Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142940.roa
File:                     AS142940.roa (raw, json)
Hash identifier:          HgoA2xqqERgPZE2Wqz0iRPQCxZNYQfSyIDtmUxz8Dfo=
Subject key identifier:   77:4E:DD:C3:A3:02:46:94:0F:53:C9:59:BA:E1:9C:62:D1:8B:D8:48
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       18F5F6247757B1DBE97C1142A76BCC03E39099AA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142940.roa
Signing time:             Tue 26 May 2026 08:52:48 +0000
ROA not before:           Tue 26 May 2026 08:47:48 +0000
ROA not after:            Tue 25 May 2027 08:52:48 +0000
asID:                     142940
IP address blocks:        240a:a122::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:f5:f6:24:77:57:b1:db:e9:7c:11:42:a7:6b:cc:03:e3:90:99:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 08:47:48 2026 GMT
            Not After : May 25 08:52:48 2027 GMT
        Subject: CN=774EDDC3A30246940F53C959BAE19C62D18BD848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:19:d7:be:9a:b6:ba:1e:52:27:55:f2:a6:1b:
                    fb:c5:76:4a:04:bf:60:32:40:d3:a9:85:24:66:f6:
                    f4:b7:e9:c9:b5:45:70:2d:ed:43:cf:f7:30:b0:7c:
                    8b:42:0a:07:3b:ec:29:76:5d:fe:fb:d4:cc:0a:7e:
                    2e:af:a0:b9:59:7b:c4:8e:69:e3:5e:dd:fc:1c:9f:
                    c4:52:1e:da:a7:f7:ab:06:04:04:fd:a0:09:f2:cc:
                    53:f6:17:dc:51:6a:92:93:33:48:e1:d1:bf:7a:2c:
                    ed:49:ec:23:14:1d:9a:b3:98:f4:f3:e6:8c:d4:a2:
                    be:62:d5:fe:3b:26:97:4f:2b:da:04:3a:1f:6c:56:
                    54:e7:34:83:39:41:53:8e:b3:75:db:91:cd:72:15:
                    50:7d:9a:ef:12:7e:6a:be:06:f0:4c:d8:23:33:42:
                    a8:06:9a:ff:84:e3:48:7d:5d:a4:28:7d:1c:b9:de:
                    d4:a9:57:85:80:8c:ed:7d:19:99:8c:a5:58:3c:e9:
                    d4:2c:f7:00:87:3a:89:aa:7d:d0:0e:d4:12:b4:fb:
                    65:e6:57:17:3d:27:eb:a1:9d:68:5c:2e:1a:ef:4d:
                    f5:c9:87:13:7b:26:70:23:1a:94:21:89:d2:05:4d:
                    ee:ab:ca:f4:fc:12:7b:c9:e4:4b:db:75:1a:40:eb:
                    fa:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4E:DD:C3:A3:02:46:94:0F:53:C9:59:BA:E1:9C:62:D1:8B:D8:48
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142940.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a122::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:51:50:92:d1:ee:87:6e:bc:cf:9f:c4:bd:c0:1f:6b:44:e3:
         ac:d6:c8:76:45:ca:8b:3d:21:d2:1a:1d:cf:be:03:c7:7f:49:
         b0:95:d0:25:e8:16:c6:d0:61:89:a1:30:ef:a9:15:57:03:d8:
         2d:95:bc:82:85:63:bf:36:74:ed:a0:3c:b8:f1:33:5f:cb:6d:
         24:9b:33:7a:13:97:89:4f:5f:26:25:e2:5e:bd:bc:30:b3:1c:
         48:31:79:86:d2:7d:2a:c7:eb:c8:26:e2:4e:2c:71:9a:79:91:
         7f:57:00:2c:20:a2:06:55:3e:af:e2:fd:62:74:12:9b:e5:a2:
         80:a0:c7:bd:47:7a:c5:de:c1:93:c4:5d:07:e6:b9:fb:d2:82:
         ee:77:8b:1b:2d:55:0a:36:0a:85:b1:fa:f2:82:9d:7e:bd:90:
         ce:60:ef:be:0f:6f:3d:07:a7:98:a7:ff:43:2e:31:a8:1a:ae:
         0a:0a:c7:e4:37:e0:26:51:be:2b:6c:f6:8d:f1:46:fe:91:cb:
         c3:88:05:8c:6c:a8:02:36:a4:e4:a2:0b:bb:98:4f:3d:93:d2:
         e8:6a:f7:93:c2:a4:f1:69:0a:8a:dd:d4:40:26:21:95:4f:04:
         c0:87:c4:7f:ab:8a:16:13:1e:a2:e7:c3:77:5b:e7:ed:09:09:
         52:f5:f0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:39 2026 by rpki-client