c0:37:05:78:6e:
                    b9:2b:f7:40:d4:e7:b2:23:78:8c:81:f4:de:5a:87:
                    cd:5d:a9:85:f9:6a:af:f1:79:65:9a:8c:be:a5:fe:
                    e3:89:40:6f:d6:1e:39:08:d9:c8:ef:34:5f:22:b4:
                    e1:11:4c:60:54:4e:98:5c:62:32:4f:fc:0e:7a:cb:
                    55:11:e5:26:1e:c4:b4:53:f4:6e:10:5c:13:36:1f:
                    79:fb:d7:06:7f:55:13:cd:ad:db:d6:aa:c5:4b:2a:
                    f9:05:37:85:fb:28:58:19:09:8d:e2:74:e8:0f:e6:
                    44:da:6c:d6:f2:4a:67:15:33:19:2a:c3:b9:de:cc:
                    6e:43:d2:8f:65:66:9e:19:12:a1:4f:36:a9:af:56:
                    fa:29:7d:92:23:49:eb:08:c2:6c:b2:08:9c:f5:18:
                    db:a2:06:6b:46:77:fe:2d:71:5b:e4:9e:f7:b5:c4:
                    0b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:7E:8A:E7:A3:2D:7B:40:48:9A:FA:C3:8C:17:BD:11:D1:AA:FA:44
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a121::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:63:eb:32:9e:5e:4e:a1:8f:26:bd:5e:48:9c:c3:60:db:24:
         39:38:3e:9f:46:56:91:04:49:c0:01:4d:0a:cc:18:84:81:e5:
         68:e8:5c:27:34:80:70:13:b3:42:4c:8f:a9:da:d7:46:0e:7b:
         b5:a6:04:99:d5:f2:2d:7b:a0:69:f1:69:58:6c:dd:92:11:2c:
         4b:f5:36:13:78:61:a5:0f:9b:b6:34:61:4d:37:46:22:fd:dc:
         ba:48:06:99:8f:14:f8:78:e6:f2:42:5c:be:53:ec:0a:25:f8:
         13:2f:68:00:c7:dc:e3:68:61:dc:4a:52:c7:b4:e2:2b:67:08:
         71:6b:8f:dd:7b:45:75:17:f9:34:81:77:b6:cb:8a:99:ee:2a:
         4c:4a:08:a8:3f:18:8b:de:a4:cc:90:45:f1:55:59:9e:bf:2b:
         98:88:19:29:ed:8d:dc:0e:31:9d:87:a5:0d:31:cd:d8:ea:36:
         01:85:9b:6c:05:a9:36:3d:74:ee:3d:74:f0:ab:c3:6b:37:5c:
         23:cc:ac:df:e8:69:50:b6:36:9e:5a:77:3c:a0:ea:50:80:6b:
         4b:1a:f0:ec:f6:cf:f6:c1:e4:e6:1a:69:60:a8:05:6b:12:37:
         96:e0:48:e2:6e:dc:e2:ec:16:7a:01:4a:f8:e9:c3:d1:f1:6c:
         2e:6f:c4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----