Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142981.roa
File:                     AS142981.roa (raw, json)
Hash identifier:          dW5O5+D5Yt7iSUBYrLfcAZJZKGBw9dhJZ3jLsAwGcfM=
Subject key identifier:   90:9A:75:D9:DB:F0:FC:F6:BD:4E:6D:D5:27:E5:50:78:90:F7:1E:30
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7E687BEAA119FB16489C12CFB5851EBED263EFC8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142981.roa
Signing time:             Mon 25 May 2026 01:51:15 +0000
ROA not before:           Mon 25 May 2026 01:46:15 +0000
ROA not after:            Mon 24 May 2027 01:51:15 +0000
asID:                     142981
IP address blocks:        240a:a14b::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:68:7b:ea:a1:19:fb:16:48:9c:12:cf:b5:85:1e:be:d2:63:ef:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:15 2026 GMT
            Not After : May 24 01:51:15 2027 GMT
        Subject: CN=909A75D9DBF0FCF6BD4E6DD527E5507890F71E30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e7:80:e4:ea:6b:34:46:2b:3b:e0:4e:61:ee:
                    0f:d4:f7:f8:8a:e5:47:bf:e0:2e:23:34:3d:75:02:
                    d2:2b:5e:7f:35:af:f0:5a:8f:5f:bf:08:cd:09:9b:
                    7e:eb:64:86:df:3e:d9:3f:82:53:db:ef:d6:9d:a9:
                    31:e8:68:8e:6d:3c:02:cb:05:af:36:0b:c0:96:44:
                    75:98:72:2b:c6:6d:a4:be:7d:55:36:54:50:4d:91:
                    2e:2d:4a:fb:08:e9:1e:6e:1d:9e:30:54:01:b1:10:
                    35:78:82:06:17:7a:a5:0c:12:83:df:3f:6b:04:97:
                    8f:7b:65:6b:07:5e:d0:b7:b8:ab:11:f5:e5:13:67:
                    31:d6:51:1c:ce:b9:6d:3e:be:b4:bd:15:5c:da:84:
                    9d:d3:b0:01:f7:b0:e1:27:83:d5:11:be:fb:e7:eb:
                    a9:6c:60:74:8f:4d:a2:14:6f:e0:ef:1f:7d:d0:75:
                    fd:44:f9:12:ff:7d:1a:70:2c:2f:88:8a:c0:d6:bc:
                    0d:ac:e3:fa:93:f6:0d:1d:25:64:c1:16:c4:5f:7a:
                    81:00:fe:e7:ce:47:97:8e:62:3d:18:c6:05:89:2c:
                    01:26:90:41:45:c1:85:52:a2:a8:07:3f:76:6e:a3:
                    d6:4e:4d:60:dd:07:5a:52:28:c4:df:0b:d7:4e:e4:
                    d2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:9A:75:D9:DB:F0:FC:F6:BD:4E:6D:D5:27:E5:50:78:90:F7:1E:30
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142981.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a14b::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:68:ce:53:6c:c4:f1:f4:b0:b2:f3:f7:81:70:08:7c:91:47:
         81:9f:82:f0:b6:22:3f:f3:98:78:7f:a9:61:6b:d5:72:50:15:
         72:67:84:5f:c9:3e:3a:8c:9b:99:28:fa:42:5a:bd:18:b7:b8:
         75:cd:44:4d:59:85:1f:57:75:88:98:f7:ee:a3:90:66:5e:29:
         ff:d0:20:8c:08:eb:a1:88:3d:0d:e4:8a:ab:0b:f8:23:c6:83:
         a2:6f:a3:a4:92:f5:52:48:65:0e:6b:12:dc:92:f1:92:64:8c:
         06:55:72:8a:0c:53:5e:03:f1:af:93:7e:1d:ce:42:ff:02:24:
         52:bf:74:8d:f5:a5:46:f5:5c:1e:dc:b0:9b:0c:3c:ad:bf:56:
         b1:f9:79:6c:1b:a6:c3:f1:b7:e5:7e:45:3e:ad:6c:46:ca:ba:
         b6:af:a1:43:af:87:cc:8c:3b:ca:e3:ff:e3:91:17:4f:5e:27:
         1e:c4:38:94:e6:17:9d:67:3e:56:88:4b:69:be:07:d1:27:d6:
         4f:d2:9f:99:9d:5c:0f:8a:bf:d6:6e:12:18:2d:b4:c2:4e:3c:
         23:e6:79:05:37:94:40:f3:bf:51:2c:aa:80:74:b4:5a:24:f2:
         95:b0:89:4b:f0:6c:bf:91:af:c6:df:df:34:eb:b4:59:9e:8c:
         66:89:a5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:00 2026 by rpki-client