Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142962.roa
File:                     AS142962.roa (raw, json)
Hash identifier:          Oyh5Q3E0+CzTdc7qRXVQ5CU0F69awzK7EjcAw0nONuk=
Subject key identifier:   EA:10:20:DC:29:65:5C:8D:C4:F5:53:86:35:32:2D:1D:94:A6:CA:8C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7CB3863C48B415533C54863D26098F5D64DB4AD4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142962.roa
Signing time:             Tue 26 May 2026 01:13:05 +0000
ROA not before:           Tue 26 May 2026 01:08:05 +0000
ROA not after:            Tue 25 May 2027 01:13:05 +0000
asID:                     142962
IP address blocks:        240a:a138::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:b3:86:3c:48:b4:15:53:3c:54:86:3d:26:09:8f:5d:64:db:4a:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:08:05 2026 GMT
            Not After : May 25 01:13:05 2027 GMT
        Subject: CN=EA1020DC29655C8DC4F5538635322D1D94A6CA8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bd:99:3c:c7:b1:c8:60:33:3f:9c:de:e0:9f:
                    ea:82:37:64:33:f7:97:6c:8c:22:01:80:f9:fa:e4:
                    42:b8:24:d9:24:b0:af:15:5c:17:06:16:6e:43:ee:
                    26:6b:cf:6a:6d:b9:61:8f:0b:6b:9c:04:99:cd:8d:
                    b1:77:3e:d1:07:8a:be:7a:88:27:5a:4f:b9:b5:5d:
                    1d:b2:a1:b2:51:62:65:ec:21:f4:25:08:c3:85:d1:
                    b2:5b:83:9f:45:12:cb:d6:1b:12:45:dc:0f:ae:49:
                    d5:46:4a:1a:d8:3c:f1:af:80:fd:65:6e:02:00:05:
                    e3:77:df:a3:ff:e0:01:37:8a:e8:66:8b:8d:1c:d0:
                    e1:0b:63:a0:b5:9c:e2:bc:38:94:9c:8e:de:bf:df:
                    b9:9d:b7:2b:93:72:ac:cb:1e:0e:22:fb:bc:49:bc:
                    6c:c4:02:a5:2f:9d:87:49:82:cb:f9:7b:5c:f0:0a:
                    70:ee:e4:78:ea:3a:07:28:96:99:c3:df:60:38:2f:
                    72:cc:22:f0:4e:e8:ba:3c:4f:d5:b0:02:a0:60:07:
                    60:71:74:ee:f8:8c:07:b7:e1:02:a7:0c:2e:f7:9f:
                    ea:0d:7d:57:1d:29:ab:f6:e5:98:8c:29:28:66:19:
                    47:c0:47:8c:da:54:3f:31:ea:f1:cc:45:be:a6:f7:
                    f9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:10:20:DC:29:65:5C:8D:C4:F5:53:86:35:32:2D:1D:94:A6:CA:8C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142962.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a138::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:9b:0b:6a:93:3d:cb:08:f6:53:5d:67:10:eb:a3:46:84:57:
         81:b2:a4:4e:44:52:a8:84:5b:1f:e4:41:99:7e:43:53:56:44:
         83:ca:70:1d:ec:32:38:b3:b9:4b:18:6b:5d:db:a7:c0:78:7d:
         3a:eb:21:49:56:fd:94:e5:c8:90:7b:18:18:d6:df:75:d5:95:
         e8:bd:a8:89:2f:3f:db:ed:f0:69:df:d3:c8:d7:13:6f:c7:29:
         e5:90:26:22:96:18:82:de:91:b1:15:54:12:ae:06:28:05:43:
         c3:0e:fb:a2:77:5a:a7:c4:06:43:7a:bc:48:86:d5:a0:0f:44:
         81:3c:ba:23:ea:73:52:da:82:74:ad:94:df:57:35:b8:79:47:
         c1:ab:14:2f:38:c9:07:b7:8c:2a:9b:ec:bc:3f:7b:7a:d7:bc:
         9c:c0:25:38:ca:d3:48:3b:83:d3:b6:44:5c:a7:34:11:ec:8a:
         74:dc:af:44:28:85:71:bf:9d:e9:b1:91:85:d2:bd:19:67:61:
         fc:4d:38:e3:b5:9c:7b:46:88:9d:e5:6e:c0:ff:63:cd:4d:7c:
         cd:96:c9:8c:37:81:51:46:de:c9:c8:24:4f:aa:36:86:56:95:
         8f:28:c7:8f:33:b8:7e:ab:f2:01:58:be:6c:5d:9e:cd:fc:77:
         7f:6f:93:33
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUfLOGPEi0FVM8VIY9JgmPXWTbStQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMTA4MDVaFw0yNzA1MjUwMTEzMDVaMDMxMTAvBgNV
BAMTKEVBMTAyMERDMjk2NTVDOERDNEY1NTM4NjM1MzIyRDFEOTRBNkNBOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtvZk8x7HIYDM/nN7gn+qCN2Qz
95dsjCIBgPn65EK4JNkksK8VXBcGFm5D7iZrz2ptuWGPC2ucBJnNjbF3PtEHir56
iCdaT7m1XR2yobJRYmXsIfQlCMOF0bJbg59FEsvWGxJF3A+uSdVGShrYPPGvgP1l
bgIABeN336P/4AE3iuhmi40c0OELY6C1nOK8OJScjt6/37mdtyuTcqzLHg4i+7xJ
vGzEAqUvnYdJgsv5e1zwCnDu5HjqOgcolpnD32A4L3LMIvBO6Lo8T9WwAqBgB2Bx
dO74jAe34QKnDC73n+oNfVcdKav25ZiMKShmGUfAR4zaVD8x6vHMRb6m9/mVAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU6hAg3CllXI3E9VOGNTItHZSmyowwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyOTYyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqhODANBgkqhkiG9w0BAQsFAAOCAQEAppsL
apM9ywj2U11nEOujRoRXgbKkTkRSqIRbH+RBmX5DU1ZEg8pwHewyOLO5SxhrXdun
wHh9OushSVb9lOXIkHsYGNbfddWV6L2oiS8/2+3wad/TyNcTb8cp5ZAmIpYYgt6R
sRVUEq4GKAVDww77ondap8QGQ3q8SIbVoA9EgTy6I+pzUtqCdK2U31c1uHlHwasU
LzjJB7eMKpvsvD97ete8nMAlOMrTSDuD07ZEXKc0EeyKdNyvRCiFcb+d6bGRhdK9
GWdh/E0447Wce0aIneVuwP9jzU18zZbJjDeBUUbeycgkT6o2hlaVjyjHjzO4fqvy
AVi+bF2ezfx3f2+TMw==
-----END CERTIFICATE-----